Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: d73JNfUxTApM7fT3KvGsnn5RR005pMw2eybVyyNSUQo=
Subject key identifier: 00:0F:BF:38:79:F8:D8:F8:0B:5C:65:CD:F9:20:C2:ED:C4:55:C6:FD
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 019D9BBEE214412B517BDCA099313FF3039D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 1224
Signing time: Fri 17 Apr 2026 14:01:11 +0000
Manifest this update: Fri 17 Apr 2026 14:01:11 +0000
Manifest next update: Sat 18 Apr 2026 14:01:11 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: IsGpHdrk8rsk+R/Bo5giP9Ea4rboTdWTVHIinYLPC/Q=)
2: f8q72nrSHZd8tubKlt2Vm79HxNE.roa (hash: CK1Z+nBxJfN67DQ3jfNRhaauHSwB5IQIiVopFzFRMX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:e2:14:41:2b:51:7b:dc:a0:99:31:3f:f3:03:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Apr 17 14:01:11 2026 GMT
Not After : Apr 18 14:01:11 2026 GMT
Subject: CN=000fbf3879f8d8f80b5c65cdf920c2edc455c6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:53:5f:23:25:b4:a7:9c:2f:e1:79:87:31:
52:52:b3:ec:f0:69:e1:30:c7:e5:0a:73:92:e3:9a:
25:73:2a:cc:d7:fc:35:bf:89:09:23:76:1b:dc:68:
57:69:38:9d:6f:57:00:3a:7c:2b:92:c6:87:6a:81:
95:3b:74:c9:47:00:7f:9c:12:6e:6c:e7:6d:6d:88:
4e:07:fe:40:31:32:98:dc:0f:d5:d9:f2:46:a2:b8:
a1:9a:72:dc:cb:92:65:5a:41:a6:f5:5c:5d:bc:d5:
95:ef:9f:7e:19:df:ed:f9:5d:c5:ba:5a:da:e9:a0:
63:9a:28:3e:c4:a9:6c:d9:30:eb:2f:c6:d1:8a:2f:
74:f4:2d:d4:6e:83:15:b2:ae:58:05:11:04:52:7e:
13:f4:8a:da:9e:a4:a5:7c:38:98:5a:52:40:40:69:
ad:01:bb:be:5f:69:89:2d:42:69:d6:22:ca:39:2f:
72:fb:a9:dc:76:47:5d:f2:d9:1a:5b:ab:59:00:19:
be:58:e2:88:96:97:e4:7d:2f:0d:15:8b:21:03:46:
c2:17:66:0f:5b:24:90:6f:3b:77:93:40:87:8d:4a:
e5:e1:66:e8:0f:60:c4:82:61:33:ce:7d:fb:0e:39:
75:d7:4e:eb:83:62:68:31:5d:2e:e0:b2:a8:99:d8:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:BF:38:79:F8:D8:F8:0B:5C:65:CD:F9:20:C2:ED:C4:55:C6:FD
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fb:eb:11:cb:d9:0c:eb:92:2c:1e:d1:ee:3e:4e:24:38:b8:
46:38:22:e1:e3:4c:73:9e:b1:0f:b8:16:3b:83:67:6b:b3:e0:
1f:62:7e:2c:5b:48:29:d6:90:a8:42:c9:64:c4:ce:b3:69:d1:
92:bc:3c:0b:24:4e:d2:41:87:a5:6b:0b:54:71:69:6c:8a:94:
fa:ae:52:4f:d5:8d:af:c2:3b:05:be:2a:72:97:d3:7f:1e:b5:
df:14:b9:03:37:fe:66:1d:27:c8:ec:ec:0d:19:47:48:cc:a9:
d5:77:95:9c:3c:a8:d3:a5:82:a2:c9:6d:f7:79:72:5e:ce:04:
19:da:e3:28:db:f9:f3:0e:7b:2d:4d:6f:a8:03:e2:e9:a4:b1:
c6:ef:76:d0:9d:58:13:59:c3:d2:90:84:3b:1a:98:a6:99:72:
b0:22:d1:b9:b7:1e:3c:3f:6b:56:90:12:40:a3:c7:f1:c5:95:
b4:e3:07:2e:c5:da:73:7f:ba:79:60:1b:ce:03:ae:28:17:a1:
93:48:b7:92:6d:4d:d9:5f:00:1e:c3:3d:5a:52:25:2d:5c:3a:
5d:f7:56:2f:cc:09:b3:2c:c9:d7:32:4e:98:b5:3e:32:8b:73:
d8:5d:6d:76:0a:9c:a5:5e:98:ec:b8:36:68:8b:ff:8c:25:d2:
2e:11:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:47 2026 by rpki-client