Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: 3clb5AknGdz9sYCIv4o3S+k3TevPMCKqohNbLxGID/4=
Subject key identifier: AA:2A:DF:3E:25:47:71:C0:98:BA:46:53:C3:5C:42:56:19:F3:E1:EC
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 019CAC473397A32D07F646C3CFAD29F83125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 11A8
Signing time: Mon 02 Mar 2026 02:01:13 +0000
Manifest this update: Mon 02 Mar 2026 02:01:13 +0000
Manifest next update: Tue 03 Mar 2026 02:01:13 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: xGEb5/YcZ9f83S+noChXmXHTK2M0lS3qe1oTbNMycVw=)
2: f8q72nrSHZd8tubKlt2Vm79HxNE.roa (hash: CK1Z+nBxJfN67DQ3jfNRhaauHSwB5IQIiVopFzFRMX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:33:97:a3:2d:07:f6:46:c3:cf:ad:29:f8:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Mar 2 02:01:13 2026 GMT
Not After : Mar 3 02:01:13 2026 GMT
Subject: CN=aa2adf3e254771c098ba4653c35c425619f3e1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:81:05:4d:c5:7d:ed:b0:33:c0:02:c8:a7:
8f:c3:ee:f3:0c:81:8e:a5:06:c1:04:9d:83:cf:5e:
3c:82:bc:b2:94:47:ec:17:87:f2:25:ec:44:58:82:
11:a9:5e:dc:63:e0:86:15:cc:ec:86:00:18:3c:6a:
a2:53:17:1b:5e:b0:0e:fb:87:9a:26:2b:07:17:2a:
81:3e:5e:59:32:df:40:8e:cb:ef:42:24:06:2f:00:
f7:db:fa:12:ce:ee:51:6b:c4:40:d2:f9:52:51:ff:
43:c2:0b:40:a9:45:22:63:04:d3:0d:16:34:78:ce:
89:57:fb:b6:18:34:9b:84:c6:78:4d:26:74:1b:81:
87:7e:bf:34:70:84:c0:63:07:8a:df:39:51:7e:9b:
ff:12:a1:8d:41:f5:17:c7:80:97:2e:2b:8c:ed:75:
e4:4a:30:8e:6c:2c:1d:de:19:cf:95:a1:df:b2:11:
7a:34:9c:1b:80:31:df:10:21:23:86:ed:a9:56:9b:
d0:5e:33:7c:6b:22:ef:a2:62:a3:2f:c0:87:e1:ae:
d9:7c:ba:05:6d:60:f9:ba:d9:ea:bd:7b:d1:44:ec:
cb:2b:ee:7b:07:b7:69:97:00:f6:bb:14:97:ab:80:
a9:36:a5:b8:2b:7c:d3:2e:6a:a3:92:29:0e:fd:f3:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:DF:3E:25:47:71:C0:98:BA:46:53:C3:5C:42:56:19:F3:E1:EC
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0a:50:3e:f1:54:95:e0:6d:11:bc:c5:47:8f:de:d7:5e:da:
79:48:aa:be:2e:03:6c:14:d3:da:33:85:a3:f6:1c:28:2c:9b:
2b:5e:9c:9e:c6:3e:77:27:e7:30:b9:8e:9b:94:66:79:70:24:
50:ca:f8:71:cc:70:28:fd:1c:86:76:85:67:8d:22:40:02:2f:
9c:f7:35:f3:fa:01:16:38:39:87:4e:61:03:9b:39:50:1c:bd:
71:54:ec:06:8b:54:a0:2f:43:1e:9a:3e:69:1b:46:30:26:05:
09:0c:a0:68:4a:00:85:ce:65:ca:c5:87:f4:3b:86:0a:a4:10:
df:25:6b:af:d1:0b:9c:55:af:cf:03:21:4d:02:30:1d:88:c7:
b9:cf:d3:c5:5e:18:2e:d0:06:c3:6b:cf:5e:51:93:82:10:14:
d1:1e:9b:35:fc:3d:d0:22:f2:02:19:0f:6a:2c:d5:03:76:10:
2e:e8:e5:17:ca:50:47:00:03:59:a8:d0:5f:42:a3:78:e3:6c:
46:f5:25:69:0b:65:5b:79:2e:7b:7e:9e:f5:8f:72:cd:7c:c2:
72:f5:c1:71:bd:bb:5f:d1:d9:3c:66:bc:32:52:99:e3:bf:6a:
b9:dd:31:33:b8:0e:ed:79:3e:4e:a8:18:56:e8:99:d4:9e:cd:
a0:b7:61:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:53 2026 by rpki-client