Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: KfNpbBLmL+BdtkFG+IsWmYFbO/rfzsr5bkKLkzaDJy8=
Subject key identifier: 88:85:40:C5:C1:61:4C:19:68:3F:60:89:F3:A0:C1:AF:EC:A2:9E:D9
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019FA9ABA27B425F6DF87CCC39BE4D1EEBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0A66
Signing time: Tue 28 Jul 2026 17:00:25 +0000
Manifest this update: Tue 28 Jul 2026 17:00:25 +0000
Manifest next update: Wed 29 Jul 2026 17:00:25 +0000
Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: +ZoVYv8D20UuPxbEerO3AqwnUEFayjBhwi9viGrEDQc=)
3: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (hash: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a2:7b:42:5f:6d:f8:7c:cc:39:be:4d:1e:eb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Jul 28 17:00:25 2026 GMT
Not After : Jul 29 17:00:25 2026 GMT
Subject: CN=888540c5c1614c19683f6089f3a0c1afeca29ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:20:39:33:e4:45:39:a8:22:34:6b:12:e8:a2:
82:85:47:53:c3:99:36:d4:b5:a8:fa:c8:5a:d6:7e:
65:a3:ed:c7:a4:53:76:45:04:00:bc:bd:e7:a3:b3:
79:c0:49:78:b6:72:b9:31:0b:4c:ac:31:e0:b6:2f:
59:a8:f0:6a:e6:03:bb:d0:b8:4e:be:b5:cf:f8:65:
b5:df:63:fe:99:07:8c:93:8e:99:84:dd:5a:4e:dc:
03:be:89:b4:91:24:d2:88:f5:54:15:dc:0b:bc:68:
7d:a9:df:22:dd:3b:3d:68:e9:42:d0:4c:b5:b6:2f:
28:2a:9f:7d:a8:96:06:96:0e:80:fa:11:d7:d7:77:
31:0e:57:5e:88:9a:3c:dd:f3:71:3f:c1:14:9d:17:
7b:46:11:27:4d:f7:26:8f:31:45:d3:b6:e9:e5:ab:
0e:04:5c:82:fd:f2:10:08:0e:10:fa:3e:9c:1a:f0:
07:1c:09:56:bc:06:31:15:46:dd:0a:f7:14:71:85:
9b:d9:fd:41:47:06:93:4a:8e:1d:00:14:3e:d0:a1:
9c:c0:84:cc:39:37:02:b1:a4:e6:f4:80:db:7d:be:
a1:ae:d6:80:3c:7f:bd:fc:2d:fa:ae:80:57:1b:bf:
1c:bb:9c:9e:7f:2a:76:93:78:05:44:27:cb:39:de:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:40:C5:C1:61:4C:19:68:3F:60:89:F3:A0:C1:AF:EC:A2:9E:D9
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:ee:8e:25:e0:8a:8f:0b:41:91:7d:6c:af:55:1e:e0:7b:
57:92:37:6e:68:83:02:ba:d5:78:bd:3a:9b:52:8d:74:f3:fe:
de:3c:4d:1d:0f:2e:a2:42:67:ff:f4:21:28:34:39:bf:f8:f6:
29:f2:2c:ac:c1:99:ca:74:89:05:44:a9:3b:33:4c:f6:a7:b9:
bd:fc:9e:32:bf:db:07:1d:77:d8:cd:ab:7c:26:7e:76:ce:46:
ad:44:43:25:56:8b:50:ed:a0:08:ec:a6:17:db:ae:2b:83:7f:
c2:a1:a4:64:cf:8b:93:97:f7:81:d4:24:22:cc:dd:28:7b:00:
f5:b9:18:2e:a4:ae:de:b5:8e:db:13:19:02:34:e1:94:99:6d:
1d:68:3d:9a:53:b0:44:51:6a:36:87:dc:a8:c1:8a:33:be:3f:
8f:44:12:9a:29:dc:8f:29:cf:1e:6f:08:7e:d9:9e:84:e6:24:
f5:a2:a6:d8:e5:3d:ed:96:2a:d0:cf:99:31:e9:52:1e:e2:c1:
7d:13:67:f5:24:06:70:5b:78:0a:44:0a:17:62:15:3b:a2:98:
97:51:99:b8:d8:4b:80:73:ed:c5:99:ce:bf:a6:59:c7:22:b4:
aa:ff:f1:7b:24:cd:e0:02:c3:f0:46:6b:55:b6:41:b2:db:eb:
a4:61:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:42 2026 by rpki-client