Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: g3GNnaOxmEqCRcgs+GeybXnCH4eHRiKPa1bx4CGRN1c=
Subject key identifier: C9:AE:B4:23:F6:1B:7E:89:F5:10:71:88:6F:BE:11:B2:53:D3:87:5B
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019CAB3453E2C4C0F419C1ECFAFAB3F10B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0B90
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: tSoyf098BzWvypOitt6w4PZYh1E.roa (hash: g79EXU28zyYLa6d3o4fUqKiOYkBLt7sppLFGfj7W4Es=)
2: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: 9BKUVeDtF0YvUWoFwSulPRRGqHaQpXY2JD4G9PlaVg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:53:e2:c4:c0:f4:19:c1:ec:fa:fa:b3:f1:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=c9aeb423f61b7e89f51071886fbe11b253d3875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:f0:11:f7:d6:e9:22:5b:c0:cc:9d:cd:1d:
34:a2:0b:eb:dc:80:d1:3b:25:6d:53:4b:c9:74:17:
87:b8:29:9f:11:e6:0f:22:07:29:57:60:8f:dd:c0:
5a:14:28:ec:30:30:bb:d4:8d:15:0c:a7:7d:c5:4d:
eb:85:3b:1a:36:fe:71:ec:c3:d5:eb:aa:ed:27:02:
5a:2e:a9:a8:28:fc:e8:11:c2:82:0a:0d:a7:04:65:
dd:5d:9f:09:79:b6:c8:2b:0a:45:38:fd:c9:0c:ec:
4f:a2:c5:f6:9a:51:45:77:59:c9:6f:61:c0:1a:9f:
db:97:1b:80:de:3f:55:2f:34:5e:cc:a5:b5:93:0f:
57:4f:15:0c:8f:55:c4:82:fb:34:72:b0:f7:e7:12:
26:e6:2c:63:90:54:83:b2:c8:94:21:dc:45:14:5c:
4f:63:db:5f:ed:19:ab:ae:10:c4:e4:35:a3:c3:b5:
46:22:a1:62:c5:ad:5d:8c:db:fc:02:80:00:05:d0:
53:13:62:38:70:e7:56:67:7d:46:4a:61:c6:d4:2e:
f4:b9:85:77:19:30:80:2b:6d:fe:39:9b:23:24:b5:
d5:38:c8:ea:7c:95:7d:59:82:85:d8:75:57:a0:5c:
59:a7:d6:71:1b:a7:1b:a1:eb:6d:08:25:37:81:47:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:B4:23:F6:1B:7E:89:F5:10:71:88:6F:BE:11:B2:53:D3:87:5B
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:79:88:09:ad:d1:e3:cc:71:25:e0:8d:96:03:30:9d:78:5c:
23:ce:d9:ad:2d:19:9d:a6:1a:5c:e1:40:f5:8a:00:2c:01:84:
88:32:d1:b6:28:f7:77:a7:88:62:80:16:4d:8e:21:42:1e:12:
03:59:a1:68:e0:7d:be:60:a3:49:30:e1:2e:42:72:35:49:3c:
ba:1f:c6:41:83:f9:28:72:cd:20:2d:cd:c0:de:d0:1e:d4:a6:
b9:95:2a:cf:15:10:55:1f:7c:ef:d1:06:90:f6:44:02:cd:39:
7a:40:2c:48:46:ea:b7:26:f0:ce:c6:49:1c:28:4d:7a:12:cc:
fb:2f:9d:b4:50:9c:bb:c0:ec:e5:bf:8a:05:b8:4a:11:5c:9b:
c9:d0:d2:7c:10:dd:88:2b:86:47:93:6e:d1:d3:30:f3:f9:91:
f9:54:2f:76:29:fb:d5:d5:67:69:8d:8d:e3:58:9c:0e:50:18:
5f:8f:da:fa:dc:b3:05:3b:6c:91:93:5f:a8:4e:a3:86:fc:21:
20:76:e0:87:27:e8:78:a4:14:df:6c:c1:bb:0b:ab:e8:72:63:
e2:b5:2c:3a:e4:15:c0:a1:e8:39:98:63:2c:2e:f3:90:0d:56:
23:74:15:0d:8f:b8:c3:81:31:bc:01:94:a8:56:63:3b:fb:17:
31:86:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:51 2026 by rpki-client