Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: /tVI5tu/8qDli9Q2vgEbdbPsoD7GsuWhCwPEFHMwzJo=
Subject key identifier: 07:93:DD:93:94:7E:E4:E8:49:EB:E1:55:4F:9E:F4:CA:47:E2:3F:F7
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019F94DB216882AD0D41D60838AEC80E5355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0B3C
Signing time: Fri 24 Jul 2026 16:00:16 +0000
Manifest this update: Fri 24 Jul 2026 16:00:16 +0000
Manifest next update: Sat 25 Jul 2026 16:00:16 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: gn0jpUSSznmT4XMAKRWJlaAv8pfhOOpDZzHuvidQwK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:21:68:82:ad:0d:41:d6:08:38:ae:c8:0e:53:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jul 24 16:00:16 2026 GMT
Not After : Jul 25 16:00:16 2026 GMT
Subject: CN=0793dd93947ee4e849ebe1554f9ef4ca47e23ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:20:a0:a7:bd:33:83:0b:b0:38:36:57:91:
e7:a6:0c:18:f7:10:ba:c5:ba:6a:14:c0:35:39:3d:
bf:8a:e0:8c:db:1e:7e:8a:e4:66:b1:bd:56:8c:b7:
81:c9:66:36:91:14:63:89:16:5a:d7:90:ca:13:13:
6c:23:a0:de:9f:79:fa:81:62:36:fa:ee:d4:9d:c1:
e6:78:0e:4e:25:d8:50:1e:92:1a:9e:ad:cc:47:4b:
f6:75:b7:5c:8b:1f:80:3f:da:ab:3a:16:ec:23:be:
47:93:64:29:64:bc:fd:50:de:a6:3c:c9:fb:06:3e:
5d:ee:30:cc:92:d1:6c:5a:82:6e:0a:dc:b8:0d:e7:
c9:53:00:08:89:7d:85:d7:b8:e1:f2:34:a6:ca:92:
77:c5:b4:69:a4:ef:32:fc:f4:aa:83:64:6b:fe:c4:
3b:d8:0d:18:1e:b5:db:51:17:de:9c:d5:38:a8:01:
f9:f1:24:15:57:25:ec:44:c7:aa:9c:96:48:7b:73:
8c:50:d2:f8:25:9f:bb:99:b1:18:79:b0:25:6a:f4:
44:47:cb:86:6e:74:7f:f5:7d:97:8d:13:1c:89:06:
4e:e3:63:79:fc:45:d2:74:2d:ff:26:47:a4:d3:8a:
98:9e:b7:5f:ca:0e:59:e0:48:ac:e9:8d:f0:ac:1b:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:93:DD:93:94:7E:E4:E8:49:EB:E1:55:4F:9E:F4:CA:47:E2:3F:F7
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f4:fc:11:c3:81:cd:45:7c:a1:f1:00:ff:5f:53:f2:28:df:
ca:41:f9:cb:1e:23:35:a6:26:f0:42:92:b9:fd:c0:59:1c:2d:
95:eb:b5:c0:7d:1d:46:34:0f:9f:53:1b:5f:32:d6:df:83:a5:
88:bb:4d:f7:16:6b:96:05:a7:65:ad:e1:21:e0:fb:34:e3:f8:
9d:2e:84:c4:26:82:13:33:d1:3d:5c:57:b9:bf:d3:56:9c:aa:
93:98:36:d7:2e:07:43:ff:0d:cf:af:ea:ae:c8:3e:17:ef:cc:
b6:b5:ce:0c:2c:3c:e9:ce:87:e6:22:83:4d:d8:6b:d1:68:54:
72:6a:93:0c:aa:b5:c0:b7:52:07:b8:1f:3a:77:69:3c:6f:fd:
d1:53:50:f1:d8:ba:f6:96:21:f1:29:f1:8a:85:67:0f:82:b0:
50:d3:d9:6f:74:29:57:37:48:32:c3:9a:25:c2:f3:e3:c0:48:
ae:f1:6d:4c:52:33:50:2d:23:a6:c2:a7:d6:70:87:1e:b1:a6:
61:90:a0:93:3e:54:d6:21:63:cc:a1:85:35:7e:86:80:5e:03:
ca:ed:e1:ed:da:a8:a7:79:98:f0:e4:12:20:9e:e7:2c:b5:f1:
30:62:77:63:0c:9b:8a:ce:75:27:8a:d5:e8:95:c0:a9:62:78:
da:14:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:25:40 2026 by rpki-client