Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: N79chuIr9EZjWvy2eXmXtpdbBoaEscT6PUUb/FD3Iu4=
Subject key identifier: 38:A7:95:32:0C:11:9E:96:C1:DB:2D:E2:23:AB:B7:89:DA:E0:BB:FD
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019E1EA3550CF05DC2F5DF82B5FABF519CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0B83
Signing time: Wed 13 May 2026 00:01:20 +0000
Manifest this update: Wed 13 May 2026 00:01:20 +0000
Manifest next update: Thu 14 May 2026 00:01:20 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: /Nyu1bKkHYQRBfwaTrBBCL1lG1+i3qxr5ReWgEEFb+c=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:55:0c:f0:5d:c2:f5:df:82:b5:fa:bf:51:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: May 13 00:01:20 2026 GMT
Not After : May 14 00:01:20 2026 GMT
Subject: CN=38a795320c119e96c1db2de223abb789dae0bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:69:2d:d9:61:29:3e:5c:4f:5b:51:54:bd:
37:9e:85:32:ba:60:78:ba:e3:44:3a:4b:d7:75:de:
5f:ed:41:0a:95:8d:c1:5a:3e:88:1f:a8:e0:c4:89:
7a:1e:f5:be:0d:cc:f7:97:19:0d:72:b9:9e:1d:b8:
40:9e:6c:65:35:20:e0:14:e4:f3:b4:b2:93:a4:85:
c9:4d:ac:20:23:33:d1:7a:b9:d5:9c:60:b9:f9:f1:
a0:62:bb:f8:60:c0:44:4a:2f:30:29:b3:13:3c:a8:
19:65:16:c8:13:69:db:5e:ed:ab:eb:7b:9a:a2:fb:
ef:8b:4c:10:38:1b:af:95:1b:a9:aa:27:dc:92:39:
ee:0a:c8:bb:7f:31:d0:c4:3b:d0:c7:61:3c:8c:83:
06:97:e5:0e:f7:8e:31:9e:ab:3b:ed:b3:7b:1b:de:
29:f8:be:a2:90:8f:dd:42:63:55:92:05:b9:5f:13:
8a:5f:a8:dd:2e:ee:55:bb:f5:3b:cf:a5:4f:27:a1:
c5:f3:52:b8:61:5d:c4:50:71:48:19:e0:d0:c9:9b:
54:c7:24:66:a4:4d:fb:6e:b1:2e:fc:6a:c0:fb:97:
0c:85:11:11:75:b2:42:43:6a:03:77:66:94:10:10:
3a:12:25:93:31:4c:7c:51:c8:90:3d:2f:40:43:00:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:95:32:0C:11:9E:96:C1:DB:2D:E2:23:AB:B7:89:DA:E0:BB:FD
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e8:c8:27:33:5d:2d:b3:73:69:6b:24:de:9d:9f:59:4b:9d:
ee:15:fa:d8:6a:38:fb:43:10:c9:bd:a8:61:6e:21:a6:95:02:
ba:bd:80:43:d1:3a:13:43:ae:73:fa:01:06:6d:57:15:2d:70:
ed:c7:65:bf:db:68:4e:bd:e5:91:c7:b6:11:e1:89:ba:71:98:
3c:cf:50:c3:30:25:05:69:f6:25:f8:fa:9c:d5:10:2e:36:44:
d5:00:66:32:62:a0:a5:63:36:a3:b8:aa:46:bd:53:17:84:14:
4c:66:ee:eb:fa:32:af:13:ec:dd:96:86:b8:74:58:86:8f:07:
e3:35:13:26:e6:f7:fb:0b:b0:fe:af:c5:f8:fe:2f:a6:af:b8:
65:fa:3d:42:3d:a0:86:c2:5f:fc:1e:70:17:06:f6:00:bf:24:
42:c4:c6:cf:b5:f4:ae:4a:ad:fd:23:52:78:8c:89:8b:11:77:
06:9c:de:fa:df:62:e5:01:44:0d:39:fc:62:de:69:ab:5e:1b:
7f:15:30:58:51:c4:d3:d6:a6:3b:51:4d:08:76:f7:bf:e7:4b:
75:e2:73:03:3f:46:ec:ad:b6:22:6b:fe:dd:76:24:7e:21:22:
58:d2:26:87:32:9a:8c:e2:58:f4:8b:4e:a7:92:f9:5b:04:5a:
2d:b3:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:13 2026 by rpki-client