Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: RbxMq/UQyPbhyDYerDLy6hx9UyUcfYlT2UDmqo742ck=
Subject key identifier: 49:27:33:81:F7:71:21:53:07:9A:61:47:96:EB:1C:ED:56:B3:6C:06
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019D28F267F16F43CEC351065D21EFEC55C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 09FB
Signing time: Thu 26 Mar 2026 07:01:08 +0000
Manifest this update: Thu 26 Mar 2026 07:01:08 +0000
Manifest next update: Fri 27 Mar 2026 07:01:08 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: mUjSPfqLZqS9JCWIaZn1fuksVzg7TbZ9zzSWTuy1v0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:67:f1:6f:43:ce:c3:51:06:5d:21:ef:ec:55:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Mar 26 07:01:08 2026 GMT
Not After : Mar 27 07:01:08 2026 GMT
Subject: CN=49273381f7712153079a614796eb1ced56b36c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:55:3e:d3:60:6c:c7:75:42:ee:0a:ba:40:
74:ae:ff:30:9a:d8:09:5f:22:9a:fb:04:18:cc:30:
af:82:fe:40:3e:37:c6:7d:31:24:55:db:1c:58:22:
06:ce:2d:6b:98:50:84:1a:a3:0d:ab:f4:37:6f:8e:
c7:ef:ff:87:19:fd:0f:47:22:06:34:5c:dd:f2:d4:
dd:3d:8e:27:68:18:1c:39:a3:3f:0b:6d:ee:7f:fe:
e7:91:d7:46:4f:c2:7f:4a:e4:48:fe:9f:16:55:61:
f6:a7:aa:b4:47:dc:af:62:97:da:b2:34:17:9f:66:
e4:59:75:9e:f5:30:88:68:0d:36:58:24:fb:84:13:
2c:1c:ea:bf:c4:a6:81:ae:d0:e6:66:09:1f:b2:f2:
f2:b8:60:af:15:f2:eb:2a:13:a1:f9:ed:e9:04:68:
3a:62:68:4d:ea:09:09:78:ca:51:7f:d4:f2:71:e0:
5f:99:fd:1e:ae:8b:08:51:56:5e:d2:8a:a2:4b:f5:
48:18:11:86:ae:0b:20:27:d5:48:36:af:90:6e:0c:
2a:72:79:ff:75:8e:06:ea:1a:96:14:ad:d2:d4:0e:
64:b6:a3:6c:7f:f0:a6:73:0f:e7:46:6b:9f:51:19:
cb:32:ae:6b:36:45:02:94:19:5b:b2:e8:73:96:b1:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:33:81:F7:71:21:53:07:9A:61:47:96:EB:1C:ED:56:B3:6C:06
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d4:e8:fa:a9:ec:be:cc:bc:6e:35:81:05:b8:bf:cd:48:7c:
5f:de:d0:7a:7e:e5:0c:67:1f:3c:a2:f6:3d:56:4f:73:3b:2d:
8f:c0:3b:b7:a6:bf:c2:c1:6a:5a:26:84:79:01:01:33:e3:d0:
ed:d7:a8:7e:ee:c4:68:cb:7c:de:46:72:12:a0:c8:46:88:54:
63:e0:80:b5:56:08:c4:fe:f3:b7:4f:42:a6:9c:c8:f1:5b:f7:
86:b0:53:a2:4f:19:88:0c:7f:b5:8a:2f:84:78:0a:34:4f:7f:
bb:9c:47:c4:50:29:e2:3a:9f:e4:68:a4:0a:67:f4:2c:53:72:
0f:86:51:74:fb:85:bc:4d:c3:74:23:16:92:91:54:c9:66:05:
34:9a:55:7b:1c:ed:28:b2:d5:cd:ce:ce:86:33:d4:67:ad:43:
67:1b:4c:e9:24:aa:70:95:c4:ea:00:4e:56:0c:39:1f:bb:3e:
54:e8:94:9d:f6:53:90:16:d1:2b:93:e8:3a:33:a9:99:29:9a:
a4:46:19:e6:4b:53:87:9b:40:99:69:52:c9:22:10:47:83:6c:
b5:7e:ca:10:32:7e:f5:35:ed:19:b5:c1:f3:2b:2c:90:d2:65:
b5:2c:02:8f:9f:c5:e9:06:65:01:4f:9b:0d:2b:a7:43:b2:b8:
0b:ee:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:41 2026 by rpki-client