Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: Cu6yLbSy/ZH7Amr3OTgk96v03glaDRlFhrq74psD08U=
Subject key identifier: 90:45:C4:BD:80:51:C6:39:D2:C2:AD:DD:EB:85:99:09:66:00:C0:2A
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 019D39413DFA053D2FD261F6C4014B648AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 11F1
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: WtPq5l9TGi9lK7rjQ62o1bnWj4cOy49fxFqQxFr5oAg=)
2: f8q72nrSHZd8tubKlt2Vm79HxNE.roa (hash: CK1Z+nBxJfN67DQ3jfNRhaauHSwB5IQIiVopFzFRMX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3d:fa:05:3d:2f:d2:61:f6:c4:01:4b:64:8a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=9045c4bd8051c639d2c2adddeb8599096600c02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:40:07:e1:a8:c0:53:a7:fa:ad:a3:79:3e:
22:01:60:32:04:9d:7b:b5:d7:e9:d3:b5:20:c6:ff:
c5:47:45:5f:45:b2:f4:7a:ab:c6:34:22:a7:b4:ad:
05:48:db:0d:b6:27:cc:c6:cf:7b:9a:ef:96:76:0a:
66:e7:73:2d:50:76:cf:b7:3a:74:5b:32:6a:7e:1a:
15:10:94:4c:e3:e6:57:fd:10:da:e1:52:bf:45:73:
7a:b0:e1:5e:25:0a:70:2a:07:bc:f4:de:fe:bd:c9:
ff:fd:e3:3e:4f:f4:11:b1:1f:19:f6:ac:e9:c9:32:
a2:63:31:96:dd:aa:ca:6e:15:47:e6:dc:7f:5f:c9:
62:73:4a:f0:c2:94:6c:d5:b1:74:26:fb:71:91:a1:
76:7d:79:e6:a1:ed:12:2a:f0:7c:fe:c8:62:63:ea:
bd:58:a6:17:c9:89:6b:c2:1a:8d:d7:69:40:b7:36:
26:a9:c6:fb:f1:88:e7:fd:c9:5b:4f:6a:58:63:9a:
02:a6:9e:10:fb:84:40:b7:d3:44:e4:4b:fc:3f:9f:
3b:ca:e5:38:c5:cc:f8:4e:f0:a2:63:11:86:66:1f:
a6:0e:e0:60:99:3b:ae:61:6c:1f:57:28:7c:b2:ba:
22:a0:41:51:29:fe:bb:aa:45:ca:fe:0d:08:5d:66:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:C4:BD:80:51:C6:39:D2:C2:AD:DD:EB:85:99:09:66:00:C0:2A
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8e:76:95:87:ac:c6:9a:a3:53:58:05:bd:da:f9:8e:95:61:
6a:9d:49:22:fe:e4:b6:66:91:6c:27:a9:f0:75:a3:a3:bd:07:
c4:41:ac:d1:f7:b6:c0:e2:cd:c7:dc:b1:dd:f3:a7:9d:98:40:
03:5c:cb:5f:f1:cb:17:64:2b:bd:1c:0f:a7:8f:a4:56:5a:25:
ab:0d:7e:f6:92:d3:38:6e:93:f2:1a:01:ed:4e:7e:51:1f:38:
13:70:9b:2d:5b:a0:9d:14:ac:2a:6e:4d:ec:a3:de:7d:45:3a:
c0:3d:9b:b9:eb:09:4b:ec:d1:ac:5c:11:67:56:a2:54:80:b3:
86:43:77:6c:5c:f3:52:f6:26:9a:64:43:d4:58:72:dc:ea:03:
70:a3:9c:bf:70:ab:8e:5d:e3:0f:30:7c:6e:ee:13:0c:b3:ac:
ca:87:e6:ab:9f:94:a8:6d:c8:2f:c3:27:d9:24:fc:92:9b:03:
b1:a4:84:bd:89:16:0e:db:78:4f:07:ce:43:1e:93:a6:4b:fd:
ff:33:ac:d7:4f:30:b6:d5:f2:df:88:9c:3f:c4:c6:35:f7:d4:
32:42:4c:07:f8:af:d3:6d:45:29:10:4c:82:6f:1d:6b:93:99:
40:6b:c4:6f:59:33:54:47:39:c6:ed:0f:61:12:21:79:70:00:
27:12:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:15 2026 by rpki-client