Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
File: tkkanUdy_S313Ak9TiDT7YEHKVc.mft (raw, json)
Hash identifier: jeEp3Qx9+QzcEXlWkC5DM02tTCLtWJ3kLwm7X0C9YYI=
Subject key identifier: 15:69:AF:72:C1:CE:8F:0B:85:02:FA:D7:0B:67:AD:24:3B:08:63:A7
Authority key identifier: B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
Certificate issuer: /CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Certificate serial: 01A1946886DF5C06655C9AEC672800A6F264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
Manifest number: 0229
Signing time: Sun 01 Nov 2026 00:00:40 +0000
Manifest this update: Sun 01 Nov 2026 00:00:40 +0000
Manifest next update: Mon 02 Nov 2026 00:00:40 +0000
Files and hashes: 1: MYKEbEbG2BOde6gzN9ttGm9H4jg.roa (hash: ERm9KLynZ/NxLY8GY3PLaYvLuotadE/r63dZSbos3LM=)
2: tkkanUdy_S313Ak9TiDT7YEHKVc.crl (hash: fdzeJcwslWiKx3oKOxFgMmtdi+weQ7Rkq0ILtdmjPdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:68:86:df:5c:06:65:5c:9a:ec:67:28:00:a6:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Validity
Not Before: Nov 1 00:00:40 2026 GMT
Not After : Nov 2 00:00:40 2026 GMT
Subject: CN=1569af72c1ce8f0b8502fad70b67ad243b0863a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:10:7c:8b:4e:22:3b:35:25:b4:25:78:5f:
21:ac:46:6f:23:39:8d:61:11:b5:b2:53:e1:6f:66:
21:33:39:fe:ea:bb:d3:2a:8f:03:0d:4f:e1:26:9c:
4e:53:81:ad:88:40:ea:59:88:d8:7b:70:70:fa:61:
ba:55:06:5d:ae:db:4c:3c:05:a5:f6:24:6c:39:5d:
7b:94:5e:e3:6d:de:98:87:97:da:32:47:d3:b8:69:
18:e2:59:33:bd:c7:48:24:09:31:29:46:60:97:da:
2d:63:b4:a4:68:85:e3:3e:45:4c:87:ae:8e:b1:da:
c0:77:e4:2e:d8:cd:67:b5:76:f5:89:b2:d0:c5:39:
7b:68:46:70:b7:d0:24:07:19:2d:8b:28:2e:61:94:
f0:df:48:96:82:64:30:91:b5:f4:7a:79:f1:1b:ad:
42:b7:74:26:3d:56:b2:3e:6c:41:9b:e5:9c:49:fb:
67:3b:62:c2:9f:d4:8b:95:d6:12:16:04:9f:fe:a6:
86:5a:65:97:e6:5b:35:5f:5d:d7:ab:c5:a1:f7:fc:
3b:3f:4a:ce:95:74:68:79:78:5f:30:8e:4d:b2:a3:
4d:72:37:5e:4c:60:57:26:bb:b3:51:3a:35:e1:0d:
df:8c:02:b1:3b:e2:31:8e:bf:b7:ad:c3:ec:7c:bf:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:AF:72:C1:CE:8F:0B:85:02:FA:D7:0B:67:AD:24:3B:08:63:A7
X509v3 Authority Key Identifier:
keyid:B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c5:62:2d:32:5c:78:92:4d:3e:3c:a5:c9:0d:db:83:d9:34:
1f:c3:9b:44:df:e9:6b:0f:71:1e:f6:92:b9:76:2b:b7:17:a3:
