Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: q8wDwUYTSyyL8tFmM1uG2zsr1mg9ifbWpUz729NzJoY=
Subject key identifier: 07:89:31:3F:0A:60:DB:83:07:0A:57:1D:BF:83:DA:3C:16:32:04:64
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 01A0D9BB2F7639873D413C6A2840841449A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0F87
Signing time: Fri 25 Sep 2026 18:01:57 +0000
Manifest this update: Fri 25 Sep 2026 18:01:57 +0000
Manifest next update: Sat 26 Sep 2026 18:01:57 +0000
Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=)
2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: ZrisJzfaT063fZs2cBfZbZuIa3ugCKDm8x0lwNQNfsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:2f:76:39:87:3d:41:3c:6a:28:40:84:14:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Sep 25 18:01:57 2026 GMT
Not After : Sep 26 18:01:57 2026 GMT
Subject: CN=0789313f0a60db83070a571dbf83da3c16320464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:5d:3a:1e:36:90:70:e9:e5:25:45:5f:17:
0a:49:10:b2:f1:65:7e:8d:ba:79:8a:bc:d9:63:f1:
ad:be:54:e7:57:70:c8:30:94:04:a9:de:24:f9:16:
a9:d0:83:3d:02:ba:d7:0c:8b:b3:96:72:f2:d0:c2:
46:d5:e3:e5:b2:67:6f:3d:9c:d6:3e:8a:d4:2e:1c:
68:4f:4c:22:c6:51:ca:1b:bc:d2:c7:21:94:1c:0a:
c7:c7:13:ce:04:16:f2:4f:e2:4c:54:04:21:6c:c8:
aa:b8:7a:79:b9:7d:f6:4c:48:a6:51:8b:06:ef:6a:
cc:4a:36:f9:6a:2f:55:b2:84:65:1c:33:36:d3:54:
05:b4:d4:c2:d3:ea:73:c8:3e:92:2f:1e:ac:06:5a:
54:84:55:66:42:93:5e:c8:0c:fd:2b:4f:56:3d:c0:
ff:fe:d0:0a:32:7b:8d:57:43:27:67:58:80:c0:65:
dc:71:c6:d1:63:b3:62:2e:e4:5a:05:da:f1:0d:e4:
65:ad:ed:44:12:14:ec:c9:84:49:9d:c9:02:df:e9:
a3:4f:11:71:53:56:44:35:3b:c9:2a:65:e4:a0:ec:
e9:9f:21:1a:ff:67:1b:45:11:24:af:f0:ac:b5:c9:
4d:b3:11:7c:fc:4c:bd:90:65:3a:b5:99:15:99:d9:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:31:3F:0A:60:DB:83:07:0A:57:1D:BF:83:DA:3C:16:32:04:64
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f2:36:6e:89:2f:64:a5:1f:8d:53:0f:1a:30:92:ac:fe:8d:
36:ed:22:ad:34:00:5a:01:a0:ae:d1:42:35:e0:86:41:68:eb:
b7:22:70:fa:a9:9f:7f:f3:33:f3:1e:0a:4d:6c:73:29:60:55:
8c:67:4c:ae:23:fb:6c:e4:43:4f:41:59:62:b5:8e:8c:fe:e5:
54:8a:07:7e:28:0a:e4:0f:63:88:f3:b8:b6:c6:3a:73:7c:5e:
4f:60:7b:4a:3f:9f:50:de:87:3c:3b:a9:48:d1:dd:c1:a7:18:
5c:f4:8d:8b:dc:c2:a8:44:1c:e5:2a:e6:8e:72:01:c7:10:ac:
8c:7e:0f:1c:18:c5:22:1a:7c:d8:be:02:85:29:b9:46:31:84:
36:84:fd:73:4b:43:fb:37:d0:23:b0:30:70:db:11:2c:f5:9a:
7a:a5:ca:0f:9c:db:bf:9b:6e:0c:ed:73:4d:81:97:12:b4:72:
f6:b3:bd:0a:88:ec:3f:e9:f5:12:bc:17:f7:9f:70:2c:be:af:
8d:16:70:71:7a:3a:26:c6:63:fb:76:24:bc:7e:b1:24:e5:3f:
ec:45:fc:34:c2:c8:9f:1e:7b:04:23:94:b1:ce:27:7d:df:1c:
dc:3a:e8:81:bf:0c:16:62:6f:62:55:97:ab:65:13:84:39:bb:
1e:d5:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:10:02 2026 by rpki-client