Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: 5z6FbrYrvym3IayVPzrl2SwgRf1JRWsBXGa5MiKKuyA=
Subject key identifier: FC:F2:46:64:DD:AC:C2:0E:92:42:FB:62:16:CF:74:40:E8:56:C9:F9
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019D33080CC64E1D71E3C2CAA50C067B6514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0DA3
Signing time: Sat 28 Mar 2026 06:00:58 +0000
Manifest this update: Sat 28 Mar 2026 06:00:58 +0000
Manifest next update: Sun 29 Mar 2026 06:00:58 +0000
Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=)
2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: z+MYANZZzcDjSrT5gkghRE+ZlJRxCfTBiEiSegxIuuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:0c:c6:4e:1d:71:e3:c2:ca:a5:0c:06:7b:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Mar 28 06:00:58 2026 GMT
Not After : Mar 29 06:00:58 2026 GMT
Subject: CN=fcf24664ddacc20e9242fb6216cf7440e856c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:43:8a:97:82:e7:42:5e:5c:20:36:f0:2e:
cd:63:3a:b9:b5:13:1a:2d:d0:f8:81:40:bb:70:08:
9c:3b:eb:ff:66:89:40:b2:58:28:80:c7:3f:6c:d3:
9b:f2:a9:ba:5c:6d:c0:6a:a1:35:36:3c:c8:1a:3a:
55:35:0b:5b:f3:b7:50:7d:c2:cc:08:37:d7:72:b6:
92:8c:4a:62:1b:f0:64:10:f7:f5:d8:42:cd:12:f9:
04:72:a8:85:c1:08:fb:5e:c9:68:14:96:95:ea:b9:
52:bf:74:90:cb:01:74:59:a5:de:87:80:48:0a:40:
fb:e6:fc:4d:f3:27:f1:16:5b:63:10:29:13:f8:5e:
ef:9d:80:65:e3:d7:85:5f:a3:4f:62:b4:fe:18:2b:
2f:4c:2c:00:fa:14:d0:13:ac:0a:56:b4:18:af:34:
a5:bd:cb:c3:5c:8f:ec:fd:fd:1d:f0:e1:c3:ea:ed:
b4:1e:22:c9:43:eb:69:19:c0:02:ac:ac:9b:bf:b4:
1d:d8:a9:43:2b:8e:df:37:b7:14:12:cb:50:69:bb:
0d:69:e9:b4:65:99:e5:85:0d:b0:6b:99:c6:14:71:
c5:d6:0e:29:04:83:61:bf:c2:4e:81:07:a9:cb:23:
9a:32:55:43:fd:0e:1e:66:57:bd:80:23:5c:f8:e3:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F2:46:64:DD:AC:C2:0E:92:42:FB:62:16:CF:74:40:E8:56:C9:F9
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8e:40:f0:3b:b7:91:36:63:2f:68:18:1b:4e:d9:ad:11:b5:
a4:b9:c2:53:92:ca:99:15:95:51:f0:bd:e3:5f:54:91:61:1c:
a2:e8:37:45:a7:13:13:c0:68:ef:59:58:35:00:fc:28:8e:e7:
b3:0e:f8:cb:65:67:9c:a0:1d:4c:8f:b3:ca:ab:99:51:40:73:
6e:df:bb:9f:a5:b7:3c:0d:84:21:e5:38:92:7f:ce:13:f9:09:
bb:65:d2:cc:e7:65:b1:65:e4:0e:cb:f7:58:12:86:4b:bf:52:
ee:66:3d:02:48:d4:73:2f:c7:3a:ee:46:6c:bf:75:44:a7:0f:
03:31:cb:e6:b3:a7:ed:db:1c:ad:a2:9d:aa:11:5b:3a:63:37:
a6:3b:89:a8:e2:2e:0d:6c:16:38:a2:c3:36:01:55:d5:eb:c1:
b4:10:07:e0:28:c6:f7:66:ba:fe:d6:91:75:f3:cd:7d:bd:f9:
d6:3b:8a:d2:b7:e7:53:05:7c:41:3f:bb:ec:72:8b:59:ff:11:
1f:f6:6a:01:62:a3:8a:aa:39:dc:df:f2:e1:d8:ee:5b:82:61:
02:c7:83:e0:63:70:de:82:ca:60:e2:b5:74:46:1f:92:92:4e:
2c:51:9b:9f:9f:aa:b5:14:45:32:a6:70:ed:27:17:e4:fa:ea:
a2:4d:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:58 2026 by rpki-client