Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: 18FllhuTWz4XLlNUSAalotkasWwNvVtieEyjXjea0fM=
Subject key identifier: 20:C5:0C:E9:9C:55:29:E7:6C:89:A2:6F:C2:72:AD:6D:C9:61:DA:A3
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 01A1DC142BC8B125553B79D94D57EE51FF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 1AFA
Signing time: Sat 14 Nov 2026 22:01:11 +0000
Manifest this update: Sat 14 Nov 2026 22:01:11 +0000
Manifest next update: Sun 15 Nov 2026 22:01:11 +0000
Files and hashes: 1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: 1PKGn/JBV/5cUFix+Rl75UUm08w6G8yEmq5TrbM3BU0=)
4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:2b:c8:b1:25:55:3b:79:d9:4d:57:ee:51:ff:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Nov 14 22:01:11 2026 GMT
Not After : Nov 15 22:01:11 2026 GMT
Subject: CN=20c50ce99c5529e76c89a26fc272ad6dc961daa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:55:2d:73:18:ac:12:71:4b:0f:55:3c:86:
7f:23:b0:99:ea:d8:ba:b8:3a:74:60:2c:0e:ee:c7:
2a:5f:69:37:d3:87:e1:3f:5e:9d:a1:e9:e8:5c:6d:
3f:b6:f4:81:7b:c8:b7:51:3a:67:0e:2a:f1:bf:f2:
ea:73:c6:70:ab:e2:98:e9:fe:27:86:64:8e:0a:d6:
24:a0:0a:55:30:d9:61:50:71:46:7f:25:1f:ea:9f:
1b:40:12:b8:91:99:3d:a5:03:f7:8a:69:2a:07:33:
da:3c:d2:26:14:b6:fd:67:7a:a1:90:bd:c3:d6:70:
5f:dc:f7:86:ce:bb:ed:0a:34:98:61:d6:4c:a5:53:
b2:11:64:2c:0e:58:ee:4b:4a:92:c8:a9:d1:cc:6f:
82:db:6d:d9:70:c0:2c:7e:c1:b7:8c:4c:8d:15:0a:
f4:57:ec:3d:4a:fa:85:70:25:e0:0b:e3:1f:f6:f0:
7d:d5:e4:17:bb:74:06:a2:b6:18:d5:cd:61:2d:44:
93:66:38:31:50:5a:cf:02:2c:f1:6b:a8:b7:20:93:
11:3b:13:e2:83:14:75:29:90:d5:25:ac:a6:54:8d:
88:c8:b9:3d:c9:8f:2c:2a:84:81:ef:a5:b3:fa:80:
1f:7d:9f:ae:99:93:48:ae:6b:24:37:bb:dd:26:4a:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:0C:E9:9C:55:29:E7:6C:89:A2:6F:C2:72:AD:6D:C9:61:DA:A3
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:62:35:d2:1c:74:0f:d8:1e:86:4d:bb:15:75:f2:02:e4:51:
5b:a4:b7:97:be:a5:83:7e:f0:af:bb:25:1e:1f:b7:f1:48:eb:
71:d4:10:53:38:96:b0:cb:0b:d5:39:33:a1:ed:73:d8:69:1a:
74:e8:88:2c:51:b0:15:b5:0e:6b:28:f8:2a:00:b2:d0:4b:f3:
78:d1:8f:26:60:ad:33:25:cc:e6:d0:ba:83:85:4a:92:45:32:
39:6a:2a:ea:93:f4:47:3f:60:ba:b0:14:5f:ef:32:fc:e4:21:
a0:5c:5a:d2:29:74:2e:cc:b5:ae:fe:a4:9e:90:df:5f:32:10:
f5:e4:3a:31:ca:73:ce:e8:c2:a9:af:93:88:7a:36:f4:50:ba:
19:de:5f:86:a8:f1:fe:97:02:e1:a8:17:0e:a9:d8:b9:3f:e3:
41:a5:8f:80:4c:83:b0:23:95:20:fd:ad:a3:15:21:94:06:cb:
4c:a6:ee:73:01:2e:36:ae:51:70:b1:52:22:3c:5a:ed:b0:b7:
f0:86:b7:92:53:f0:6a:70:4f:ea:49:10:2f:7f:73:8d:cf:4f:
09:15:55:8f:0f:83:39:e3:78:97:04:d0:7b:6b:4b:3f:90:e1:
f4:b9:17:fe:be:72:0c:b5:d8:e3:5c:33:31:c9:ff:10:1b:a6:
03:de:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:50:44 2026 by rpki-client