Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: 4PTzSARLzOJLYh04fHHMhvb1YLAa/go1AuNFywJpZoM=
Subject key identifier: 12:A4:47:E2:14:AD:3F:E2:6C:64:19:A5:19:BF:D5:F7:62:F7:29:8B
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019D99625C8186096B4202D249E41DCC0D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0954
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: FMhSDB2bcbnNZRwsRENksHVKZ2w.asa (hash: OqqqK9AEW4hV2BzFVL2uOSThouiaUH9MYZU2kT9VKbo=)
2: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
3: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: gohv0QtssYbl61UqpSPMlAg/8G4yRnp8r47bXiZlhoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5c:81:86:09:6b:42:02:d2:49:e4:1d:cc:0d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=12a447e214ad3fe26c6419a519bfd5f762f7298b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:f1:93:98:cd:74:34:73:04:82:87:7b:fb:
48:f3:1a:41:95:f7:4d:f1:58:07:22:41:19:8c:24:
43:de:a5:a9:9b:fe:05:1f:8e:ff:9b:f2:5e:ec:49:
fd:25:c1:d0:2f:ff:6a:c9:0f:de:12:c5:f7:9e:8b:
96:c0:3e:70:26:59:b5:82:53:71:d0:ba:a8:b3:5b:
9f:eb:1a:a2:3c:2d:71:39:52:89:9f:ab:f7:89:b7:
ec:3f:15:72:23:f7:c2:47:4a:75:f5:67:b1:0c:49:
3f:62:89:f1:63:a4:a2:f5:bf:f3:20:8e:1a:6f:4a:
4d:97:94:6c:cd:db:6a:cc:2f:cd:af:72:d2:bc:01:
de:60:32:f7:b3:af:ea:9a:b9:19:75:1c:ea:95:99:
98:65:0f:e5:ed:82:8c:eb:52:01:d1:ea:33:6a:50:
b2:ee:50:10:a2:79:79:de:da:cf:ba:db:10:24:cc:
e0:e7:e1:84:89:aa:3a:02:87:4a:24:e7:88:d6:a3:
0b:56:e5:89:23:93:a1:91:4d:6f:d9:ee:d1:6d:d4:
81:a3:c1:db:dc:bc:bd:e8:0e:02:53:e8:96:85:b0:
b3:14:c7:cc:98:4c:0d:1e:71:53:2d:98:aa:b6:50:
84:22:81:ca:f4:c1:bb:fe:9f:cf:4c:87:8f:ea:47:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:47:E2:14:AD:3F:E2:6C:64:19:A5:19:BF:D5:F7:62:F7:29:8B
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7e:47:db:8a:04:eb:10:b4:63:cc:44:8f:1a:12:39:ce:2f:
25:1a:4a:3b:63:e1:b1:fb:18:83:0b:a7:6e:7d:85:f8:b4:32:
7f:e0:3d:20:a5:48:e4:02:8b:c7:3f:fa:94:f5:de:2b:13:c3:
d9:26:41:ee:a1:26:b6:39:38:4a:71:e7:d1:8b:f7:08:fb:a5:
3f:a5:63:b3:2a:bf:b0:73:7c:a1:9b:27:79:fb:9d:57:4b:25:
fd:dd:73:7f:66:ff:54:dc:a3:27:e1:34:8f:56:e3:0f:c7:36:
33:3c:ff:0f:3f:15:6d:29:06:2b:c3:1a:a1:da:e5:f2:73:f9:
00:34:f2:e2:64:b0:64:60:6f:6c:90:31:23:55:ef:5e:f8:0f:
31:09:d1:ff:67:91:d2:6f:cd:0e:b3:0e:33:ca:24:aa:3d:80:
37:c8:33:61:45:6b:3f:d3:aa:78:5f:6a:f7:4b:af:c8:9f:40:
b3:a6:38:2a:9e:14:43:1a:a4:09:b6:3b:fe:1d:7e:5f:4b:24:
76:57:74:c2:0f:60:14:fd:8e:70:cd:b8:3d:3a:9b:fe:09:2b:
84:00:8e:c4:52:8c:c6:04:d0:17:77:e2:b6:e8:2e:03:5c:6d:
0d:f9:b7:49:18:7f:52:92:18:43:30:31:79:af:1b:25:fe:f9:
42:e3:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:49 2026 by rpki-client