Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: JTWWsbd+iHxz2UaREBSATWAS5j1WF3D2UFXQIxE24vQ=
Subject key identifier: 56:75:FE:67:D5:84:C6:F4:14:55:BA:D3:5D:02:5C:91:53:74:D0:10
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019D9B1967356F1FD77DFC24A5D79E85BB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0601
Signing time: Fri 17 Apr 2026 11:00:26 +0000
Manifest this update: Fri 17 Apr 2026 11:00:26 +0000
Manifest next update: Sat 18 Apr 2026 11:00:26 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: K6h23Tycs44KPKPoVs7HL2NlQz933qp761heHaUC5SI=)
2: wkoUWQPmVypi2JIAAAcr8R61JzQ.roa (hash: NnrdTpNh2cKf1Rwj81mGLy32o/V9MF6hm/qy5VXigm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:67:35:6f:1f:d7:7d:fc:24:a5:d7:9e:85:bb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Apr 17 11:00:26 2026 GMT
Not After : Apr 18 11:00:26 2026 GMT
Subject: CN=5675fe67d584c6f41455bad35d025c915374d010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:4e:c7:fb:df:2c:1f:e3:df:f7:b2:b6:6d:
48:0f:1f:01:cb:fc:fd:44:57:50:09:ed:c4:b9:3e:
0e:0b:34:a2:e1:81:90:cd:3a:67:a0:97:7e:2b:f1:
4d:64:b3:d8:52:8f:47:47:63:56:02:dc:6a:c0:de:
ce:87:08:07:ab:0a:1f:2d:f7:87:81:9c:55:ca:87:
db:a1:2c:46:ad:6c:f8:44:de:17:98:a4:7c:71:ef:
3b:08:51:e4:c4:e0:cc:8b:47:3b:aa:d8:bf:3f:19:
22:1c:d9:38:53:20:b1:be:ea:c2:f6:36:2d:ba:74:
cc:4e:18:60:47:a3:ee:be:37:14:dd:06:79:5f:b9:
de:7c:3d:34:e1:3a:5d:62:fa:2a:6d:8b:b7:56:00:
8e:82:c4:75:e6:0b:4a:f8:e9:c5:76:b8:28:a7:7f:
33:bd:29:94:5c:0b:cb:ac:93:dc:c1:74:d9:22:a0:
c8:8d:f7:72:3a:0b:81:63:2d:c6:b5:df:21:43:83:
d7:77:36:3f:70:a5:40:43:87:66:df:d2:5a:97:30:
46:ee:4c:9e:5f:e4:bd:11:3f:93:ff:b4:39:41:07:
bf:c6:aa:21:96:10:25:64:72:80:7a:48:fd:40:9b:
a1:b5:16:e9:97:e1:21:82:c6:95:8e:c1:3e:f7:18:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:FE:67:D5:84:C6:F4:14:55:BA:D3:5D:02:5C:91:53:74:D0:10
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:51:d2:28:9c:da:ac:ae:16:23:fb:32:da:bd:57:6c:d2:19:
ba:fd:e6:8b:00:d4:58:51:d3:26:a7:4a:d4:21:e6:34:88:5e:
f2:d8:f4:8f:e0:4f:07:92:0d:3e:c9:36:6c:1c:84:68:b6:5c:
60:ca:e0:bd:c8:69:af:df:4e:ac:31:e3:98:95:33:f6:23:12:
ac:df:18:0d:79:08:49:fa:a1:51:9e:68:a8:dd:fd:5a:09:de:
2c:c9:0d:d8:92:aa:e6:02:82:24:89:06:00:a1:09:90:44:7a:
a8:19:1c:ab:27:7e:71:97:f5:20:3f:c0:b9:27:68:d4:02:cd:
ed:aa:79:c4:f5:ec:dd:86:be:96:8d:15:61:ce:d8:44:1d:59:
64:94:93:35:2d:1f:88:0e:a0:8a:c9:b9:86:db:76:a9:60:38:
c0:9f:eb:bf:6c:9c:dc:58:28:93:d6:42:15:70:55:3e:cb:bc:
13:16:5e:3c:da:ac:03:44:e6:a1:df:44:8d:fb:1d:91:3b:f0:
00:02:9f:97:88:e8:02:99:c7:27:ee:58:45:f7:6b:3d:e8:07:
88:98:71:c9:cd:a2:ef:8b:05:b9:2f:34:06:4a:c4:bb:0a:79:
8a:c5:78:d9:e7:d6:46:1c:6e:e1:c1:78:b8:7f:83:89:7b:d9:
92:99:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:26 2026 by rpki-client