Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: AoPe4ishXfPUrDMMdtbCBf7WBSkqtGr5u2L+6yUNh6Q=
Subject key identifier: D8:65:DE:93:94:0E:97:F6:56:B9:89:6B:B0:F3:15:EB:AB:7B:F5:28
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 019D27046DE08F91AFCAB44E48F6DB5F5F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: It0xzYUJWGBXoOhbClCYAI77UAfmFUUHkBCdY3n7xp0=)
4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6d:e0:8f:91:af:ca:b4:4e:48:f6:db:5f:5f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=d865de93940e97f656b9896bb0f315ebab7bf528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:be:62:83:df:68:83:01:99:16:51:87:bc:
af:68:5a:d3:d2:a1:02:e6:49:a6:d4:02:f1:b0:58:
f1:12:70:d9:74:30:b6:6e:a4:9f:6e:5f:a6:a2:db:
8d:09:ef:1a:df:5a:86:b9:f8:dc:48:71:3c:57:10:
aa:2e:d8:00:9a:71:6c:5e:7b:f7:bb:8f:cd:b1:f3:
d7:66:3e:b1:9b:18:4c:5f:ee:04:27:8e:19:56:10:
ea:7b:9c:5d:1a:9a:6f:da:c5:e8:8d:7a:55:ba:3c:
f9:59:55:f2:17:cf:c2:20:74:fa:c2:d9:55:7a:72:
6d:53:aa:41:de:ea:93:2b:68:fd:a6:b7:d0:7a:f1:
25:1f:af:d4:53:10:b9:0c:18:58:c6:16:25:8d:2a:
69:b8:6c:de:f0:61:4b:c1:15:ab:f3:33:6d:2e:96:
6a:09:d8:10:9c:e5:80:57:83:09:4a:5f:b3:82:22:
65:a4:16:47:6e:f5:e3:c4:12:62:a9:dd:cf:31:19:
7c:bf:4c:34:13:c4:db:1d:68:17:07:d5:69:99:24:
87:c8:3a:31:14:e9:1c:ad:2a:e8:5a:1d:20:23:85:
90:e8:84:17:bd:88:7a:b5:74:62:42:db:83:d8:b9:
b4:a9:0f:6c:e9:67:5e:16:3b:43:67:c8:b9:de:8f:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:DE:93:94:0E:97:F6:56:B9:89:6B:B0:F3:15:EB:AB:7B:F5:28
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:24:db:5e:a6:89:f9:4d:9b:33:2d:91:79:ec:d9:0b:6e:3d:
07:a5:29:20:05:6f:05:25:bf:43:03:1a:c8:13:2c:ee:fa:a5:
f2:35:dd:39:c8:8e:1d:c4:33:49:0a:6a:f1:14:47:84:6e:94:
da:2c:b7:b4:8f:4f:1c:bc:52:fd:ab:3e:ac:b3:cc:e1:67:bb:
24:c9:a3:d1:77:1f:3a:9b:29:54:b5:f7:15:35:2d:e3:ca:9b:
ae:cf:00:15:af:cb:50:f9:40:7f:a1:e2:77:31:4a:f4:5a:9f:
4a:b0:79:43:14:37:c6:0c:60:be:25:13:a2:cb:34:a6:c6:ca:
18:1e:59:c4:01:45:4d:80:47:42:80:ad:c4:9f:8b:80:66:09:
c4:2c:9d:96:b8:19:a5:21:32:96:fb:5d:27:22:0b:8d:50:1b:
59:0e:61:5d:18:52:9b:7b:03:f9:94:2f:56:ce:25:11:ea:57:
10:7d:ad:74:fc:68:8a:ac:7c:34:fe:a0:3a:53:c9:bf:e7:55:
7f:8b:1c:59:5d:04:fa:db:1f:a6:37:a5:37:8b:63:c8:d4:e3:
1f:c8:02:c7:9c:56:a8:b0:a6:a7:e7:62:24:24:cb:5f:8d:43:
ec:d4:6e:bb:d2:a4:44:2d:2b:c5:31:3a:33:c3:e2:2c:74:fa:
ff:6d:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:28 2026 by rpki-client