Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: ZiHHoDGiKvkfPF/ywquqOInW3CFV0J34xIwrSlsmHXg=
Subject key identifier: EF:6A:AC:CC:68:82:AD:7D:BC:21:20:3D:BD:0B:C1:95:18:96:34:F8
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019CAD9069996C8F052993C2A75850F4CD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0586
Signing time: Mon 02 Mar 2026 08:00:48 +0000
Manifest this update: Mon 02 Mar 2026 08:00:48 +0000
Manifest next update: Tue 03 Mar 2026 08:00:48 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: CQ8vqlOSSlIy6nQA2zzNEHD4P9M7kQ3wM5OtISXh/0s=)
2: wkoUWQPmVypi2JIAAAcr8R61JzQ.roa (hash: NnrdTpNh2cKf1Rwj81mGLy32o/V9MF6hm/qy5VXigm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:69:99:6c:8f:05:29:93:c2:a7:58:50:f4:cd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Mar 2 08:00:48 2026 GMT
Not After : Mar 3 08:00:48 2026 GMT
Subject: CN=ef6aaccc6882ad7dbc21203dbd0bc195189634f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:ba:4e:c4:81:c9:c5:38:ad:9e:ea:61:bc:
07:c4:9a:51:f2:c8:23:85:87:04:87:e5:6d:e8:59:
43:49:de:3f:21:48:1c:07:cc:a2:6a:2e:91:a1:70:
f3:6d:f1:73:31:3a:8d:dd:4a:f5:1b:83:48:54:dd:
34:ef:ac:e0:37:bd:04:97:dc:29:f0:2e:fb:b2:51:
ef:7c:d6:5a:3a:1b:65:02:1f:e2:61:b3:40:fb:89:
59:12:1f:ec:4d:bd:0d:97:35:c5:37:a0:24:b9:a0:
40:93:dd:52:b2:61:66:34:ec:bd:98:23:10:05:3f:
b1:df:59:c5:bf:c0:1b:c5:c6:4e:fa:9e:c7:e0:f8:
76:8a:dc:0b:25:7a:d1:4f:63:b3:f1:90:8e:6a:3f:
32:87:74:61:74:b1:71:37:1c:f8:00:61:c4:a0:b7:
7e:33:67:13:b7:62:c4:8a:c5:54:4d:e9:d1:71:2f:
d7:23:d6:24:db:8f:cf:21:79:f0:3d:3b:1b:5a:ca:
f1:09:c4:a0:4d:c2:8b:b7:3b:bb:de:4b:37:94:e4:
1e:50:97:3b:e4:d6:54:77:7b:f6:37:68:02:5e:bf:
5c:63:e1:56:56:cf:92:11:b3:24:eb:0e:e0:d5:e0:
b0:2d:21:4b:d9:e2:f2:75:06:50:e6:01:d9:25:44:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:AC:CC:68:82:AD:7D:BC:21:20:3D:BD:0B:C1:95:18:96:34:F8
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:26:bf:6d:66:98:bb:ca:b3:b1:fb:da:7d:e3:be:6a:a6:30:
b2:d9:84:9d:6a:89:30:73:f0:09:31:05:ef:42:1e:f1:70:11:
74:b9:95:07:49:2d:f6:e0:6b:95:b7:31:8a:30:9c:03:69:f1:
bc:fc:86:76:73:0e:43:24:5a:46:ed:7f:6c:36:3a:59:3b:32:
57:eb:04:9e:c4:53:56:7f:9e:ac:1d:dd:20:c3:20:b6:40:cd:
2a:61:9f:85:ff:38:5a:4b:3a:1f:ec:21:d8:86:79:a8:c1:10:
93:ea:2f:6c:a4:49:8c:48:e5:54:9a:3b:a4:63:c5:67:29:92:
5b:db:55:10:36:26:e8:41:2f:5d:80:80:93:2d:72:76:c6:53:
8c:3d:7e:af:fb:ae:03:21:2b:81:98:32:73:92:8a:36:1a:a2:
54:ba:7d:56:67:bd:51:d4:99:20:e2:0f:94:2c:22:a0:ec:53:
81:c7:a0:7d:3d:b3:85:5d:5d:8c:c6:51:d0:e3:19:a6:8e:75:
58:91:78:53:e7:7e:55:8e:0a:4a:ba:04:99:20:ef:28:65:ba:
93:88:1f:f3:67:0a:8e:32:6c:eb:57:55:e4:53:e3:4a:00:4c:
75:e7:07:aa:e2:9e:b5:f8:d4:d3:99:58:75:6e:a7:0f:a6:63:
2e:35:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:48 2026 by rpki-client