Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: uV0CNJ9XzrDnTzsuda8Y30kI8qYPp2Bt241IHKMoY2U=
Subject key identifier: 34:71:BE:B7:01:E2:F0:7D:B3:F2:02:55:7E:6B:8A:B9:23:58:1A:A5
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019D382E188888257FB2EDD874E380293563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0BD9
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: tSoyf098BzWvypOitt6w4PZYh1E.roa (hash: g79EXU28zyYLa6d3o4fUqKiOYkBLt7sppLFGfj7W4Es=)
2: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: 8fMPY2MsilfITwqRwHLcOb3PJ/yH2ziiV+70vuFMvuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:18:88:88:25:7f:b2:ed:d8:74:e3:80:29:35:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=3471beb701e2f07db3f202557e6b8ab923581aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:0a:2c:c6:68:10:45:fa:75:8e:14:06:5c:
f7:fe:03:7c:21:a1:20:66:56:92:1f:fb:0c:50:b1:
35:16:ea:4a:f0:9a:e5:70:1b:a7:f8:ae:cf:78:f0:
16:8a:a7:31:dc:bc:a9:87:14:27:a9:be:d4:3c:96:
8b:4b:ba:9d:79:cf:61:53:ed:1e:fc:64:b3:d8:c6:
ac:c3:0e:93:00:0e:ca:08:ec:10:2b:06:bd:92:b3:
48:ca:7b:34:24:e0:43:fc:39:98:44:c0:1d:2e:8f:
df:15:63:5f:38:81:76:07:75:51:d6:f1:dd:42:4c:
3f:b9:13:bc:7f:2f:8b:10:57:4e:83:84:4b:86:11:
f6:12:97:8e:ad:04:77:f7:a5:f7:62:ff:bb:91:65:
14:38:6d:84:3d:f0:e8:c8:b7:49:81:20:8b:69:65:
64:53:6d:42:2c:cd:68:16:76:32:e3:0a:76:a7:9b:
74:8f:1d:c5:66:a3:82:3c:74:7e:46:f7:3d:02:0c:
3c:69:e3:69:f1:93:3e:75:9a:2c:45:30:eb:4b:17:
48:09:c9:cc:79:4a:f9:1f:8c:3c:b0:ae:5a:11:92:
25:31:d1:51:48:c1:6d:80:81:fc:bf:f4:03:0c:b8:
78:44:72:3e:3e:c6:33:55:3d:c0:00:5f:6d:a0:74:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:71:BE:B7:01:E2:F0:7D:B3:F2:02:55:7E:6B:8A:B9:23:58:1A:A5
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ba:73:8f:41:32:ae:a8:78:b0:11:c9:9e:06:e8:1e:5b:a2:
ab:eb:a4:7e:18:53:d5:f4:43:11:9f:11:29:3a:a9:f4:5c:70:
6d:d7:81:92:72:94:89:75:c4:63:0c:eb:9b:4e:21:80:e3:ea:
95:4a:51:47:07:85:8b:86:f8:6b:5d:5f:57:da:90:00:1e:b7:
17:31:40:02:08:75:dc:fd:ed:e8:a5:71:e9:81:d7:5d:d3:8e:
47:4f:ce:43:c5:24:b2:7b:a3:53:8d:53:b8:ac:0a:3c:f9:93:
b5:af:7c:fa:8a:12:07:70:49:eb:7f:32:36:da:90:f5:1f:d5:
66:3d:8d:9c:e5:e6:9a:e8:21:2c:4c:bc:b6:c2:ea:02:5d:82:
73:dc:8c:34:2f:0b:17:81:92:b5:b5:52:5e:ee:27:db:d6:2f:
0c:a8:ee:dd:d2:f6:93:37:9d:06:a8:bb:f0:32:7b:60:9f:ef:
fa:c7:f6:e7:70:85:9e:07:eb:45:a8:70:9d:56:95:fa:a6:dc:
cd:72:08:c6:43:c1:1a:31:18:70:c6:de:30:6d:07:f4:9e:3c:
2e:77:06:fa:0e:5b:a5:82:5c:8f:2e:d8:0f:de:bd:fe:e3:99:
41:db:ba:f6:36:2f:b0:36:82:7e:3a:38:37:d1:6d:86:ae:fc:
f1:72:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:25 2026 by rpki-client