Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: PLanCeiEyReruv6P6O9fwbZjprTLykxU1WhGr1D5mJw=
Subject key identifier: F3:4C:71:51:C9:68:90:98:48:25:F1:65:0D:51:A0:40:FE:3C:70:88
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 019D2B1751045B06770BF53C7BE405DECDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 05C7
Signing time: Thu 26 Mar 2026 17:00:41 +0000
Manifest this update: Thu 26 Mar 2026 17:00:41 +0000
Manifest next update: Fri 27 Mar 2026 17:00:41 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: ccy37WO9KHzNNUxQ7ZAh4JZRUrWObXhNL17s2ZbIS7s=)
2: wkoUWQPmVypi2JIAAAcr8R61JzQ.roa (hash: NnrdTpNh2cKf1Rwj81mGLy32o/V9MF6hm/qy5VXigm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:51:04:5b:06:77:0b:f5:3c:7b:e4:05:de:cd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Mar 26 17:00:41 2026 GMT
Not After : Mar 27 17:00:41 2026 GMT
Subject: CN=f34c7151c96890984825f1650d51a040fe3c7088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:0e:50:22:dd:b4:80:45:1f:fb:29:e5:48:
9a:57:96:f0:aa:14:5c:b7:e7:41:3f:3e:eb:0d:7f:
2f:12:8b:32:c9:a6:06:57:4a:9b:83:75:83:17:d1:
6f:78:11:19:ff:9e:2c:f1:a1:c4:89:61:2f:50:36:
30:97:cf:d2:bf:ba:e8:cc:8e:2d:7d:b1:2d:ff:b0:
fa:55:a4:22:82:25:51:be:5c:ec:ca:0d:33:01:9f:
a0:1c:71:da:44:2f:89:23:af:33:28:fb:18:17:c7:
87:20:f5:84:a6:aa:75:12:8b:2c:85:94:b8:70:6f:
ed:21:f1:f9:d0:6c:a9:ea:76:7a:00:63:0d:0b:3d:
7c:07:18:f7:66:96:bc:99:c3:1f:b7:9e:14:b5:d1:
c8:e9:4d:8c:dd:fb:f1:06:3b:22:8a:25:91:de:ce:
65:3d:93:25:63:8b:c7:99:ed:6a:2e:24:af:bc:c1:
be:cc:c5:eb:90:b5:d5:4f:61:44:d0:9e:7e:58:be:
e7:72:cd:99:8e:af:ca:40:47:a8:21:a8:3e:c5:6a:
50:f0:e7:d4:69:73:ca:92:c1:d8:0d:33:8c:d2:8e:
80:50:7d:b8:67:52:54:5d:f9:dc:2a:7b:68:1e:9d:
89:ca:dd:fb:ea:45:4a:c7:71:d6:e8:b2:82:39:12:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4C:71:51:C9:68:90:98:48:25:F1:65:0D:51:A0:40:FE:3C:70:88
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:38:d1:99:67:0d:21:44:88:20:4d:b9:95:37:35:a8:64:83:
61:8a:6b:9a:bf:fd:64:16:ac:2c:70:36:18:4a:e0:f1:93:51:
42:35:d2:e0:01:b9:32:d1:33:80:79:5a:06:73:e3:6f:b2:f9:
a5:02:9e:8a:5e:e9:8b:a1:0e:c1:ef:17:08:5a:9c:4d:80:01:
64:43:9c:d2:c9:c6:89:24:48:a0:88:cc:a5:75:ec:01:a7:b1:
d2:49:8a:f5:1a:93:c9:07:b9:6f:32:fa:ec:04:4d:ed:66:43:
42:88:18:b8:e2:a8:a7:00:d2:af:4f:be:f5:e3:ac:fa:c3:c1:
2d:ce:4e:84:84:33:02:bc:d3:1d:b3:0e:0e:48:65:ad:e0:13:
8b:87:b6:0f:6c:2e:8b:f2:d5:36:18:49:5d:d9:a3:8e:3c:89:
9b:6b:9e:56:08:77:30:ba:59:1a:68:79:36:84:c3:3b:d6:f7:
19:2a:ac:2b:4e:04:ff:b7:31:53:f9:f4:e9:07:95:06:d6:b4:
39:17:3a:bc:a9:ba:85:4c:fb:5c:74:61:e9:7a:df:1e:2f:fb:
d5:a8:c0:0d:d7:59:1b:85:e1:54:74:98:02:05:4c:6d:86:b1:
05:75:49:e2:5c:08:d0:b3:fe:7a:f7:6d:1e:4f:11:6b:54:65:
07:50:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:38 2026 by rpki-client