Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: iRTKRFRTKeakuHMkgFD6OLbAlVwZZTM5DuGsEF8EB8w=
Subject key identifier: C5:6D:2F:D7:D2:20:28:47:6D:C6:3D:D7:9B:6A:44:EF:03:F8:D0:48
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01A0D9BB5F529E2A6546475AFE0747B21264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0CED
Signing time: Fri 25 Sep 2026 18:02:10 +0000
Manifest this update: Fri 25 Sep 2026 18:02:10 +0000
Manifest next update: Sat 26 Sep 2026 18:02:10 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: fAH1kHD1OgWOJngNkA9eaNkP7Qp5qKw62UYafeyl+Ps=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:5f:52:9e:2a:65:46:47:5a:fe:07:47:b2:12:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Sep 25 18:02:10 2026 GMT
Not After : Sep 26 18:02:10 2026 GMT
Subject: CN=c56d2fd7d22028476dc63dd79b6a44ef03f8d048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:6c:9d:e1:f9:05:04:46:21:17:21:11:2c:
ee:a2:bd:6f:85:c9:3c:6b:6f:d9:6c:2a:a8:3e:53:
0d:97:c0:ff:da:ad:2f:6b:21:b7:95:53:e8:29:b3:
61:13:54:bd:50:7e:ce:c1:52:d3:ae:6d:cc:42:e0:
24:7c:6e:51:23:03:db:ff:03:ae:15:42:3d:1f:4d:
e3:aa:98:51:ab:60:4b:84:00:4e:71:d5:8f:9b:53:
62:91:47:a7:3d:e9:d0:2d:a9:50:b0:46:79:8a:c2:
cc:9a:7f:b4:3c:60:fd:4a:eb:11:49:16:09:27:c7:
5f:52:5e:2e:d1:57:4d:fd:99:d9:0e:f8:1f:ff:b9:
c3:4b:4a:c9:15:d4:26:fa:f5:72:74:e8:07:c7:6b:
d7:76:38:89:c5:0d:5e:1f:f0:83:46:11:fe:0c:07:
a4:48:0b:3b:6e:58:5d:00:55:51:5d:f5:bf:36:e2:
03:c6:52:4a:6f:ac:d7:30:f1:7e:76:a9:28:a2:73:
48:e2:7d:d2:ff:8f:4a:09:d4:69:33:72:ad:5e:14:
95:ae:83:31:13:cd:72:6e:a3:a9:bf:8a:7b:63:12:
5a:15:88:f2:e2:07:21:ed:60:18:d5:5e:41:a4:b2:
be:b5:2f:23:53:0e:86:63:63:80:8f:b9:97:2b:fd:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6D:2F:D7:D2:20:28:47:6D:C6:3D:D7:9B:6A:44:EF:03:F8:D0:48
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:98:ab:6e:7a:c0:cf:12:bc:d4:20:4b:6f:1e:87:f7:eb:eb:
dd:df:79:20:72:cc:bb:3d:af:d0:8e:a1:43:c3:ec:b1:3b:af:
f7:64:d1:3f:8f:6b:98:41:13:43:31:42:b5:75:ce:0c:73:9e:
8d:7b:46:25:c4:80:00:4b:d9:97:c7:70:ad:17:11:d9:fc:b4:
dd:a4:9a:59:b1:1d:ff:37:75:93:22:dd:3e:c1:0c:fd:01:b0:
83:74:d6:0a:41:63:e1:0c:26:cf:49:b8:9e:e2:09:64:4c:ac:
08:82:86:2c:e8:17:50:78:b6:49:3f:3a:05:3c:7e:d9:0e:80:
74:fd:d4:e4:9d:f2:72:8d:94:a3:45:84:d1:46:83:03:0b:b3:
91:58:64:7b:06:52:46:40:bb:ad:8e:80:91:c5:64:81:d8:47:
ca:58:5c:21:d1:7f:67:78:fc:a5:eb:45:58:2a:54:3a:40:22:
37:e1:ce:2c:a8:3e:ca:00:eb:3b:fb:6f:0f:c6:cb:2e:f4:bd:
be:73:8a:40:b3:0b:24:b0:6e:97:2e:9d:60:53:85:4c:6b:89:
ad:a6:29:33:bc:f2:0a:c3:7f:18:d0:5f:61:64:c5:58:4c:b8:
fb:60:67:79:cd:eb:ea:19:68:50:c9:ad:bd:56:85:74:86:51:
c5:bd:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:21:37 2026 by rpki-client