Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: M5w5TLIygG+QTqeXq7GTADurvCwbL1xXZ7i9Jex3P+s=
Subject key identifier: BB:A2:15:2C:0C:9B:71:CF:58:61:05:3C:37:5A:07:07:AC:E6:BE:BE
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 019D25F1A61862449B33B41D0DD395BC450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 11E7
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: OPCJQ62DSA+x35cKmRbHLKD10diEdvx0DsxexsOW/I8=)
2: f8q72nrSHZd8tubKlt2Vm79HxNE.roa (hash: CK1Z+nBxJfN67DQ3jfNRhaauHSwB5IQIiVopFzFRMX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a6:18:62:44:9b:33:b4:1d:0d:d3:95:bc:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=bba2152c0c9b71cf5861053c375a0707ace6bebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:44:15:6f:6c:ce:39:e6:fa:b0:bc:df:fe:
33:3c:e2:7b:13:d6:00:64:1f:75:83:48:be:22:cf:
8c:f4:83:62:61:c1:f4:c0:98:61:02:e5:b8:36:9c:
34:f9:a9:11:6b:99:4a:2f:0f:b2:30:b0:31:b4:bb:
a7:de:ad:04:20:5d:7e:40:54:a8:9a:94:85:de:a6:
4e:63:5d:8f:ba:9d:a4:3e:98:34:de:49:a3:cd:c0:
c2:19:ca:25:ab:0c:9e:5a:9a:3a:4f:55:70:e4:3c:
50:4a:02:dd:20:90:81:7c:8a:25:2f:9b:99:18:9c:
37:89:1b:72:5a:c6:c8:0a:b3:a6:28:59:53:4f:84:
71:f2:f9:21:da:c1:93:b6:82:b4:c1:7b:28:aa:cf:
b5:f9:2a:35:97:5d:98:55:40:73:30:2a:aa:b4:fd:
e7:84:5c:04:67:61:40:7c:d3:2c:30:d5:41:19:45:
16:5d:b5:f5:63:c0:6a:73:d2:9e:5a:c2:e3:da:77:
60:c6:00:ba:29:52:a5:5c:3c:56:0b:03:1d:d0:80:
30:00:a1:0c:be:65:f4:1a:2f:ad:78:11:05:07:2d:
6c:9d:fd:55:dd:c3:16:83:61:47:10:ca:76:ce:45:
95:c4:d5:bd:d8:35:c0:b7:7d:ec:8f:4a:8a:77:5a:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:15:2C:0C:9B:71:CF:58:61:05:3C:37:5A:07:07:AC:E6:BE:BE
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:10:ee:f9:6f:f9:04:58:e8:c3:fd:cc:22:c6:c4:c4:9a:a2:
07:f6:58:4f:8c:43:d0:ad:32:a0:1a:e7:49:a3:f4:35:9c:11:
b4:66:79:a9:c9:43:a3:10:8c:0c:e6:11:d5:24:42:08:9b:c2:
1b:3a:bb:51:f2:57:9f:20:95:91:20:f8:5c:0c:8e:96:85:fc:
98:16:f9:ad:4f:7c:35:ae:18:cb:da:fb:2a:53:41:66:27:e8:
fb:92:7f:35:af:13:90:13:c5:ea:a3:86:a1:6e:a9:80:54:47:
fe:b2:41:ea:6d:a2:9e:b1:7e:95:db:a0:90:c7:7b:13:3a:49:
6f:85:9b:35:28:6a:7f:7d:a9:8e:2d:4c:8b:a9:75:bc:cc:a5:
a0:39:d1:72:91:2a:8d:60:93:97:5f:eb:7f:05:67:cd:f0:1c:
99:de:4c:4c:4a:de:04:ec:23:fe:26:24:ec:79:56:4b:6b:67:
4f:29:8c:0a:d3:df:f4:7b:e6:26:3a:68:67:10:79:33:1e:c7:
e2:5e:82:98:29:d9:9b:4e:d9:67:db:1e:83:18:55:12:3c:15:
e0:d1:55:17:c2:cf:4c:e0:b6:c5:ef:73:36:4a:3b:c6:19:a3:
e8:f6:44:04:ca:ca:e6:d7:f2:4e:00:e2:4a:b9:df:4a:0c:00:
d0:22:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:54 2026 by rpki-client