Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: WO7JbZOvISelW0JSBM/fx/YcPnnMJNRg9qlNoGocdWo=
Subject key identifier: 6B:26:B1:CC:4C:73:91:FD:72:6F:93:B3:05:16:D9:82:FF:77:F6:47
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019FAC08EB45658AEC701BA214443A2054BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0B48
Signing time: Wed 29 Jul 2026 04:01:33 +0000
Manifest this update: Wed 29 Jul 2026 04:01:33 +0000
Manifest next update: Thu 30 Jul 2026 04:01:33 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: aYwBZ7KbXzvM8enUeFqiUsb1OVvOQQdaX5uV2tGc3nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:eb:45:65:8a:ec:70:1b:a2:14:44:3a:20:54:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jul 29 04:01:33 2026 GMT
Not After : Jul 30 04:01:33 2026 GMT
Subject: CN=6b26b1cc4c7391fd726f93b30516d982ff77f647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:c3:d5:60:16:aa:fe:bd:6b:ff:58:81:6b:
3e:a5:c2:e1:9a:be:10:42:8a:38:2c:d8:92:0f:ca:
79:97:5c:1f:ce:27:11:2e:f9:9a:55:6b:79:6e:0f:
a1:78:99:8b:18:70:43:41:24:8a:fc:5a:81:71:cd:
1b:df:7e:ff:fc:f6:03:3f:c7:06:98:66:ac:c0:fc:
94:a5:f5:2c:cf:38:da:60:42:b9:b7:ae:2d:40:da:
d2:88:ee:b8:ef:a6:ca:c1:54:61:57:14:53:9e:e1:
43:30:56:7c:eb:2b:d5:ee:3e:32:ed:d9:45:2f:08:
62:08:ea:4f:00:25:c2:15:e8:89:f0:1a:b7:42:07:
d6:dd:f9:48:d3:4f:4e:bf:57:4a:8d:6e:03:c7:0a:
0f:cd:9e:eb:45:0f:0f:94:01:aa:50:0b:ac:6f:10:
49:21:fc:1c:0e:50:99:0f:1a:15:3e:82:32:77:af:
36:82:f2:c4:51:ae:33:fb:41:7e:91:4e:8b:c6:63:
5c:fe:39:5e:8f:04:9b:a9:b9:94:a5:9a:a5:69:2b:
bb:33:91:26:f0:19:3f:75:d2:1b:36:35:c6:a2:f7:
e9:f7:7d:34:51:f7:1b:0f:ab:1c:26:80:2d:d2:68:
d4:26:5f:2e:38:81:67:69:3f:83:7c:75:52:f6:5c:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:26:B1:CC:4C:73:91:FD:72:6F:93:B3:05:16:D9:82:FF:77:F6:47
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:45:09:30:6f:64:e1:a6:e9:5e:56:3c:07:57:65:93:2c:
d6:01:7a:7c:83:92:39:4a:b8:e4:04:db:bc:49:93:79:df:22:
3b:60:fc:41:0d:c7:76:27:d4:18:12:1e:66:9e:76:b9:34:8d:
f8:19:37:2f:2b:d3:1b:49:e2:b9:fc:ac:8b:4d:66:c3:68:82:
ce:28:95:be:26:5d:82:6e:15:1d:d0:cd:d3:75:54:b1:93:94:
6a:27:26:2e:c4:da:3c:d2:94:34:59:e0:36:45:11:4d:5d:07:
81:fa:dd:09:f7:1d:68:48:f8:db:25:a0:a9:ef:27:0c:94:31:
50:96:b6:0d:2d:8c:b9:d2:26:b9:93:62:7b:52:ab:04:db:02:
0d:b2:9b:7e:a9:ad:4e:d7:76:11:d6:cf:8c:f7:c2:33:20:2a:
c5:d6:40:25:06:fe:85:53:96:6a:13:fe:81:a3:d2:ce:59:67:
ea:60:90:8d:b6:e2:d9:64:f6:23:ef:1b:47:1d:a5:ee:e8:23:
ab:58:f6:dc:2b:43:e9:96:8f:b8:69:20:43:22:b0:d2:f6:ab:
8a:56:3d:39:d9:ee:a2:b2:40:f1:03:6d:3e:ef:c9:61:ac:97:
d3:42:fa:fc:83:25:7f:af:d2:2b:ae:7b:4f:8b:d6:db:23:a0:
80:31:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:02 2026 by rpki-client