Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: VlAunl9ZY7ANVocZnmR3/JirGoG0eHPL/3a6BT87VXQ=
Subject key identifier: 9E:C2:F3:E5:21:AA:9C:66:A2:05:21:0E:14:B0:97:9E:B3:12:F7:93
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019F935C409054EE089EA3ECB67B64CD5BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0C44
Signing time: Fri 24 Jul 2026 09:02:04 +0000
Manifest this update: Fri 24 Jul 2026 09:02:04 +0000
Manifest next update: Sat 25 Jul 2026 09:02:04 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: Nq4EV4VVLLp7Kex4FJq38w8Pj08pI4BFCmAQ8SG+7U8=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:40:90:54:ee:08:9e:a3:ec:b6:7b:64:cd:5b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jul 24 09:02:04 2026 GMT
Not After : Jul 25 09:02:04 2026 GMT
Subject: CN=9ec2f3e521aa9c66a205210e14b0979eb312f793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:97:93:a0:d9:8f:55:22:25:c0:8e:ea:de:
a6:0c:f9:cd:f7:a9:08:09:2d:c7:22:db:e6:a0:1d:
c5:72:d7:73:06:b8:82:76:e9:e3:57:1e:35:cd:d6:
5f:3a:5d:f6:d5:44:28:5d:0c:4f:2d:b6:f2:7a:fd:
dd:59:1c:48:d2:18:cf:50:79:ab:c7:44:7b:64:75:
8a:97:59:24:a1:8c:04:51:7b:03:33:ec:11:8f:95:
f9:ce:2f:5e:c8:18:48:ce:54:7f:8d:41:fc:b3:09:
6f:b5:7a:71:db:2c:42:58:f5:f0:8c:09:d1:82:22:
11:de:a3:54:01:ac:75:11:83:d4:28:98:e5:db:ed:
27:d3:e8:bd:49:27:de:aa:3c:94:aa:c7:5c:c6:02:
56:5d:78:6b:e3:b4:a8:dd:15:ef:ca:3a:62:98:4e:
c4:cc:35:3e:c6:9d:4b:8e:d4:3d:25:70:62:73:1e:
55:39:c9:ed:85:11:0c:a0:25:c9:f7:f5:18:02:a1:
82:93:3d:09:69:f2:08:53:d6:05:e6:93:ed:63:08:
cc:b5:a8:b2:61:fa:2b:e9:52:bd:13:2e:33:d5:bd:
b9:1f:3c:ab:94:04:19:e1:83:47:80:a9:56:28:65:
ad:59:2e:4a:4a:63:2b:3b:d8:ea:81:0a:0a:9e:26:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:F3:E5:21:AA:9C:66:A2:05:21:0E:14:B0:97:9E:B3:12:F7:93
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e7:3c:f9:60:31:fd:25:44:da:fe:df:23:39:0b:e1:fa:1b:
17:1a:63:1e:59:8a:cd:40:08:09:e1:d0:39:75:6b:ba:0c:f8:
8e:44:2d:11:e1:c0:93:e1:53:64:6a:a5:6e:df:82:79:df:07:
93:77:c7:01:d1:d9:35:94:5c:22:33:55:1e:dc:f4:38:8a:16:
62:ad:38:c4:fe:83:0c:99:77:ad:16:72:32:09:ab:d1:39:b8:
cf:a6:c8:d7:3b:92:42:ba:96:fb:01:e6:1e:7f:da:48:b0:a1:
8a:65:b3:d8:5a:91:3c:c1:d1:bb:cf:2d:b8:05:6a:98:8b:fa:
e7:64:b5:ce:a9:32:1e:2f:25:10:d5:fe:75:22:26:23:d1:96:
5c:5e:c0:1e:a4:5e:56:20:0e:58:22:f6:81:67:fa:29:b2:80:
12:50:3e:ed:6d:82:0b:e8:75:44:0b:e4:1a:bd:3b:ff:83:8a:
9b:5b:98:8c:14:44:97:ae:e5:79:d2:56:e5:ea:88:48:2c:23:
90:5e:1b:ff:c0:5d:65:17:0e:02:db:14:8c:27:0d:e8:d5:0e:
a5:0c:f2:4e:1f:bb:52:26:f0:5b:01:7c:53:f1:20:78:5e:6b:
29:d9:0b:ea:46:e0:50:68:a4:c0:58:47:eb:b3:ed:a6:87:b5:
dc:18:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:18 2026 by rpki-client