Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: x7NoAtJrJGwdbGWgOKW8RSY0vDnqyWwd/XYwm4SKFpc=
Subject key identifier: BB:20:EE:22:6C:39:E7:27:9F:CF:3C:D1:1E:71:FD:5C:A2:CD:BB:64
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019FF8DA9198BA8E3727E7758A8D071A8FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0A8F
Signing time: Thu 13 Aug 2026 02:01:41 +0000
Manifest this update: Thu 13 Aug 2026 02:01:41 +0000
Manifest next update: Fri 14 Aug 2026 02:01:41 +0000
Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: rVTjqlNBf9c5yBAZnkCNNZ0225kk7ZlPwfnuxQmbGbo=)
3: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (hash: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:91:98:ba:8e:37:27:e7:75:8a:8d:07:1a:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Aug 13 02:01:41 2026 GMT
Not After : Aug 14 02:01:41 2026 GMT
Subject: CN=bb20ee226c39e7279fcf3cd11e71fd5ca2cdbb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:e6:b6:5e:6d:13:1c:b2:28:17:f6:2b:e9:
75:7f:98:cb:b5:dc:68:9e:ed:65:19:d8:82:d0:33:
73:fd:1c:5b:8c:3f:95:c7:f0:17:98:07:c5:77:6c:
ad:0c:a9:a7:19:00:a4:f6:ca:b2:8c:78:08:05:43:
56:6b:20:88:06:98:c0:e4:a8:e1:23:f0:a8:11:19:
b3:56:78:e5:5c:39:4c:e2:f9:8e:05:8f:28:10:0d:
bf:25:aa:aa:ae:be:f2:4f:73:0e:b7:14:3b:81:fb:
68:34:04:16:e4:1c:3f:a4:d2:d5:ef:e4:47:95:1e:
cb:f9:26:aa:fe:1d:30:a5:48:54:69:7d:cb:74:b3:
06:f1:3f:93:74:89:0d:85:e5:ce:6e:09:17:1b:cd:
f5:d4:87:22:c7:df:6b:a7:e9:6c:fe:d0:6a:d5:1c:
a6:59:d2:1b:90:15:ab:5b:cc:d5:1f:f5:f9:f8:5f:
6a:8f:e6:ed:ad:02:28:a9:3c:b3:56:7b:3c:df:48:
bf:71:88:7f:b0:db:44:e4:8f:f7:24:aa:9c:be:fc:
38:6a:81:fe:23:af:e0:ef:5e:71:3f:e3:2f:d3:6c:
9e:0a:99:ce:f9:2d:cf:a8:8e:32:f3:2c:24:0b:ad:
2e:f7:c2:e1:be:e5:92:1f:fe:41:a1:6e:40:5a:b4:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:EE:22:6C:39:E7:27:9F:CF:3C:D1:1E:71:FD:5C:A2:CD:BB:64
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:50:92:c9:49:ee:f2:1c:67:4b:57:7a:ab:ff:65:2c:2c:80:
85:cd:cd:92:a1:62:db:69:96:64:28:c5:0f:a8:ef:c1:62:99:
9b:bd:ab:a6:54:2e:e3:d3:71:3a:0c:03:3b:3d:75:8e:c8:86:
5b:62:de:66:6c:38:43:6e:61:7c:a9:6a:96:32:81:b9:cd:9c:
d6:fb:51:e8:c6:c9:fd:7d:52:35:a3:fb:ff:42:e9:6f:de:3d:
1d:df:c6:e5:4f:72:36:27:27:4e:da:40:e4:44:56:1b:86:91:
1d:de:12:e8:38:e9:43:e3:77:cf:7d:b9:a3:71:0a:23:59:e7:
f2:6f:19:0c:9e:8b:70:3e:0e:56:74:50:f6:d5:9e:67:f0:3f:
1e:1f:e5:67:df:26:01:55:7a:1f:33:c9:a4:75:40:a0:fc:56:
95:f1:83:cd:47:d7:35:9d:e5:a3:00:0b:88:7d:be:f9:13:57:
44:5c:16:ae:84:1d:ad:c6:88:82:29:42:33:cd:97:3c:89:5f:
84:55:ec:14:b4:65:54:6c:bd:94:0e:e5:ed:44:8e:ea:9b:5b:
ed:2b:42:72:fd:bc:1a:f0:24:27:9a:50:c8:f0:4c:55:23:73:
48:f8:3c:5a:5b:67:5f:ef:01:98:70:ff:11:bf:4c:5a:40:b2:
90:f1:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:51 2026 by rpki-client