Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: sFaan1tjrRaOaCDLh5m387qgJKCjEI/i1CRdeB0KHxQ=
Subject key identifier: 50:D7:BA:68:0F:72:B9:87:39:48:D6:15:BA:43:F2:65:3A:0D:C9:C6
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019D2583832B806E0AF9E9D5F56C40BBC79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0B02
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: AFp4S7R8Nt6Z98doN6EIC5bQS3lPRhhTQavHih9LIFM=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:83:2b:80:6e:0a:f9:e9:d5:f5:6c:40:bb:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=50d7ba680f72b9873948d615ba43f2653a0dc9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:b6:f6:20:5d:45:c5:e7:87:e8:6b:fa:53:
3b:05:4b:ff:52:9b:b5:03:9f:d7:83:cb:1b:fe:56:
91:0c:70:b1:54:94:5a:30:75:db:24:c9:f9:3c:01:
23:6c:f9:54:c8:b5:4c:15:a9:1e:de:c4:da:b8:6c:
51:52:e2:1a:f9:a6:0a:15:f0:0b:76:1a:0a:7d:7c:
09:ac:44:e2:e0:de:82:cc:bc:6c:5f:88:59:71:f2:
8b:31:1c:1f:9b:14:50:c6:fc:f1:bf:3d:55:d3:0b:
e0:f1:43:64:af:9b:f9:7f:dd:d1:b7:8f:21:94:db:
f8:11:e9:f0:3c:e2:72:31:12:97:69:ce:07:96:cf:
e1:c4:6c:fe:f5:b8:52:1e:ad:46:e2:7a:52:62:3b:
e9:54:e3:c2:c7:39:15:39:f6:00:6e:17:d6:db:48:
5c:bb:a2:5d:8a:aa:8b:3c:ca:a5:de:2d:57:8b:34:
fa:44:12:30:3b:25:82:e3:e8:52:af:9c:32:1c:d3:
da:69:87:1e:ba:d9:f7:2d:d0:72:11:65:e7:5d:cc:
c2:4f:f1:e8:43:74:49:c6:98:71:e3:5d:94:cb:32:
05:d7:f9:78:44:cc:b9:ef:11:76:27:c1:3a:99:43:
14:61:ce:dd:33:8a:1b:86:ee:c4:5b:fc:d0:7e:57:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:BA:68:0F:72:B9:87:39:48:D6:15:BA:43:F2:65:3A:0D:C9:C6
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cc:58:f7:aa:c9:75:2d:25:71:f6:87:0a:9b:0c:a3:9c:de:
e7:3f:d3:f9:e6:7e:2c:38:30:68:ee:fa:9c:81:35:2b:6c:04:
f6:b2:df:2d:57:d7:13:76:f7:78:93:e9:69:6f:6b:5e:3c:c9:
e0:79:71:82:7f:ad:ac:78:f9:1b:ab:ec:c3:b8:a5:61:d8:63:
b5:86:5e:05:bc:69:15:f1:07:22:32:4c:d5:bc:ad:b5:29:d1:
4e:63:43:1f:d2:9d:32:4d:b2:6d:9a:50:98:69:6e:aa:94:2e:
d4:09:e4:6a:32:f1:1e:7c:2f:2e:10:3b:b1:06:f3:83:2f:e4:
99:a4:74:a7:a4:37:6a:b5:15:fc:a8:7c:6f:7c:3e:e2:54:e5:
8c:d7:e9:61:6b:bd:28:09:6a:d7:aa:e5:c4:a7:f8:be:b2:d4:
20:b2:bb:0f:cc:5d:df:42:48:b9:20:ee:aa:cc:d2:3e:9b:63:
6b:9e:2c:bc:14:ff:4e:b2:ca:8d:e0:b3:a2:37:16:47:91:2b:
06:80:5e:59:d4:24:af:8b:9d:f9:a9:fb:c7:34:f2:98:b8:e8:
a5:9a:29:1d:c1:94:15:6f:b1:e1:f9:9a:37:e7:b1:18:55:54:
69:43:f8:88:a6:a2:39:eb:05:09:e3:20:f4:87:6f:46:ab:4f:
03:93:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:42 2026 by rpki-client