Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: LPvDkte40aM8EWx672j57or0xxgC4Im0ssrDnkyRMmE=
Subject key identifier: 3B:26:D9:03:70:98:B7:05:F2:41:5C:76:50:F4:B6:C9:01:B0:97:03
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 019E1EA3D3FC32EABFDFF5F33A6E2875A3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0E1D
Signing time: Wed 13 May 2026 00:01:53 +0000
Manifest this update: Wed 13 May 2026 00:01:53 +0000
Manifest next update: Thu 14 May 2026 00:01:53 +0000
Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=)
2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: 56XS/x+YNeHS9AJqVAifEazgM8E1AL+mUkzZSiRwwq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:d3:fc:32:ea:bf:df:f5:f3:3a:6e:28:75:a3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: May 13 00:01:53 2026 GMT
Not After : May 14 00:01:53 2026 GMT
Subject: CN=3b26d9037098b705f2415c7650f4b6c901b09703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:f3:e2:a9:38:e8:d4:42:8e:13:7e:a8:82:
20:1d:a7:77:76:a5:b5:49:3f:c1:a5:f6:29:b9:de:
13:79:bc:ff:40:12:7c:38:84:09:1c:bc:45:66:61:
87:f3:8a:32:be:d3:36:fe:0d:c5:a6:2d:39:b7:26:
56:e8:f2:30:72:ce:e0:e5:f3:2b:74:33:98:0e:1d:
94:97:da:97:3b:a7:16:c5:a5:fb:b2:40:e8:0f:18:
dc:40:d3:d4:de:7d:ee:fd:de:6d:b9:60:18:af:4c:
c9:10:51:df:5c:ed:42:e1:a6:ae:dc:47:07:7e:09:
20:cd:8e:51:a9:fc:19:09:32:e4:a2:cd:10:fa:2d:
8a:d5:2d:05:9d:a5:71:95:d0:8c:75:52:c2:60:60:
64:0a:12:bf:14:a2:d7:c8:75:44:f0:ca:b0:ab:35:
a4:f3:ac:34:ce:d9:54:1f:a1:08:d5:e3:02:a4:a4:
ae:05:97:4e:78:09:34:19:9e:ae:eb:d8:c7:34:3a:
9a:9f:8d:19:e8:f8:e2:b1:6f:c2:46:6e:04:d1:02:
55:64:a4:36:43:f8:21:46:89:4d:10:6b:4e:9f:b8:
9c:a1:b6:8b:78:4d:af:da:89:6f:bf:fe:5d:e0:79:
97:f5:eb:ad:05:2b:92:74:18:fb:c6:e6:ef:c9:da:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:26:D9:03:70:98:B7:05:F2:41:5C:76:50:F4:B6:C9:01:B0:97:03
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1f:4d:c6:8c:fd:14:71:fb:ed:7a:aa:02:4d:45:ad:7a:2a:
4a:3e:b5:b7:9b:ea:da:ca:89:ea:db:66:c0:5d:bd:ab:e3:ad:
73:9c:ea:f7:d2:ec:71:83:fd:ba:02:b1:91:50:e7:e0:3d:de:
b8:e2:12:d4:7f:e4:46:8f:43:4e:d5:46:06:98:b9:4e:df:86:
de:41:d6:4a:43:16:dc:b2:2c:6e:78:a2:23:ed:2a:15:3c:93:
33:d4:75:8e:a4:ac:69:18:cd:29:e3:83:83:55:fc:1e:c9:87:
e7:eb:d8:10:b4:13:14:cb:f7:74:d4:39:1c:7e:8b:f0:f3:07:
02:e2:b7:4a:22:9d:0e:27:54:7e:16:06:c2:f9:78:75:b0:d0:
f4:51:51:64:08:2e:ad:f6:0a:e5:e4:25:5f:08:84:76:71:4f:
b4:a2:fe:bc:0c:65:7a:8d:13:be:7d:d6:a6:8d:98:ab:10:1c:
20:ba:2e:63:c3:ac:12:06:05:0d:5b:18:67:f5:3b:8a:f4:3a:
8f:10:e1:a6:8f:41:1a:6e:75:b2:6c:27:eb:f6:5c:ba:a6:11:
ba:46:3b:8c:b6:d4:be:b1:8b:a6:97:c2:b5:b5:57:b0:29:fc:
63:23:b6:f7:1e:36:8d:83:6e:e9:a3:a9:41:2b:9a:a0:1f:be:
7a:55:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:26 2026 by rpki-client