e5:a8:3c:e0:35:da:a2:e7:23:07:5e:9e:69:40:1a:43:53:92:
93:29:2b:fd:0f:4c:50:18:ad:cc:14:58:b2:98:47:86:37:76:
a5:67:ce:e7:ad:38:70:db:a7:74:16:e2:bb:8b:6f:a9:08:85:
cb:0f:bb:19:f4:09:c3:46:62:ef:ac:2b:d0:f9:5e:ee:fa:56:
3f:6d:64:15:fc:b1:93:8d:86:f4:e7:59:67:e8:e8:0c:33:14:
7f:6b:7c:09:62:0a:d2:3b:07:60:2b:59:63:4d:0b:11:59:f3:
60:36:79:c2:35:8a:1f:13:54:19:3f:59:37:e7:2c:be:3f:ac:
c7:81:62:42:3e:f0:f8:c9:fe:d5:2e:33:3d:b8:a0:32:f6:e2:
b4:f3:c0:80:62:52:bf:2e:7a:d7:fa:96:48:76:0e:9a:6e:26:
40:cc:2e:dd:4c:1d:f7:b9:8a:fe:96:e9:ca:90:1f:15:14:fa:
6f:16:6e:85:c7:2c:c9:aa:d7:21:6f:cb:2f:b2:dc:3e:51:6c:
51:35:4b:25:32:7f:41:3b:d3:b9:78:06:fe:81:1f:98:07:d2:
6b:3b:cd:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGUaIbfXAZlXJrsZygApvJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDkxYTlkNDc3MmZkMmRmNWRjMDkzZDRlMjBkM2VkODEw
NzI5NTcwHhcNMjYxMTAxMDAwMDQwWhcNMjYxMTAyMDAwMDQwWjAzMTEwLwYDVQQD
EygxNTY5YWY3MmMxY2U4ZjBiODUwMmZhZDcwYjY3YWQyNDNiMDg2M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7EQfItOIjs1JbQleF8hrEZvIzmN
YRG1slPhb2YhMzn+6rvTKo8DDU/hJpxOU4GtiEDqWYjYe3Bw+mG6VQZdrttMPAWl
9iRsOV17lF7jbd6Yh5faMkfTuGkY4lkzvcdIJAkxKUZgl9otY7SkaIXjPkVMh66O
sdrAd+Qu2M1ntXb1ibLQxTl7aEZwt9AkBxktiyguYZTw30iWgmQwkbX0ennxG61C
t3QmPVayPmxBm+WcSftnO2LCn9SLldYSFgSf/qaGWmWX5ls1X13Xq8Wh9/w7P0rO
lXRoeXhfMI5NsqNNcjdeTGBXJruzUTo14Q3fjAKxO+Ixjr+3rcPsfL9EXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVpr3LBzo8LhQL61wtnrSQ7CGOnMB8GA1UdIwQY
MBaAFLZJGp1Hcv0t9dwJPU4g0+2BBylXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtrYW5VZHlfUzMxM0FrOVRpRFQ3WUVIS1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMjI5ZDgtNzM4YS00MTE3LWFmNTkt
MTA5M2Q0OTczMDkxLzEvdGtrYW5VZHlfUzMxM0FrOVRpRFQ3WUVIS1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jMjI5ZDgtNzM4YS00MTE3LWFmNTktMTA5M2Q0OTczMDkx
LzEvdGtrYW5VZHlfUzMxM0FrOVRpRFQ3WUVIS1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcViLTJc
eJJNPjylyQ3bg9k0H8ObRN/paw9xHvaSuXYrtxej5ag84DXaoucjB16eaUAaQ1OS
kykr/Q9MUBitzBRYsphHhjd2pWfO5604cNundBbiu4tvqQiFyw+7GfQJw0Zi76wr
0Ple7vpWP21kFfyxk42G9OdZZ+joDDMUf2t8CWIK0jsHYCtZY00LEVnzYDZ5wjWK
HxNUGT9ZN+csvj+sx4FiQj7w+Mn+1S4zPbigMvbitPPAgGJSvy561/qWSHYOmm4m
QMwu3Uwd97mK/pbpypAfFRT6bxZuhccsyarXIW/LL7LcPlFsUTVLJTJ/QTvTuXgG
/oEfmAfSazvNNA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:21 2026 by rpki-client