Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: O01iNUl9IDouEqwMS6oj6fkbeC+/J1oqKkd01KvGjzw=
Subject key identifier: F5:E3:57:29:55:49:4B:A8:BF:72:FC:67:12:7F:BA:D0:EB:E8:9E:A6
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019EE8C4C4C8C71DB71801CFCA0B0BCC0418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 0A02
Signing time: Sun 21 Jun 2026 06:01:09 +0000
Manifest this update: Sun 21 Jun 2026 06:01:09 +0000
Manifest next update: Mon 22 Jun 2026 06:01:09 +0000
Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=)
2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: EdE5ERb1oeMC540wl4kGXTjcUxW86YA8qUHZrGt9ZaE=)
3: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (hash: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:c4:c4:c8:c7:1d:b7:18:01:cf:ca:0b:0b:cc:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Jun 21 06:01:09 2026 GMT
Not After : Jun 22 06:01:09 2026 GMT
Subject: CN=f5e3572955494ba8bf72fc67127fbad0ebe89ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:b9:0c:ea:0f:93:d3:0a:fb:a1:0c:c5:f9:
97:9c:56:9d:04:3c:cf:44:8f:4b:56:2c:6b:0f:fa:
46:ff:3a:98:16:7c:71:b6:02:4f:7b:bf:6a:bd:27:
63:24:fe:00:62:ad:ad:30:2c:1e:70:d1:6a:4a:73:
2c:f0:e7:43:3d:66:bc:ae:df:35:04:cd:25:03:40:
e7:d0:c8:72:ea:79:22:ad:74:21:cf:eb:66:86:46:
5d:ee:46:2e:d3:c0:18:d3:6f:89:17:62:20:b4:55:
87:1f:7b:26:bf:87:2e:0b:ed:05:cd:5a:70:93:aa:
40:9e:79:dd:96:0f:8f:21:c7:d2:62:d0:fc:43:3b:
44:ef:29:c1:ca:65:32:bf:63:b0:bd:4e:fb:1c:e5:
06:ba:1a:18:6b:8b:d7:93:78:60:6e:36:c8:c7:fb:
29:8e:45:47:39:6b:1a:ba:be:9a:98:66:9c:dc:4c:
d3:39:a9:24:e1:9a:66:01:21:62:5f:6b:6d:a4:c2:
1f:e2:74:05:2b:e1:32:6b:7b:dc:2d:ea:31:6a:8e:
1a:25:91:4e:f5:bd:c0:39:a9:c4:e9:7b:65:8c:cd:
67:7a:bd:48:eb:2f:17:01:43:f7:21:24:a2:4d:c6:
dc:ba:ad:e6:b3:b7:37:12:d2:a0:fa:18:79:c6:62:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E3:57:29:55:49:4B:A8:BF:72:FC:67:12:7F:BA:D0:EB:E8:9E:A6
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:85:c2:db:23:92:89:3e:a8:1a:02:00:2b:6c:6a:44:b5:f3:
a9:78:9d:6f:73:52:52:cf:49:ab:c0:75:7e:b2:25:49:73:a8:
71:cb:78:2d:4b:72:c9:91:a3:c5:92:ea:26:a4:de:01:da:36:
78:97:fd:f2:80:30:31:bd:f5:81:ed:81:64:25:f8:23:c2:23:
d9:ea:6d:12:5d:90:3c:f7:c0:ec:36:fa:de:11:51:a7:b8:2c:
5d:57:87:c6:cf:0c:04:13:9d:02:e7:f4:52:bd:6f:3d:3e:c4:
d6:f3:ad:b8:ab:d0:b7:3b:02:c0:53:31:3b:6f:a9:f3:cc:18:
77:ef:1c:3e:75:0a:fc:08:8d:2c:67:cb:5a:2b:78:02:fc:89:
e5:38:a8:4d:05:ad:15:f3:a9:43:7a:fe:ab:ac:ba:70:24:e6:
a4:23:55:92:b2:10:4f:5a:3d:85:d2:48:dd:71:7f:37:68:6b:
3b:32:5e:43:c2:f5:5d:ee:48:8f:14:6a:cb:c4:57:10:76:e6:
7a:17:3e:cd:64:57:e0:7c:23:36:57:e9:a6:88:f0:33:ab:f3:
23:5c:79:10:34:2b:06:0c:f9:83:7e:42:1e:88:bc:69:1e:eb:
8a:e8:c3:75:0f:d1:28:e4:4b:fc:a2:c8:3f:fd:89:2a:96:71:
6f:45:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:12:06 2026 by rpki-client