Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: TJfrf8taF72GKaiH4yq8VNRg/SToB+i7tu+09a2aI7I=
Subject key identifier: C5:04:DA:0F:D5:93:16:7A:DA:44:FA:EA:67:11:48:C8:3F:4F:6C:26
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019E1DFE9539CBBD85AAB2497F54441BE0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0999
Signing time: Tue 12 May 2026 21:01:23 +0000
Manifest this update: Tue 12 May 2026 21:01:23 +0000
Manifest next update: Wed 13 May 2026 21:01:23 +0000
Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: MsHtSR2ge5ZPXz1eWAsn5vTfrxiDocwqBnAmdf0fVwk=)
3: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (hash: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:95:39:cb:bd:85:aa:b2:49:7f:54:44:1b:e0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: May 12 21:01:23 2026 GMT
Not After : May 13 21:01:23 2026 GMT
Subject: CN=c504da0fd593167ada44faea671148c83f4f6c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:80:da:7c:60:34:9e:39:c6:c5:4b:8f:ec:
f8:23:08:f3:32:12:ef:bd:5c:c9:ba:37:91:20:31:
55:60:83:2b:a5:0c:79:ea:e7:c8:c2:2e:58:09:2d:
a2:bd:4c:e6:f4:fc:f0:3f:4b:e4:97:98:8b:68:83:
ca:35:20:d6:6d:e7:d1:09:fb:94:3c:f2:a0:39:d0:
15:56:dd:d0:27:6d:99:7a:c5:9d:77:70:7d:1a:0a:
ce:b4:8a:46:da:d2:05:f9:d5:7c:f3:a5:d7:d5:c4:
e7:57:b8:26:3e:d7:31:3e:27:92:b5:5f:57:ff:f7:
5f:8d:7e:3e:5c:2a:63:c6:f2:1d:9d:a4:6a:09:10:
9f:e0:a7:51:b9:4e:6e:9d:93:35:42:aa:83:7a:56:
e1:d2:c8:2d:29:d5:7a:25:fe:6d:1f:58:8e:0e:f6:
09:0f:14:3e:37:c5:12:d5:80:61:cb:8e:87:6b:42:
72:af:59:54:4d:6e:60:85:03:e2:72:4e:c5:fd:0c:
c2:e6:a3:c0:7e:c1:c9:e6:15:f7:b1:73:5f:a8:e7:
22:da:17:f7:08:54:01:67:75:72:c8:5a:77:c1:26:
51:60:1d:f5:6e:8a:aa:da:a0:b7:89:2a:f7:d1:fa:
5b:3e:03:4c:fc:11:42:e7:8c:c6:22:09:a8:4f:78:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:DA:0F:D5:93:16:7A:DA:44:FA:EA:67:11:48:C8:3F:4F:6C:26
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d2:b2:85:6f:a4:1e:c6:2d:07:63:f5:6a:8b:f3:82:25:22:
98:a6:75:ea:33:8d:1e:59:28:7f:26:82:31:9d:07:3b:d7:e7:
be:d7:72:e0:20:14:97:e4:f7:cb:f0:a4:ea:82:15:4b:af:e4:
0e:d9:6b:3b:f5:af:25:ec:78:d7:65:9d:72:ee:ab:bb:a5:90:
8e:6c:b0:00:ac:ec:97:00:a2:2b:df:06:5c:cf:67:bb:fd:8f:
b2:04:ed:ed:6d:65:e3:a1:95:46:fc:56:fe:6f:65:e8:82:97:
f8:57:2a:4f:eb:cc:47:99:b4:52:d9:d6:93:ef:75:2f:77:b5:
12:ae:cf:fa:2f:55:9e:fe:0d:40:f7:a0:26:08:a3:a5:f6:c7:
43:19:28:a3:b9:75:b4:e1:e6:70:eb:dd:3e:dc:e8:9f:a7:bf:
2e:e6:f0:ef:d9:da:ff:7a:b8:97:ea:96:ab:66:df:34:16:40:
98:ea:24:24:92:1a:58:47:bc:76:5b:09:29:bc:d3:51:fa:52:
73:8f:e6:0b:60:bd:3a:a7:43:0f:e7:56:5a:68:be:1d:28:e5:
65:2a:81:c6:45:b1:7e:31:23:66:a8:12:c7:df:78:c1:b5:1f:
58:41:2f:6e:75:2d:0a:65:51:fc:31:42:34:30:5a:3d:22:f2:
7d:30:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:10 2026 by rpki-client