Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: ixBqEj5cPtsfsu8G4xCDcxF9Ydcn8CbxXR7IQ0c313c=
Subject key identifier: CC:57:49:40:4B:3A:EA:38:A1:04:68:6C:4F:18:39:81:50:E7:9E:17
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019CA9EB0BE012C92FC05FD43AE83328FE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 08D8
Signing time: Sun 01 Mar 2026 15:01:19 +0000
Manifest this update: Sun 01 Mar 2026 15:01:19 +0000
Manifest next update: Mon 02 Mar 2026 15:01:19 +0000
Files and hashes: 1: FMhSDB2bcbnNZRwsRENksHVKZ2w.asa (hash: OqqqK9AEW4hV2BzFVL2uOSThouiaUH9MYZU2kT9VKbo=)
2: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
3: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: KbS9SO3N0nOK2CCiRB8sXy5LFzxbW0Wa/GWlrqEFcD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:0b:e0:12:c9:2f:c0:5f:d4:3a:e8:33:28:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Mar 1 15:01:19 2026 GMT
Not After : Mar 2 15:01:19 2026 GMT
Subject: CN=cc5749404b3aea38a104686c4f18398150e79e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:2b:8d:88:f8:d6:43:43:04:be:5f:90:29:
96:f6:07:5d:07:69:3e:77:14:e5:39:60:37:73:1e:
dd:5c:6e:ff:6b:be:6d:58:60:57:0a:d4:94:a4:fd:
f6:ec:43:fa:34:b2:e8:11:8f:07:70:5a:3e:23:9f:
1e:43:2f:ce:b2:b6:7e:bd:c5:63:0b:72:30:c9:c7:
a8:de:ce:b5:d7:b0:f7:15:33:57:34:0f:9a:7d:3c:
db:db:26:c2:93:e4:d6:51:2d:28:d3:e1:37:21:f1:
3f:c4:88:d1:75:72:52:44:ac:c8:6e:10:44:15:d7:
0d:3e:08:6d:87:02:93:69:98:16:cb:5c:c8:22:bb:
92:42:a9:28:aa:38:e4:3f:1d:02:3f:63:64:7b:e6:
b7:68:e0:d2:50:2f:22:91:67:51:0a:d4:00:44:dd:
39:2f:f3:4f:ab:06:39:8e:55:b5:94:a5:11:32:9f:
61:0d:76:d6:a8:69:1b:6a:90:43:59:f8:1a:02:07:
f9:a3:bc:2c:eb:ec:09:48:fe:b5:7d:24:1b:aa:91:
bd:a4:7f:8a:f2:00:90:3f:4c:5b:c9:7e:01:6a:d5:
73:71:e4:06:b5:14:82:b4:43:2b:fd:57:a9:1e:82:
38:b9:9b:b1:18:4e:fe:00:16:d2:fa:a2:52:2d:6d:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:57:49:40:4B:3A:EA:38:A1:04:68:6C:4F:18:39:81:50:E7:9E:17
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:b6:7e:57:dd:ac:cf:24:63:af:83:ce:de:e7:6c:11:7f:
da:c4:55:b4:52:ba:0c:c2:e0:20:2a:2e:34:f3:0e:0d:6c:01:
3b:97:15:9a:a6:b3:41:85:2c:c4:fb:2a:01:d4:d0:13:86:43:
e7:51:64:56:9e:7c:e9:0d:57:37:f9:e5:38:72:c3:87:f1:86:
96:b3:ef:c7:33:48:a7:c1:3d:00:c7:f5:39:ce:c0:f5:36:e6:
75:90:f6:c5:91:9f:9b:c9:7d:0e:fc:ba:c3:c3:c5:2e:be:be:
00:84:23:18:87:ed:1c:bf:fc:be:e3:e5:02:0e:ee:bc:95:96:
04:02:3f:db:0b:e7:45:bd:02:a0:cc:c8:65:cf:a1:91:14:1f:
77:3f:4f:fb:3d:5c:37:90:f2:ba:58:52:d2:3e:15:f7:93:04:
49:d5:dc:b0:c7:f7:eb:6c:47:22:3c:3b:d5:e0:f0:53:5c:38:
e5:69:78:b9:dc:c6:dc:7b:38:f4:fa:25:69:2f:84:87:de:f9:
d3:b4:48:00:14:a0:38:be:a2:a8:1f:8c:b7:6a:11:08:e7:90:
c0:0e:ba:b1:18:6c:fa:69:2a:ea:8b:f2:71:61:41:d5:7c:23:
e7:ad:9b:b2:09:f8:2e:9e:a9:5f:c3:3b:21:3a:a6:51:a8:66:
f4:6b:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:30 2026 by rpki-client