Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: Fwgccjso+YDTjIYdciIG6PihKRAJFzAk9gA5q9ugDgc=
Subject key identifier: 5E:F9:50:1F:FB:87:58:54:18:EF:E7:22:4E:27:35:90:89:AB:9B:B1
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019D27723BA69E3AC9359202BD2CEA9013E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0919
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: FMhSDB2bcbnNZRwsRENksHVKZ2w.asa (hash: OqqqK9AEW4hV2BzFVL2uOSThouiaUH9MYZU2kT9VKbo=)
2: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
3: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: BkdTG5ISlq78ZRVMQ95yyN9wtiDG8FArsIBRNqvKYP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3b:a6:9e:3a:c9:35:92:02:bd:2c:ea:90:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=5ef9501ffb87585418efe7224e27359089ab9bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:b2:8b:7a:01:4a:5c:73:6f:c1:f0:75:30:
7d:05:60:31:f0:7c:93:14:b2:76:1f:f4:5d:19:7b:
56:93:44:94:ab:eb:23:29:0c:eb:40:92:96:10:2d:
6b:1b:5d:a3:fd:0d:50:85:a6:89:78:13:45:a5:92:
05:b0:bf:f1:fd:15:5a:be:a8:e5:06:65:3b:ce:9d:
3c:74:ee:36:2d:e1:d8:a0:23:1e:da:25:1e:c9:e8:
56:4f:50:58:53:2f:e8:a0:ce:34:7b:52:95:a8:36:
95:68:13:84:fe:2b:e6:b8:3c:ad:52:cb:72:ae:42:
c9:97:f4:e7:48:51:96:bc:bf:72:5c:dc:01:08:c3:
af:a5:9d:33:4f:ec:96:20:fa:12:ac:04:56:97:ef:
11:9d:8d:1b:19:41:4b:db:ec:74:48:a0:a8:67:8c:
3d:b0:8a:35:8c:ac:70:bd:cd:aa:5d:a2:4f:65:f9:
7c:8f:03:a5:cd:06:42:5c:12:77:73:93:12:af:9d:
97:13:42:0a:3b:c2:69:4c:09:41:87:d6:1e:ab:d9:
9b:18:d6:26:49:78:da:8d:6e:24:0f:0a:62:37:06:
a3:a1:e8:de:75:db:41:f6:04:ab:62:7e:18:39:b4:
bc:f6:f5:07:8b:cf:eb:c0:df:ea:53:53:5f:ba:0e:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:50:1F:FB:87:58:54:18:EF:E7:22:4E:27:35:90:89:AB:9B:B1
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:e2:19:38:de:c7:d9:12:77:f7:49:65:75:da:45:2f:19:
8b:38:9d:e8:70:c6:28:16:06:6d:ee:64:47:a4:82:ff:49:f1:
cc:45:41:cc:d8:b6:f1:4d:84:b6:5b:af:fe:e0:30:09:88:08:
99:66:44:81:80:a8:82:a4:38:57:fd:d9:a2:04:9f:f4:3a:86:
3d:bc:51:4f:e4:93:cb:2f:6a:86:2c:7f:9c:fe:d5:4c:f5:c1:
49:c9:22:96:22:12:4e:16:b1:56:ee:44:f4:bf:da:62:58:58:
e9:0d:d7:43:cb:83:7e:db:dd:02:f1:67:40:6e:a7:b5:5f:f9:
05:98:5f:16:06:24:80:03:6c:1a:10:66:e5:60:63:a9:29:92:
dc:63:a3:83:c1:89:b2:67:2b:2e:ed:40:92:72:10:c7:ae:6f:
85:32:d1:be:a8:1e:28:95:7f:72:ee:d8:12:85:63:68:43:dd:
57:7f:dd:c8:b4:e7:a5:14:4c:5f:d5:a6:f4:94:2d:b8:28:c2:
73:b6:76:9a:d6:5a:7c:cb:62:10:ce:da:42:ba:df:d7:cb:73:
f6:2f:b4:b6:83:80:dc:ed:a8:d2:3c:8b:0c:6e:fc:e4:a6:7c:
17:c4:8f:84:0e:0e:a8:cc:b6:93:5f:e6:18:e0:63:83:db:d8:
58:71:72:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjumnjrJNZICvSzqkBPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy
YzI0ZDAwHhcNMjYwMzI2MDAwMTMwWhcNMjYwMzI3MDAwMTMwWjAzMTEwLwYDVQQD
Eyg1ZWY5NTAxZmZiODc1ODU0MThlZmU3MjI0ZTI3MzU5MDg5YWI5YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLiyi3oBSlxzb8HwdTB9BWAx8HyT
FLJ2H/RdGXtWk0SUq+sjKQzrQJKWEC1rG12j/Q1QhaaJeBNFpZIFsL/x/RVavqjl
BmU7zp08dO42LeHYoCMe2iUeyehWT1BYUy/ooM40e1KVqDaVaBOE/ivmuDytUsty
rkLJl/TnSFGWvL9yXNwBCMOvpZ0zT+yWIPoSrARWl+8RnY0bGUFL2+x0SKCoZ4w9
sIo1jKxwvc2qXaJPZfl8jwOlzQZCXBJ3c5MSr52XE0IKO8JpTAlBh9Yeq9mbGNYm
SXjajW4kDwpiNwajoejeddtB9gSrYn4YObS89vUHi8/rwN/qU1Nfug5GtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF75UB/7h1hUGO/nIk4nNZCJq5uxMB8GA1UdIwQY
MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt
MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4
LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKriGTje
x9kSd/dJZXXaRS8Zizid6HDGKBYGbe5kR6SC/0nxzEVBzNi28U2Etluv/uAwCYgI
mWZEgYCogqQ4V/3ZogSf9DqGPbxRT+STyy9qhix/nP7VTPXBSckiliISThaxVu5E
9L/aYlhY6Q3XQ8uDftvdAvFnQG6ntV/5BZhfFgYkgANsGhBm5WBjqSmS3GOjg8GJ
smcrLu1AknIQx65vhTLRvqgeKJV/cu7YEoVjaEPdV3/dyLTnpRRMX9Wm9JQtuCjC
c7Z2mtZafMtiEM7aQrrf18tz9i+0toOA3O2o0jyLDG785KZ8F8SPhA4OqMy2k1/m
GOBjg9vYWHFyHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:37 2026 by rpki-client