Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: Kj9R0CXHcLlIetO396/pHW2Fg1A5UbJPxgK/mBcQkhQ=
Subject key identifier: 98:BF:A4:30:4B:8E:FB:C4:C9:08:84:15:9E:48:B0:42:9B:19:A6:28
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019CAD5A33EAFA3FC86484450DA22F25E801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 09BB
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: Ehnqzz4ezqFFwyVEO1HMPMcApUyML2h/TfMS2ZW5zKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:33:ea:fa:3f:c8:64:84:45:0d:a2:2f:25:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=98bfa4304b8efbc4c90884159e48b0429b19a628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:3c:65:0d:84:e1:59:f8:59:d5:ea:5d:d4:
46:34:75:d9:a7:a2:e3:c2:4f:ae:68:c1:c1:9f:fb:
8b:e0:35:d6:05:cf:94:f6:e9:7c:27:81:f2:d3:f2:
26:56:4a:45:b6:e7:d7:b6:74:04:94:b1:c2:23:75:
e9:6d:27:4c:89:7e:ea:d5:18:0d:31:27:bc:fe:1b:
13:11:eb:47:e8:e5:82:c1:a0:53:98:fd:1e:df:12:
54:c6:b5:fb:d7:a7:07:2f:2a:41:23:f6:98:a9:c9:
4f:d9:50:39:92:01:aa:cb:cc:c8:ab:a5:d1:51:24:
d4:b4:87:76:4f:44:57:e1:79:3e:8d:b1:12:fb:6d:
0b:2b:10:67:96:6c:a0:ae:7f:e9:69:ec:5b:9b:20:
a1:73:60:8e:e4:ce:79:ea:6d:59:67:02:a7:4d:bd:
bf:df:1c:38:44:88:bf:be:a0:51:aa:84:a3:cf:40:
cc:e4:8e:11:57:da:1a:d8:83:0e:62:83:c7:82:b4:
42:59:d7:f1:87:34:70:d2:f6:15:56:a9:fd:7b:43:
8c:4c:5b:eb:a4:c4:76:52:28:63:90:9e:2a:af:51:
40:0b:5d:44:6e:45:d3:57:5a:92:17:20:b7:66:78:
00:28:c0:38:90:0e:d7:04:c1:62:31:80:45:0c:60:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:A4:30:4B:8E:FB:C4:C9:08:84:15:9E:48:B0:42:9B:19:A6:28
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:a6:e3:ae:37:8f:6d:8b:56:fc:3e:49:4d:fc:e1:bc:4b:
fc:b8:8a:86:aa:b2:59:9f:81:42:ea:23:16:8b:40:66:55:ea:
66:1f:9c:33:cf:e9:82:11:e2:20:28:38:6c:ec:ca:58:57:61:
28:d7:41:b9:7c:5a:0f:c1:9a:cb:8a:97:e2:67:35:71:5b:11:
7b:e1:3a:46:5d:da:94:5f:d5:19:5f:fa:aa:b0:29:f8:af:ef:
45:53:72:a2:3d:d3:42:65:38:f8:d6:ba:e1:0f:ce:79:02:15:
d4:a9:11:df:5b:a1:35:f1:28:0c:00:81:68:95:cb:47:f9:97:
e9:a6:d4:dc:03:d6:8a:1c:1a:ff:07:09:19:92:2d:fa:3c:fa:
4e:4d:e0:2a:04:ea:e6:70:ae:47:29:1c:72:1a:5d:c8:fa:a9:
f7:24:ea:49:34:aa:01:c9:29:ff:85:9a:a8:32:fd:56:ea:fd:
cf:fe:b9:1b:44:3a:be:30:14:37:16:f8:2c:20:fa:d9:18:69:
6d:8b:ef:88:e6:fb:b2:d1:66:a5:a8:50:4f:11:14:7f:8e:72:
9d:4f:eb:b1:81:f4:65:fc:fc:26:ae:09:67:dc:13:ee:fd:00:
92:64:4a:26:85:d2:b7:34:b6:71:dd:25:ee:13:84:50:ac:e9:
de:f3:c0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWjPq+j/IZIRFDaIvJegBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0
YTllZjMwHhcNMjYwMzAyMDcwMTM1WhcNMjYwMzAzMDcwMTM1WjAzMTEwLwYDVQQD
Eyg5OGJmYTQzMDRiOGVmYmM0YzkwODg0MTU5ZTQ4YjA0MjliMTlhNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEQ8ZQ2E4Vn4WdXqXdRGNHXZp6Lj
wk+uaMHBn/uL4DXWBc+U9ul8J4Hy0/ImVkpFtufXtnQElLHCI3XpbSdMiX7q1RgN
MSe8/hsTEetH6OWCwaBTmP0e3xJUxrX716cHLypBI/aYqclP2VA5kgGqy8zIq6XR
USTUtId2T0RX4Xk+jbES+20LKxBnlmygrn/paexbmyChc2CO5M556m1ZZwKnTb2/
3xw4RIi/vqBRqoSjz0DM5I4RV9oa2IMOYoPHgrRCWdfxhzRw0vYVVqn9e0OMTFvr
pMR2UihjkJ4qr1FAC11EbkXTV1qSFyC3ZngAKMA4kA7XBMFiMYBFDGCCvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi/pDBLjvvEyQiEFZ5IsEKbGaYoMB8GA1UdIwQY
MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt
MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz
LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWz2m4643
j22LVvw+SU384bxL/LiKhqqyWZ+BQuojFotAZlXqZh+cM8/pghHiICg4bOzKWFdh
KNdBuXxaD8Gay4qX4mc1cVsRe+E6Rl3alF/VGV/6qrAp+K/vRVNyoj3TQmU4+Na6
4Q/OeQIV1KkR31uhNfEoDACBaJXLR/mX6abU3APWihwa/wcJGZIt+jz6Tk3gKgTq
5nCuRykcchpdyPqp9yTqSTSqAckp/4WaqDL9Vur9z/65G0Q6vjAUNxb4LCD62Rhp
bYvviOb7stFmpahQTxEUf45ynU/rsYH0Zfz8Jq4JZ9wT7v0AkmRKJoXStzS2cd0l
7hOEUKzp3vPAEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:31 2026 by rpki-client