Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: n+qKHCb0mYGY3VTk56w/BW05hKjaEH0cYaR5GdP9xMw=
Subject key identifier: 68:B0:1B:64:E9:09:7D:73:B9:F1:0D:6A:71:32:94:E9:5E:C9:02:78
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 01A0C96BC3ADACF7E65A6C11F10ED5E16D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0AFB
Signing time: Tue 22 Sep 2026 14:01:17 +0000
Manifest this update: Tue 22 Sep 2026 14:01:17 +0000
Manifest next update: Wed 23 Sep 2026 14:01:17 +0000
Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: guW+Kb85TLJ7ZPXDpQAZHByBleu4dTBFiMT7gwdozUQ=)
3: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (hash: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:c3:ad:ac:f7:e6:5a:6c:11:f1:0e:d5:e1:6d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Sep 22 14:01:17 2026 GMT
Not After : Sep 23 14:01:17 2026 GMT
Subject: CN=68b01b64e9097d73b9f10d6a713294e95ec90278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:31:9d:26:0d:5f:47:56:ee:7e:69:60:48:
66:12:87:f4:f9:6c:3d:ef:40:30:f5:18:60:42:6e:
62:98:6d:59:f0:28:ee:66:b8:76:75:87:7f:36:b7:
9b:48:60:11:ce:23:51:1d:fc:bb:b1:a8:f0:c5:29:
57:51:99:be:11:53:2a:59:d9:82:42:1e:33:1e:64:
1d:9c:54:e1:a2:f6:d7:0b:62:13:ac:fd:52:b9:16:
eb:2d:59:1a:aa:15:ed:19:88:09:57:33:a1:ef:b8:
14:b8:9e:c1:8e:07:b5:14:3a:a7:e2:34:6d:70:9f:
72:b6:8b:c6:91:d1:15:e3:ad:ff:f1:c7:f1:c8:20:
3a:21:4a:2f:32:91:a1:ff:a9:b9:62:29:95:90:b9:
36:39:99:96:35:ad:b5:38:12:bd:fb:2a:9b:cb:6b:
0b:51:d6:42:95:7d:16:81:90:64:9f:e8:c5:5b:44:
50:b1:a5:a1:d1:e7:55:46:78:ee:ce:de:a0:43:5d:
74:f7:20:b3:4f:26:86:65:70:ca:96:b9:29:d7:7e:
38:fd:46:f4:1a:ce:bd:e7:c5:57:97:d8:eb:73:95:
85:7d:5c:be:d5:2f:e6:b9:2b:45:80:fb:6a:5c:fd:
d5:d0:d9:59:b1:a4:ec:a4:ea:69:ab:1a:9c:6b:e5:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:1B:64:E9:09:7D:73:B9:F1:0D:6A:71:32:94:E9:5E:C9:02:78
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3d:95:d3:f3:73:ff:ce:65:ed:57:88:b3:4b:5b:bb:85:f7:
a1:9b:23:c3:ae:ff:8a:26:fc:1c:e3:96:a5:fd:d3:a7:5e:e4:
ea:1c:99:4d:f9:53:c7:64:e3:84:36:58:d4:c9:26:a0:e1:fa:
65:96:d0:f4:76:5e:d0:47:f3:d6:6a:70:ed:9c:14:b1:44:73:
18:db:eb:a5:9f:7b:ca:06:e0:17:bf:1a:fb:91:b0:26:40:91:
21:ef:51:1f:b8:9f:f0:72:47:44:f8:33:26:b5:44:a7:9b:c9:
e8:eb:24:c2:36:96:e4:75:16:09:5b:f5:b2:79:b6:73:0b:a2:
cc:fb:ab:4e:cf:72:bf:24:ec:aa:56:38:20:4d:bf:f2:1b:3f:
8d:77:9a:f7:3a:2a:5b:81:fe:ad:14:e2:5d:93:8b:c8:63:52:
0a:5a:bb:18:65:8a:8b:ce:ac:3a:61:5d:d0:24:98:61:a1:c3:
7d:03:5a:9f:75:de:44:c3:f0:d9:67:4c:d3:61:cc:fa:fc:ec:
53:94:9e:79:d6:39:f9:c4:a7:8c:40:88:4c:55:c6:6c:00:68:
6b:10:f3:f3:7d:6c:5f:3f:16:9b:9c:a5:07:de:f2:28:e4:ec:
f0:22:96:ec:90:1e:84:84:13:9d:e7:ae:45:01:d0:48:be:7c:
28:9f:3d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa8OtrPfmWmwR8Q7V4W1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy
YzI0ZDAwHhcNMjYwOTIyMTQwMTE3WhcNMjYwOTIzMTQwMTE3WjAzMTEwLwYDVQQD
Eyg2OGIwMWI2NGU5MDk3ZDczYjlmMTBkNmE3MTMyOTRlOTVlYzkwMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31kxnSYNX0dW7n5pYEhmEof0+Ww9
70Aw9RhgQm5imG1Z8CjuZrh2dYd/NrebSGARziNRHfy7sajwxSlXUZm+EVMqWdmC
Qh4zHmQdnFThovbXC2ITrP1SuRbrLVkaqhXtGYgJVzOh77gUuJ7Bjge1FDqn4jRt
cJ9ytovGkdEV463/8cfxyCA6IUovMpGh/6m5YimVkLk2OZmWNa21OBK9+yqby2sL
UdZClX0WgZBkn+jFW0RQsaWh0edVRnjuzt6gQ1109yCzTyaGZXDKlrkp1344/Ub0
Gs6958VXl9jrc5WFfVy+1S/muStFgPtqXP3V0NlZsaTspOppqxqca+XylwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiwG2TpCX1zufENanEylOleyQJ4MB8GA1UdIwQY
MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt
MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4
LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnD2V0/Nz
/85l7VeIs0tbu4X3oZsjw67/iib8HOOWpf3Tp17k6hyZTflTx2TjhDZY1MkmoOH6
ZZbQ9HZe0Efz1mpw7ZwUsURzGNvrpZ97ygbgF78a+5GwJkCRIe9RH7if8HJHRPgz
JrVEp5vJ6OskwjaW5HUWCVv1snm2cwuizPurTs9yvyTsqlY4IE2/8hs/jXea9zoq
W4H+rRTiXZOLyGNSClq7GGWKi86sOmFd0CSYYaHDfQNan3XeRMPw2WdM02HM+vzs
U5SeedY5+cSnjECITFXGbABoaxDz831sXz8Wm5ylB97yKOTs8CKW7JAehIQTneeu
RQHQSL58KJ89Ew==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:57 2026 by rpki-client