Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: jQLPSyyjGU8GZtAxr/4f8XqPyGyqPiMzZJgRYlSXuLw=
Subject key identifier: E8:60:58:C0:81:2F:03:33:EF:39:3D:A8:A5:47:CF:CF:D1:41:4F:17
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019E202349DE3FDEDBAB5931E31372B1606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0A7B
Signing time: Wed 13 May 2026 07:00:43 +0000
Manifest this update: Wed 13 May 2026 07:00:43 +0000
Manifest next update: Thu 14 May 2026 07:00:43 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: 44mBbcWPSw232l6uS6iAxr7w8SjekhyIA54hK0BIUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:49:de:3f:de:db:ab:59:31:e3:13:72:b1:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: May 13 07:00:43 2026 GMT
Not After : May 14 07:00:43 2026 GMT
Subject: CN=e86058c0812f0333ef393da8a547cfcfd1414f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:a8:66:96:18:06:b0:be:8c:0c:f8:fc:d7:
0f:23:51:44:6d:6a:45:25:1d:d2:1d:d0:ab:08:53:
ff:eb:16:34:ea:5c:73:1b:c8:81:81:fa:09:ab:6c:
68:db:c0:74:ac:fd:7a:d1:c7:cb:2d:c2:8e:c7:e2:
ff:82:83:2d:2a:3b:f9:6d:70:5d:0b:dc:5e:16:e5:
90:17:e4:18:1d:b0:bd:35:a6:fc:61:1f:fc:8a:75:
58:22:f1:bb:c1:fa:46:72:50:2c:20:ed:63:3a:8d:
12:20:11:89:74:84:2c:ca:7e:5d:9e:6f:10:5c:f0:
cb:b0:c2:2a:40:ff:c7:ea:a3:18:4d:79:cd:df:6c:
24:86:e7:91:3f:f0:b8:9a:28:61:98:88:3a:26:86:
18:99:77:bd:ad:12:6d:2d:63:b1:4f:9a:d7:82:02:
3d:1a:b5:bc:a5:36:31:ae:bd:b1:d1:6f:93:3b:e6:
ba:f7:ae:be:35:8d:7a:2c:c1:89:02:a2:37:2b:6e:
f6:37:47:f4:0c:b7:c4:43:7a:86:c8:2b:4e:d4:3b:
86:5f:b4:fb:96:4a:19:76:cc:fb:d8:18:83:a5:85:
f0:57:78:80:ac:16:ed:61:62:38:19:bc:4e:29:a7:
ff:1c:cb:9b:f6:5a:f0:43:7b:16:98:cb:f4:f5:96:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:60:58:C0:81:2F:03:33:EF:39:3D:A8:A5:47:CF:CF:D1:41:4F:17
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:4f:95:f8:3c:8c:44:91:c1:04:36:7e:7c:9a:c2:8e:8b:
83:29:9e:8a:4a:53:0c:32:6c:01:22:ad:d7:40:52:38:41:f8:
1f:8c:2a:50:83:3c:af:be:4e:e7:15:0f:2a:b6:6a:ab:47:31:
76:e3:0b:fd:f1:94:b3:cb:5e:99:d0:c1:30:2e:0b:86:8d:6d:
84:e1:a2:83:11:53:92:5d:d9:40:bb:e5:65:de:09:d8:c6:e2:
71:4e:90:a7:55:03:32:6c:dd:d5:d0:0d:24:9d:40:b5:14:48:
ab:ef:c9:05:62:3b:1c:fe:a3:47:10:5b:8d:c9:93:cf:15:15:
0d:7d:f9:dc:97:cf:e6:e5:fd:5d:01:26:bc:9a:87:0c:d7:7d:
d2:8c:3a:70:85:1b:df:5e:07:ce:da:31:8c:e5:2a:b7:2a:b6:
e9:d0:7c:16:0b:64:b6:6a:5f:11:37:bf:41:98:fc:f3:4e:68:
4e:1a:d8:f8:e9:a2:fc:cd:4f:b2:e9:9e:1b:2e:a6:55:35:dd:
af:9c:3d:89:ac:d7:8c:f3:6e:67:6d:aa:8f:aa:8c:39:65:5a:
60:d6:72:63:1e:03:74:e2:c5:16:6b:cc:77:3f:0d:b3:51:e9:
90:ab:f6:d9:40:f8:e0:66:46:af:11:53:01:68:33:8c:e2:19:
14:6d:1a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI0neP97bq1kx4xNysWBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0
YTllZjMwHhcNMjYwNTEzMDcwMDQzWhcNMjYwNTE0MDcwMDQzWjAzMTEwLwYDVQQD
EyhlODYwNThjMDgxMmYwMzMzZWYzOTNkYThhNTQ3Y2ZjZmQxNDE0ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh6oZpYYBrC+jAz4/NcPI1FEbWpF
JR3SHdCrCFP/6xY06lxzG8iBgfoJq2xo28B0rP160cfLLcKOx+L/goMtKjv5bXBd
C9xeFuWQF+QYHbC9Nab8YR/8inVYIvG7wfpGclAsIO1jOo0SIBGJdIQsyn5dnm8Q
XPDLsMIqQP/H6qMYTXnN32wkhueRP/C4mihhmIg6JoYYmXe9rRJtLWOxT5rXggI9
GrW8pTYxrr2x0W+TO+a6966+NY16LMGJAqI3K272N0f0DLfEQ3qGyCtO1DuGX7T7
lkoZdsz72BiDpYXwV3iArBbtYWI4GbxOKaf/HMub9lrwQ3sWmMv09ZYxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhgWMCBLwMz7zk9qKVHz8/RQU8XMB8GA1UdIwQY
MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt
MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz
LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsZPlfg8
jESRwQQ2fnyawo6LgymeikpTDDJsASKt10BSOEH4H4wqUIM8r75O5xUPKrZqq0cx
duML/fGUs8temdDBMC4Lho1thOGigxFTkl3ZQLvlZd4J2MbicU6Qp1UDMmzd1dAN
JJ1AtRRIq+/JBWI7HP6jRxBbjcmTzxUVDX353JfP5uX9XQEmvJqHDNd90ow6cIUb
314HztoxjOUqtyq26dB8FgtktmpfETe/QZj8805oThrY+Omi/M1PsumeGy6mVTXd
r5w9iazXjPNuZ22qj6qMOWVaYNZyYx4DdOLFFmvMdz8Ns1HpkKv22UD44GZGrxFT
AWgzjOIZFG0aXQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:02:28 2026 by rpki-client