Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: rtVVmBU52Slm1dfZw4vO4CxF0kQE1IP1n7eC+I2mFCA=
Subject key identifier: 63:17:63:7F:C5:88:A3:52:04:A9:DF:8F:52:0F:B9:78:0E:FE:71:02
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 019D28167A575B48F82570936BD9DC1039D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0DB0
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: GX1eu_6zpwR6clx_FqqeJBPN_Mo.roa (hash: inOvGcMs2Q+xEP7avmV2EhXxbklbjFv+dUq+zEBdcig=)
2: P7kPB37r9r72-mJgBxJftOWF64M.roa (hash: 2/cBpl7XQw4f9+xbj+/dYArmRAIbH19CMO7EVq172A8=)
3: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: BsAqUqjAWZu5rtjgazyIn9mb2jNZFPlo5OFGWJdwIsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7a:57:5b:48:f8:25:70:93:6b:d9:dc:10:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=6317637fc588a35204a9df8f520fb9780efe7102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:2f:ef:78:04:e6:ae:18:a3:fc:28:74:7c:
ba:8b:ef:83:30:e3:3a:1f:f9:99:33:59:bf:e6:0d:
07:ea:39:7d:24:1d:54:2a:ae:7a:ec:32:d9:8c:e3:
ae:b4:03:24:08:0a:dd:f7:0e:15:5f:bc:fc:65:7c:
13:a4:66:60:3e:34:8b:99:3b:14:c2:f6:e8:01:5f:
80:3c:50:a3:38:33:56:8f:bf:47:17:82:fb:cb:0e:
f6:bd:f1:ef:28:a9:69:0d:3c:f8:fd:3f:67:95:3b:
6c:3d:04:05:07:3f:43:7e:b7:4b:1e:6f:c8:f6:04:
65:a6:a6:df:a3:b7:c8:9d:60:94:7b:2a:bf:d5:ed:
ca:f7:06:3b:57:05:00:17:36:27:bf:9e:10:8d:30:
dc:5f:01:a4:d0:2c:4c:9a:cd:f8:32:c1:7b:11:6c:
f1:59:72:df:aa:28:a7:95:a8:93:b4:e9:9b:5b:f1:
25:0e:a9:37:2c:ee:40:a6:6d:eb:91:40:85:4d:41:
72:9f:21:67:b9:d6:8c:7a:bf:1b:9e:a7:65:97:48:
8f:a8:9b:f7:1e:8e:83:f2:a9:70:24:11:d9:35:7a:
58:e3:fc:03:08:1d:8e:c5:c1:03:ea:4b:58:ba:bb:
7a:b1:88:c9:71:4f:07:87:82:05:50:35:72:a0:70:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:63:7F:C5:88:A3:52:04:A9:DF:8F:52:0F:B9:78:0E:FE:71:02
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c0:59:b9:87:e2:e9:be:6e:1c:04:60:14:f3:85:66:0b:bd:
b4:2c:f4:e1:96:24:6c:f8:10:93:b0:68:ee:1b:a2:56:d7:e9:
ef:5a:d1:12:86:ba:5a:a6:13:b3:cf:d2:37:b6:dd:5f:57:3a:
ac:b1:9d:8e:dd:ba:5c:70:4f:a5:ef:b3:02:74:d4:3d:b2:71:
d7:5a:c4:a1:b5:26:d3:c0:0b:0d:9c:97:00:7a:f7:91:30:b1:
26:2b:3b:dd:e6:61:21:a9:99:95:ac:05:c8:e3:65:e1:86:68:
c5:1f:dd:ef:93:0e:d5:a8:28:0f:66:4c:b7:08:e0:aa:05:94:
21:57:b5:81:fb:b0:63:ba:17:96:eb:e1:4c:0e:6d:7e:c7:6e:
a2:cb:34:27:78:d2:28:c9:2f:c8:bd:0d:82:a7:42:78:5b:16:
61:6e:95:76:0f:b7:43:2f:6c:3e:a0:7d:4f:ec:f1:0a:ef:42:
8f:ca:c3:f8:79:f6:f6:86:42:33:ec:39:81:83:03:ab:7a:2a:
4b:8e:cb:fe:5a:57:1c:85:18:7a:8c:4f:76:66:59:00:bc:c3:
12:8a:b3:76:89:8e:06:52:b7:c1:07:04:c9:c7:8c:78:5e:6b:
64:fe:ad:b3:97:44:70:0a:ba:e2:f2:94:6f:c6:1e:23:75:01:
da:17:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:39 2026 by rpki-client