Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json)
Hash identifier: b7Ad2ldHOaUdxJCS0EVtjK6CqqZf0fhLSx/amwMlUJQ=
Subject key identifier: 13:50:E0:DA:E7:A5:1F:84:DD:30:6F:C0:BB:EC:79:FA:C6:A6:0E:55
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019D2928EA91169ED98C2655EC989CDA0D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:00:40 +0000
Manifest this update: Thu 26 Mar 2026 08:00:40 +0000
Manifest next update: Fri 27 Mar 2026 08:00:40 +0000
Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: wNgygzbRMs9K9qT1lK5H5aki5GtQ0hvXjH64nz5tMwM=)
2: WKEZ5BQSR1ehG9mZ_bxEUph3mMQ.roa (hash: uO4Surv+TiXY3EdSL2CRo2M9bmF0VI8nDJjKmqF1qxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ea:91:16:9e:d9:8c:26:55:ec:98:9c:da:0d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Mar 26 08:00:40 2026 GMT
Not After : Mar 27 08:00:40 2026 GMT
Subject: CN=1350e0dae7a51f84dd306fc0bbec79fac6a60e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:5d:7b:3e:07:a3:29:c9:5c:a1:46:60:5b:
3d:00:39:52:5c:7a:6d:fd:5d:2c:44:2d:b1:87:f9:
58:77:25:ea:7e:e1:a2:10:ab:54:c8:f9:6a:82:24:
95:2d:34:7b:b4:82:da:ee:85:dc:81:27:d9:82:0a:
11:1c:f9:d8:26:a1:a9:4d:ee:0a:c8:c0:4b:68:b4:
40:35:28:c2:55:b6:26:99:02:dc:cd:8c:f4:3c:5f:
4a:68:83:d6:02:c9:c2:31:4c:07:1b:43:23:7f:39:
40:26:52:c1:29:2f:f7:a0:24:ec:8f:4b:97:06:e8:
b3:49:9a:92:01:86:07:bd:ec:e6:2f:31:a9:f1:68:
2c:02:cb:de:86:79:47:40:85:a3:2f:9b:67:1d:9d:
bd:ac:62:4a:d9:0b:d7:f1:00:af:30:ac:11:7d:70:
4c:62:58:09:6e:bf:32:68:4b:07:82:57:7e:62:f2:
75:9e:ca:cc:68:73:3c:22:4a:1c:a1:6e:44:33:e8:
45:e2:ed:e1:15:e9:0e:98:61:ad:95:1e:8e:de:e3:
d1:e9:3f:e4:cb:99:d8:19:92:f1:b3:bb:b9:e0:35:
c9:6d:53:a1:ca:75:95:6c:f8:72:1b:28:09:81:c4:
a0:27:32:17:04:0a:7f:8c:ac:75:2a:18:1e:fe:f7:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:E0:DA:E7:A5:1F:84:DD:30:6F:C0:BB:EC:79:FA:C6:A6:0E:55
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:1e:78:3d:d4:0b:11:ba:14:1f:af:8f:74:d5:2a:ca:76:
86:45:3c:e4:9d:2a:a1:00:d6:66:cd:4e:7e:80:8b:54:3b:01:
90:86:dd:14:45:df:6e:18:95:df:e4:6d:8e:6d:78:65:45:e5:
59:61:bc:e8:0c:7c:93:72:5d:65:42:e9:e4:ec:bf:1d:49:f3:
17:5f:fe:72:96:c8:d7:1e:32:1d:78:78:de:5d:42:7e:b4:80:
d9:08:90:2e:f3:5d:22:d9:4b:4d:a7:3e:bd:b8:f3:13:ae:1d:
89:bf:6c:bd:2e:ed:11:df:04:43:4c:1b:0e:c3:fa:3d:d6:f5:
41:5f:a4:75:9f:a8:d0:9a:4f:b1:9b:fa:52:de:5f:4a:ef:3e:
56:6e:c3:1c:1a:80:3e:34:52:25:cc:d6:8a:7f:1b:46:f9:9a:
b9:c4:80:cb:61:5f:4c:2f:4c:ec:62:68:7b:84:f2:ff:fc:3a:
3d:c6:47:92:f7:f7:88:c1:b7:f7:f2:ea:e2:6c:a7:3b:1e:0b:
da:e8:9c:c8:e7:d1:57:16:dc:32:3f:0b:c4:09:3f:53:ba:69:
24:3e:ec:80:5b:09:e8:ef:2a:2c:2e:d5:15:60:b1:17:8b:52:
33:c2:e9:b1:95:59:85:d7:f2:50:7f:82:14:40:83:04:11:29:
00:f2:58:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKOqRFp7ZjCZV7Jic2g0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy
MTI1NTAwHhcNMjYwMzI2MDgwMDQwWhcNMjYwMzI3MDgwMDQwWjAzMTEwLwYDVQQD
EygxMzUwZTBkYWU3YTUxZjg0ZGQzMDZmYzBiYmVjNzlmYWM2YTYwZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuABdez4HoynJXKFGYFs9ADlSXHpt
/V0sRC2xh/lYdyXqfuGiEKtUyPlqgiSVLTR7tILa7oXcgSfZggoRHPnYJqGpTe4K
yMBLaLRANSjCVbYmmQLczYz0PF9KaIPWAsnCMUwHG0MjfzlAJlLBKS/3oCTsj0uX
BuizSZqSAYYHvezmLzGp8WgsAsvehnlHQIWjL5tnHZ29rGJK2QvX8QCvMKwRfXBM
YlgJbr8yaEsHgld+YvJ1nsrMaHM8IkocoW5EM+hF4u3hFekOmGGtlR6O3uPR6T/k
y5nYGZLxs7u54DXJbVOhynWVbPhyGygJgcSgJzIXBAp/jKx1Khge/veDsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNQ4NrnpR+E3TBvwLvsefrGpg5VMB8GA1UdIwQY
MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt
YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw
LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZIeeD3U
CxG6FB+vj3TVKsp2hkU85J0qoQDWZs1OfoCLVDsBkIbdFEXfbhiV3+Rtjm14ZUXl
WWG86Ax8k3JdZULp5Oy/HUnzF1/+cpbI1x4yHXh43l1CfrSA2QiQLvNdItlLTac+
vbjzE64dib9svS7tEd8EQ0wbDsP6Pdb1QV+kdZ+o0JpPsZv6Ut5fSu8+Vm7DHBqA
PjRSJczWin8bRvmaucSAy2FfTC9M7GJoe4Ty//w6PcZHkvf3iMG39/Lq4mynOx4L
2uicyOfRVxbcMj8LxAk/U7ppJD7sgFsJ6O8qLC7VFWCxF4tSM8LpsZVZhdfyUH+C
FECDBBEpAPJYuw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:17 2026 by rpki-client