Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: 8tBc/EpBBnVYDB6kqdbW+adXKNlxMGNx778hg/ClIHU=
Subject key identifier: 1B:83:49:21:D5:52:70:88:25:02:DC:93:F8:42:01:07:E6:22:8D:17
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 01A0F1F9D0E69B36B7E6979883763DDB9CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0B10
Signing time: Wed 30 Sep 2026 11:01:15 +0000
Manifest this update: Wed 30 Sep 2026 11:01:15 +0000
Manifest next update: Thu 01 Oct 2026 11:01:15 +0000
Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: u05SVIHJM10IC89mxrgxfH20cq3cYDlKzbxZ3AIrcCA=)
3: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (hash: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:f9:d0:e6:9b:36:b7:e6:97:98:83:76:3d:db:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Sep 30 11:01:15 2026 GMT
Not After : Oct 1 11:01:15 2026 GMT
Subject: CN=1b834921d55270882502dc93f8420107e6228d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:f1:d5:9e:ed:73:af:7d:3f:71:c5:df:c1:
97:62:5c:37:25:09:1c:81:d8:a9:5e:59:5b:76:ec:
0d:cb:e0:26:16:3d:62:3a:40:ce:f2:73:0e:06:f0:
fc:6f:16:b6:d7:32:2c:30:9d:90:0c:46:c7:a6:de:
d8:8f:d6:27:55:d6:ad:ec:a5:13:a7:f7:9d:7f:83:
ac:51:2a:07:b1:31:22:ed:a0:4c:88:97:60:9d:d8:
cb:fc:ea:83:04:9f:e6:84:98:1a:12:ca:96:4a:c7:
30:c3:3a:86:c8:7c:7c:11:c8:c0:a0:58:67:1a:a7:
2d:58:c5:1e:36:f1:ae:a8:4e:18:09:35:90:16:11:
85:9c:82:ef:e0:be:e4:6a:ab:13:a6:ac:19:bc:22:
47:b5:6b:c9:d5:32:30:b9:a3:d4:7b:5b:d9:fe:4e:
05:13:96:51:63:17:72:4d:19:b4:aa:fc:d9:4c:39:
43:86:f9:59:71:3f:95:8c:1d:ef:cb:24:17:64:73:
ea:ed:45:05:c3:bb:6f:4f:a7:b9:01:07:39:e5:84:
98:cb:c5:84:16:cf:f6:ae:5d:e4:49:a1:36:60:8f:
a9:43:ca:a0:1c:ee:37:70:8f:58:a6:f4:bb:00:05:
46:da:7f:c6:5a:81:d6:ab:26:cc:53:af:89:f6:8b:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:83:49:21:D5:52:70:88:25:02:DC:93:F8:42:01:07:E6:22:8D:17
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:12:85:94:60:9a:de:10:9a:6b:bb:53:2d:9f:1e:99:ad:d7:
03:54:0e:77:bb:be:b3:30:91:2d:90:88:07:37:b8:02:d7:77:
65:78:a7:26:ae:1a:b7:d3:ed:0c:1a:4e:1b:ab:33:78:5b:ac:
aa:27:62:fe:db:40:0e:83:df:43:22:a0:60:74:db:30:a7:a3:
92:23:23:3c:ec:36:e3:15:e9:dc:56:82:3d:72:57:8b:b7:b4:
79:a1:97:98:d2:4b:3e:44:c4:54:97:f7:2e:6e:0b:e3:77:5a:
3f:36:03:10:56:43:5e:f5:fb:5d:ea:8f:ab:a8:94:e0:e6:49:
db:93:0d:b6:bc:f1:c7:82:d2:61:fe:03:3a:79:68:3e:ee:3e:
73:5e:30:49:46:6e:80:86:1b:e2:15:bf:54:7a:bf:45:1e:d6:
41:29:40:5f:2e:b7:f8:4c:51:4a:e2:53:88:89:6e:4d:e8:ba:
bf:d9:87:2d:ef:f2:37:ec:95:46:8d:46:fd:ba:b9:a7:af:67:
1c:06:df:aa:87:12:68:67:2b:8f:23:e4:d3:d0:a2:0a:f3:08:
7e:2f:d0:a5:fe:f1:29:a2:11:1b:56:0a:d4:04:00:38:2c:59:
53:ba:a3:c0:7d:06:a2:d2:4a:7d:bd:54:ab:44:53:14:30:83:
d2:10:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:27 2026 by rpki-client