Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: 9GxwQz3mR6O1M1baoj4orvZ9bqCduqaaE0Xi4c5CPbI=
Subject key identifier: 51:7E:4D:7B:6F:5C:0F:5B:CE:05:7D:C6:59:02:B4:8A:BF:AB:3F:D6
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019EC25BBA1F96B485461159CE7ECCF1763A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0ACF
Signing time: Sat 13 Jun 2026 19:00:51 +0000
Manifest this update: Sat 13 Jun 2026 19:00:51 +0000
Manifest next update: Sun 14 Jun 2026 19:00:51 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: 6EwzkH8Y17JuCaKBbwAUa12rTh9WMugXc5wX8zvniJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:ba:1f:96:b4:85:46:11:59:ce:7e:cc:f1:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jun 13 19:00:51 2026 GMT
Not After : Jun 14 19:00:51 2026 GMT
Subject: CN=517e4d7b6f5c0f5bce057dc65902b48abfab3fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:98:62:46:5f:57:15:fc:ea:cb:ba:53:38:13:
31:d4:de:89:a8:cc:f7:db:92:f0:ad:bb:48:ed:5b:
07:2a:f0:2c:af:94:75:1c:50:17:4c:c6:7d:44:57:
e7:71:81:dc:b2:46:77:c0:5c:b4:c0:a0:a3:66:6e:
27:80:78:21:f2:09:73:59:02:f1:23:63:e7:9e:4e:
44:d4:c1:5a:9f:55:1f:bf:48:34:3d:84:1c:ed:a0:
b4:64:b7:40:3b:14:d4:d1:d0:43:04:d4:77:69:ac:
f1:be:4a:d4:26:a7:43:ab:80:d3:a1:3c:bb:63:55:
fc:16:b2:df:fe:ca:dc:da:15:4f:1c:fe:19:d5:e7:
93:23:aa:4e:4f:f1:91:5d:04:1c:55:f5:3a:38:89:
62:f2:d1:56:50:4e:d6:88:ee:0b:16:2b:ba:b7:6e:
00:d5:3e:63:e1:c5:29:e3:25:a7:c8:80:4b:9d:ee:
36:05:b4:2e:b8:92:ae:2f:8e:ce:81:84:a6:0c:42:
b9:be:ec:ab:bb:42:8d:2a:72:eb:96:cf:58:68:34:
50:e2:97:02:0e:05:1a:52:c2:48:c2:8e:4f:0e:fe:
22:a0:2b:27:1a:fd:47:82:8f:f4:c0:a4:7e:df:61:
da:06:07:84:75:54:56:1d:fb:c7:36:87:14:4c:a9:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7E:4D:7B:6F:5C:0F:5B:CE:05:7D:C6:59:02:B4:8A:BF:AB:3F:D6
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:80:2c:6e:8f:e5:fb:41:f2:d2:87:ef:26:7c:68:90:fb:62:
d2:02:ae:96:dd:99:fe:c3:da:35:47:3a:69:d2:ee:67:5e:7e:
7b:df:b1:6c:ec:88:73:86:81:95:5f:b8:7b:a6:ac:3f:d7:5b:
60:57:9e:60:34:f3:ea:39:4f:66:e6:e2:a4:3d:d1:a4:90:49:
1b:6f:2d:b9:bd:2e:ef:17:48:52:51:eb:c7:9b:95:90:c1:fc:
9e:7f:9a:51:22:68:b3:35:4c:49:16:16:89:eb:67:f0:86:f8:
a7:9b:f8:ca:0f:c1:9c:f7:38:55:ed:2a:f7:ee:50:f8:81:7d:
0a:1d:3d:ef:27:d9:b6:27:9b:64:27:36:26:60:6a:85:da:be:
14:08:bd:4d:b3:43:2f:78:30:dd:2d:50:0e:48:65:7b:a1:6c:
84:bd:62:93:83:db:ae:c7:d3:64:58:df:84:22:ad:6a:4e:f5:
31:94:13:f2:bd:ea:3c:ef:1e:42:0c:6a:37:79:82:7d:b8:15:
72:ef:2a:05:e3:05:f2:e7:b6:67:7a:1f:ba:f9:d7:05:1f:a4:
95:73:c4:c3:2b:9b:73:48:fb:cc:6c:85:23:b2:c3:cf:1b:fb:
ae:59:19:7c:8c:89:b8:2e:4d:ea:52:06:9f:6d:28:f9:61:d0:
ab:44:94:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW7oflrSFRhFZzn7M8XY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0
YTllZjMwHhcNMjYwNjEzMTkwMDUxWhcNMjYwNjE0MTkwMDUxWjAzMTEwLwYDVQQD
Eyg1MTdlNGQ3YjZmNWMwZjViY2UwNTdkYzY1OTAyYjQ4YWJmYWIzZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ZhiRl9XFfzqy7pTOBMx1N6JqMz3
25LwrbtI7VsHKvAsr5R1HFAXTMZ9RFfncYHcskZ3wFy0wKCjZm4ngHgh8glzWQLx
I2Pnnk5E1MFan1Ufv0g0PYQc7aC0ZLdAOxTU0dBDBNR3aazxvkrUJqdDq4DToTy7
Y1X8FrLf/src2hVPHP4Z1eeTI6pOT/GRXQQcVfU6OIli8tFWUE7WiO4LFiu6t24A
1T5j4cUp4yWnyIBLne42BbQuuJKuL47OgYSmDEK5vuyru0KNKnLrls9YaDRQ4pcC
DgUaUsJIwo5PDv4ioCsnGv1Hgo/0wKR+32HaBgeEdVRWHfvHNocUTKkrjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF+TXtvXA9bzgV9xlkCtIq/qz/WMB8GA1UdIwQY
MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt
MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz
LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIAsbo/l
+0Hy0ofvJnxokPti0gKult2Z/sPaNUc6adLuZ15+e9+xbOyIc4aBlV+4e6asP9db
YFeeYDTz6jlPZubipD3RpJBJG28tub0u7xdIUlHrx5uVkMH8nn+aUSJoszVMSRYW
ietn8Ib4p5v4yg/BnPc4Ve0q9+5Q+IF9Ch097yfZtiebZCc2JmBqhdq+FAi9TbND
L3gw3S1QDkhle6FshL1ik4PbrsfTZFjfhCKtak71MZQT8r3qPO8eQgxqN3mCfbgV
cu8qBeMF8ue2Z3ofuvnXBR+klXPEwyubc0j7zGyFI7LDzxv7rlkZfIyJuC5N6lIG
n20o+WHQq0SUYA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:07 2026 by rpki-client