Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: j0X42U62jO+nkclkJeYdegIdcN1HgXDiDNDWeVDUKLI=
Subject key identifier: 46:F4:B6:05:AE:AA:B0:0F:9D:15:7F:3A:7C:2C:CA:7C:D0:46:1B:89
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019D9AAC2215A0E99BD151540252F7CB0FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0C0C
Signing time: Fri 17 Apr 2026 09:01:05 +0000
Manifest this update: Fri 17 Apr 2026 09:01:05 +0000
Manifest next update: Sat 18 Apr 2026 09:01:05 +0000
Files and hashes: 1: tSoyf098BzWvypOitt6w4PZYh1E.roa (hash: g79EXU28zyYLa6d3o4fUqKiOYkBLt7sppLFGfj7W4Es=)
2: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: 8ARlvds8L19XH9jhL4b0k1WoHVgBx3PYMrkWBDUWGOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:22:15:a0:e9:9b:d1:51:54:02:52:f7:cb:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Apr 17 09:01:05 2026 GMT
Not After : Apr 18 09:01:05 2026 GMT
Subject: CN=46f4b605aeaab00f9d157f3a7c2cca7cd0461b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:f5:3b:c8:77:83:2e:6a:24:2c:eb:d7:99:
c3:a3:66:f8:c9:b0:69:7b:f3:2f:61:d1:23:a2:29:
3c:34:80:bf:6f:b3:00:cd:c0:a0:dd:61:65:4e:d4:
7e:31:25:11:93:1f:c5:21:2a:ae:83:76:4b:6d:ff:
aa:5b:a6:dc:2f:5b:06:7b:08:46:6b:25:ab:76:53:
42:44:55:42:a8:74:24:1d:e2:97:d1:58:3f:c2:40:
db:95:18:91:67:5f:88:69:c2:05:dc:22:92:39:89:
f3:5e:2a:7e:a3:62:5f:7d:e8:d7:c5:4c:51:53:78:
3e:c5:3d:f2:f0:e9:01:98:31:05:4b:8f:5a:d7:ce:
eb:e9:55:ea:9f:b8:a7:e1:d2:d2:06:c6:48:3e:f0:
2b:01:b8:73:f9:12:ba:4f:1c:6a:4a:0b:b2:31:97:
cb:1b:1b:a0:2b:94:03:03:c0:6e:79:a8:ce:6f:46:
aa:f5:d6:95:44:b4:fa:92:95:39:5e:43:a5:68:80:
eb:6e:19:5c:01:2c:66:5b:4b:8d:9c:ac:a3:e8:b7:
2c:75:e4:c4:d0:a2:64:3b:80:31:1e:bf:f5:44:79:
e7:da:29:50:26:93:3b:b6:0e:a7:d0:c1:f9:f8:86:
5b:74:c6:ee:f1:6c:ba:76:e4:bc:48:a8:51:d4:b7:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:B6:05:AE:AA:B0:0F:9D:15:7F:3A:7C:2C:CA:7C:D0:46:1B:89
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:76:5a:21:c0:b1:26:92:09:a2:72:fd:9f:59:24:1a:58:0d:
b9:7b:2a:42:5b:35:75:d3:0b:37:6b:67:a9:b6:f4:13:0d:14:
41:fa:52:68:18:97:1a:91:59:b7:ab:70:2c:de:b6:f5:40:d7:
cd:bd:ea:ff:4c:92:5f:26:cd:ad:b6:9a:d4:5a:de:36:a0:8d:
62:ef:28:be:ba:e6:ae:cf:39:e4:ff:d8:d1:dd:a3:c7:73:4e:
05:16:cf:7a:42:85:10:d6:c8:e9:c8:6f:4a:74:41:ee:6e:90:
c5:41:41:b2:61:5e:60:12:29:c3:74:92:d7:ae:0f:b2:04:d5:
23:51:cb:17:93:e3:a7:f9:59:44:76:0e:c6:b0:16:c7:fb:89:
2d:1c:bb:f3:34:30:89:ba:f8:ff:c6:3a:2a:3c:63:5f:d3:1b:
00:34:be:b1:0f:53:7f:28:15:9a:34:3b:ba:c4:39:05:ce:96:
f0:b8:c6:c6:f8:f6:32:95:14:e2:4b:5d:3c:7e:9a:90:bf:95:
e2:7c:14:8a:e4:51:8b:93:76:f0:58:46:5e:42:04:b4:d5:b2:
fc:39:d1:e3:ff:40:eb:50:42:43:22:07:e1:ba:40:4d:10:1d:
bd:84:38:2b:91:ce:ad:0b:bc:53:5a:99:e2:f2:dd:0a:bd:15:
42:2e:f4:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arCIVoOmb0VFUAlL3yw/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2FmZTFlM2FlYTJmNmQ5MTFlZDEwN2EwOGFhZmVlOTc5
YTRmNTEwHhcNMjYwNDE3MDkwMTA1WhcNMjYwNDE4MDkwMTA1WjAzMTEwLwYDVQQD
Eyg0NmY0YjYwNWFlYWFiMDBmOWQxNTdmM2E3YzJjY2E3Y2QwNDYxYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV71O8h3gy5qJCzr15nDo2b4ybBp
e/MvYdEjoik8NIC/b7MAzcCg3WFlTtR+MSURkx/FISqug3ZLbf+qW6bcL1sGewhG
ayWrdlNCRFVCqHQkHeKX0Vg/wkDblRiRZ1+IacIF3CKSOYnzXip+o2JffejXxUxR
U3g+xT3y8OkBmDEFS49a187r6VXqn7in4dLSBsZIPvArAbhz+RK6TxxqSguyMZfL
GxugK5QDA8BueajOb0aq9daVRLT6kpU5XkOlaIDrbhlcASxmW0uNnKyj6LcsdeTE
0KJkO4AxHr/1RHnn2ilQJpM7tg6n0MH5+IZbdMbu8Wy6duS8SKhR1LfHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb0tgWuqrAPnRV/OnwsynzQRhuJMB8GA1UdIwQY
MBaAFLXK/h466i9tkR7RB6CKr+6Xmk9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNyLUhqcnFMMjJSSHRFSG9JcXY3cGVhVDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83N2Y5OWMtMzVjYi00N2E2LWJhYzMt
Y2FiYTgxYzlhMTUyLzEvdGNyLUhqcnFMMjJSSHRFSG9JcXY3cGVhVDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi83N2Y5OWMtMzVjYi00N2E2LWJhYzMtY2FiYTgxYzlhMTUy
LzEvdGNyLUhqcnFMMjJSSHRFSG9JcXY3cGVhVDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3ZaIcCx
JpIJonL9n1kkGlgNuXsqQls1ddMLN2tnqbb0Ew0UQfpSaBiXGpFZt6twLN629UDX
zb3q/0ySXybNrbaa1FreNqCNYu8ovrrmrs855P/Y0d2jx3NOBRbPekKFENbI6chv
SnRB7m6QxUFBsmFeYBIpw3SS164PsgTVI1HLF5Pjp/lZRHYOxrAWx/uJLRy78zQw
ibr4/8Y6KjxjX9MbADS+sQ9TfygVmjQ7usQ5Bc6W8LjGxvj2MpUU4ktdPH6akL+V
4nwUiuRRi5N28FhGXkIEtNWy/DnR4/9A61BCQyIH4bpATRAdvYQ4K5HOrQu8U1qZ
4vLdCr0VQi70VA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:16 2026 by rpki-client