Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: O67H7jia0Br8Xv/nBEG5nymhpad5sZEFIWxbrRP1f4Q=
Subject key identifier: DB:A1:9A:47:C5:40:28:36:E4:28:B4:DE:08:49:41:1E:51:26:6E:D5
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019CEB9474022B0A1AE6A9E2C6EC0A914E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 08FA
Signing time: Sat 14 Mar 2026 09:01:40 +0000
Manifest this update: Sat 14 Mar 2026 09:01:40 +0000
Manifest next update: Sun 15 Mar 2026 09:01:40 +0000
Files and hashes: 1: FMhSDB2bcbnNZRwsRENksHVKZ2w.asa (hash: OqqqK9AEW4hV2BzFVL2uOSThouiaUH9MYZU2kT9VKbo=)
2: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
3: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: NSlTK5GhBMrV4YfrhMvgeOH1oB/JygWaSPmrBjWnkec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 08:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:94:74:02:2b:0a:1a:e6:a9:e2:c6:ec:0a:91:4e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Mar 14 09:01:40 2026 GMT
Not After : Mar 15 09:01:40 2026 GMT
Subject: CN=dba19a47c5402836e428b4de0849411e51266ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:33:13:5b:45:f5:2c:94:03:36:39:70:49:
62:db:f7:34:2c:ec:f5:39:e3:f4:8d:41:fc:ff:1c:
b9:f4:22:66:7c:51:83:48:d2:b9:1e:e4:79:17:16:
05:3c:bc:07:d1:7f:51:bb:05:c4:13:ed:7c:45:10:
94:73:6b:fc:be:6c:94:19:ee:3f:2a:a5:4f:cb:f2:
6f:cf:1f:35:07:a8:ad:d2:f1:ce:d6:0c:28:ac:c5:
3b:5a:02:f6:c8:c7:7b:c0:46:6b:3a:43:4d:9f:c7:
de:3f:bb:52:5a:25:86:9e:0f:a5:63:33:c7:3e:07:
85:55:ae:31:3c:55:5b:aa:c2:41:5e:b4:3a:80:a7:
de:53:56:44:47:cb:14:39:9d:1e:6b:c3:83:45:6e:
d1:bf:8d:52:0c:f4:b1:e2:9d:90:fe:e7:80:06:04:
a9:8b:39:3e:12:55:54:cd:02:2b:81:81:25:f1:3b:
5e:46:60:94:d7:9c:d9:36:32:db:70:a3:1c:af:51:
83:9b:1d:bc:ff:24:17:49:b0:6f:58:0a:d5:2e:1f:
99:c3:7b:80:c1:9a:73:c2:3b:02:45:62:d4:18:a9:
85:a0:26:3d:88:12:93:7f:7c:d2:ab:80:28:ed:6a:
44:cb:84:3d:4a:b7:4c:3c:b0:02:4b:cb:58:ad:04:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A1:9A:47:C5:40:28:36:E4:28:B4:DE:08:49:41:1E:51:26:6E:D5
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a0:8e:3a:86:d0:73:d8:21:66:bc:90:6b:d4:da:ea:43:26:
95:bb:5c:01:c4:1f:a5:cc:e9:88:3b:f8:5b:dc:2d:13:8d:9c:
94:cb:65:7a:80:fd:05:e6:95:0a:61:45:4c:ee:d0:d8:eb:ce:
90:5d:34:17:d6:78:6c:ab:49:1e:42:35:21:91:f6:2c:e4:d0:
40:2a:3b:a6:99:b3:d0:a0:5b:43:22:45:21:44:95:ae:c1:4b:
09:0a:8a:0b:f8:a5:0d:a3:86:80:a2:a8:2f:cd:43:ca:fa:af:
f8:6c:96:9d:bf:23:62:43:30:0a:f8:47:dc:33:fd:27:0c:ab:
f5:1e:2e:c4:b9:0e:e3:c2:b3:4b:8c:ce:2c:d2:58:21:bb:db:
60:53:5a:24:c5:9f:13:25:3d:27:86:95:8f:5b:f3:ec:29:bc:
d7:fc:f8:57:f2:d4:60:e9:7d:9b:21:5a:10:2b:90:92:c4:aa:
4a:f5:9d:8c:ef:26:22:a2:4a:01:71:48:19:29:6d:75:16:3d:
fd:eb:0c:0a:39:4e:ba:53:da:68:da:d8:4b:bd:6c:87:e5:7c:
10:15:ad:c4:94:86:6a:0a:12:72:b7:ad:37:2e:91:70:73:b5:
ab:40:c4:8b:90:26:88:4b:94:6c:38:53:19:74:8a:a3:3d:dc:
78:9c:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:48:46 2026 by rpki-client