Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: 2ppIFqnDLE147Q3iOUfvrJP+/fCzgmgz2bNlwkhzVao=
Subject key identifier: 06:28:AB:7D:A3:1C:EF:72:93:C4:43:5F:74:84:17:D1:05:D0:70:D5
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 01A0D048E3CEADC9125E7C46431D6B3F63A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 22:00:32 +0000
Manifest this update: Wed 23 Sep 2026 22:00:32 +0000
Manifest next update: Thu 24 Sep 2026 22:00:32 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 4BrwERbvhjw+Uf19mL0cb/58XORPOslHhJzBzRa7LEw=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:e3:ce:ad:c9:12:5e:7c:46:43:1d:6b:3f:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Sep 23 22:00:32 2026 GMT
Not After : Sep 24 22:00:32 2026 GMT
Subject: CN=0628ab7da31cef7293c4435f748417d105d070d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:bc:07:1f:02:ed:5d:68:04:d2:6b:03:97:
96:b6:5f:48:a8:f5:cf:67:5f:33:10:f4:33:3e:a4:
6f:f8:9f:ce:96:95:d9:b7:9a:fb:6f:8d:8f:5c:e5:
65:69:14:1a:d3:57:84:b7:59:b9:14:26:48:79:85:
b6:3f:b8:d9:10:15:fb:5c:96:4f:76:54:3a:c5:82:
4c:99:f8:a4:c8:ad:01:20:45:1c:dd:71:9f:64:41:
4f:5e:51:a5:5b:d5:4a:f8:6e:d0:69:8b:26:58:f0:
11:99:a1:3d:3a:c3:ca:36:d9:e9:5e:0e:4d:d9:51:
f6:d1:a6:82:c0:c4:e8:ad:78:f2:be:fc:03:c0:78:
63:45:a1:7f:b7:04:95:42:9c:32:1d:d2:d8:6d:7a:
ff:93:8f:04:ca:6d:8a:5a:09:24:cc:c6:90:d6:a3:
51:4c:9d:1f:a9:9e:18:fa:d0:ea:f1:4a:75:39:7a:
68:1f:cb:3d:27:72:89:93:a9:03:80:e7:41:99:c9:
93:fb:61:78:d7:2d:e0:1b:90:ce:c6:c2:e6:c0:05:
1b:df:13:ed:1b:c1:ee:f5:6f:ce:4f:f6:4c:0c:45:
7a:3c:45:4c:ca:42:00:c8:e9:6f:b7:52:6d:a5:90:
37:a2:83:47:94:7b:6e:30:21:64:d3:df:d8:65:3e:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:AB:7D:A3:1C:EF:72:93:C4:43:5F:74:84:17:D1:05:D0:70:D5
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4b:92:88:62:be:67:3d:ca:2e:34:32:c9:ac:3c:c3:3f:9a:
05:ec:10:99:7e:67:6d:dd:91:0f:51:7c:e6:b1:93:1c:12:77:
cc:73:c9:46:e3:3b:92:04:4e:3a:99:73:16:d3:25:b0:d6:73:
20:ad:6b:d1:9b:f0:53:5c:4d:48:05:c0:cf:c6:25:76:f2:01:
e1:fa:b2:83:57:c4:31:54:35:91:74:aa:3e:59:af:80:97:f7:
0f:fb:39:58:c0:4e:2a:47:55:2b:38:27:96:3f:71:16:28:29:
8f:03:72:66:6a:8c:6a:80:c7:15:a0:e9:56:f6:9c:79:12:4a:
fb:49:6a:54:43:ab:b8:6a:1d:17:4e:1c:a5:f9:6e:bb:f6:4f:
7a:2b:68:d4:4d:c7:40:23:68:83:4f:20:5f:e6:7d:84:c3:0d:
51:81:93:2e:4f:cd:88:1b:10:47:7e:ea:a4:64:ac:1f:33:3e:
f9:a1:a7:df:5d:13:bf:53:06:06:1c:f6:4e:b3:86:39:fa:c2:
fc:a2:e0:60:8e:30:34:ea:ce:41:f6:5a:ea:e3:b5:c2:c6:2b:
1f:99:c0:75:ff:8a:6a:42:4b:40:83:65:d7:bc:bf:c5:24:64:
d6:83:dd:3c:37:d0:54:35:cd:2e:75:0a:16:72:77:66:2f:79:
63:b3:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:48 2026 by rpki-client