Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: O8xm5xJZ13fsBzld4wvhrRNaZIJMl6KfIgKrMzG+q+k=
Subject key identifier: B5:6A:60:E3:65:05:0C:AC:2F:00:3C:61:A3:CB:1A:DE:6F:2D:C0:F6
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 01A0CB59ED3BF6579BC0EEDC9ACAD36CB4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0AFC
Signing time: Tue 22 Sep 2026 23:01:03 +0000
Manifest this update: Tue 22 Sep 2026 23:01:03 +0000
Manifest next update: Wed 23 Sep 2026 23:01:03 +0000
Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: S3xFyZqFuu9Bt09U33AV5Cm9TDBz48EVSKiYQScihLs=)
3: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (hash: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:ed:3b:f6:57:9b:c0:ee:dc:9a:ca:d3:6c:b4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Sep 22 23:01:03 2026 GMT
Not After : Sep 23 23:01:03 2026 GMT
Subject: CN=b56a60e365050cac2f003c61a3cb1ade6f2dc0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:33:96:e0:23:ff:66:2f:da:f4:85:3f:47:
10:56:fa:59:62:c2:ce:8a:0a:32:20:72:7b:5f:bd:
82:c0:20:07:b5:27:52:72:f9:d0:99:ab:be:2f:db:
62:38:12:06:72:aa:f1:96:a0:6d:fe:00:e6:98:6d:
50:24:7a:22:f6:a1:89:f2:30:55:27:89:4c:95:2f:
0d:e8:a6:5d:6e:69:a8:98:53:65:ff:d4:4f:68:63:
2d:82:47:8d:fe:e9:92:da:33:1c:6a:11:20:5e:c7:
49:c8:55:a9:2d:9d:88:56:0b:52:9d:ec:29:0d:47:
9e:a0:fb:31:0a:a6:44:b3:db:b8:4b:73:26:da:b2:
3f:5c:b7:8e:a8:50:05:82:c8:f6:02:c1:c3:a8:20:
10:dc:a6:e2:56:0d:75:6a:51:68:b3:24:d4:13:d6:
04:dd:3d:04:d9:71:a1:1f:83:56:65:d6:72:83:dc:
7d:82:e8:db:b9:0c:56:07:b9:c5:b4:db:06:f9:01:
8d:87:2f:7f:da:af:3f:00:54:1d:25:b7:2a:0a:25:
f3:63:02:ed:90:8d:bc:cb:70:b3:85:fc:7c:92:d4:
2c:13:11:50:56:90:ed:96:64:fb:6f:2b:4c:8a:15:
f0:c7:6e:d5:f3:8b:35:5e:42:fe:60:4d:0e:30:ae:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6A:60:E3:65:05:0C:AC:2F:00:3C:61:A3:CB:1A:DE:6F:2D:C0:F6
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:c2:a0:44:79:bf:8d:41:bb:72:f5:f3:7f:26:ed:7b:25:
0f:02:b9:4d:b2:8a:f2:13:1c:32:29:55:cd:74:60:39:89:86:
30:14:65:7a:8f:03:1b:c4:6b:c9:1f:02:fc:d7:03:44:23:99:
b6:d9:0f:4a:17:c4:9c:58:af:93:ad:6e:8e:c2:bc:04:e1:09:
d4:0f:ad:6b:f9:3b:23:c3:de:c9:81:91:bb:06:38:72:68:3f:
50:a4:fc:8f:ca:25:3f:ea:f6:0a:7e:94:ab:a9:6b:7d:89:d0:
06:39:fc:43:48:53:6d:88:6c:b6:1b:35:1c:e0:40:ed:55:1a:
2b:32:68:40:a5:78:10:34:01:dc:a0:ba:d1:ec:83:c6:88:b9:
41:a4:51:09:c5:cd:67:13:22:da:a7:8c:3d:c2:aa:ba:21:d3:
cf:3f:c9:3e:f6:7b:44:e9:38:e1:6c:a8:e3:74:61:7a:83:dc:
64:de:c8:85:05:8f:e8:2a:b4:41:2c:95:00:0c:2c:90:67:8c:
56:5b:4b:92:22:f7:19:5e:d3:01:2b:79:26:6c:fd:ef:5f:67:
65:be:33:58:99:f4:05:97:41:92:b0:4b:22:3d:d5:30:c1:8b:
57:96:20:85:4e:30:fe:59:22:0a:19:c3:fa:c7:0d:1d:fc:18:
14:6c:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:36:40 2026 by rpki-client