Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: 17JWwc0YqmlNP3v3VqsfQMb8zTcpzm5mghxhbMRGkDQ=
Subject key identifier: 83:6B:61:D7:36:84:6D:C3:28:D4:2B:93:A3:16:D8:C5:A3:91:EF:52
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 019D9AE30FD65A0909247AAE33A6A6B02EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0A36
Signing time: Fri 17 Apr 2026 10:01:05 +0000
Manifest this update: Fri 17 Apr 2026 10:01:05 +0000
Manifest next update: Sat 18 Apr 2026 10:01:05 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: uydRktY+Z5Qr/pDOjPLR/7V6lJbTy3Q8BCWoylvcuYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:0f:d6:5a:09:09:24:7a:ae:33:a6:a6:b0:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Apr 17 10:01:05 2026 GMT
Not After : Apr 18 10:01:05 2026 GMT
Subject: CN=836b61d736846dc328d42b93a316d8c5a391ef52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:a5:84:82:91:fe:1d:bc:3a:2a:5a:f8:31:
08:ec:31:10:58:b9:02:99:ce:30:68:dc:67:4d:e6:
b8:66:76:d7:18:6c:85:a5:30:50:b1:0a:e1:df:1a:
cc:68:f8:40:0d:b0:d5:48:a8:06:a7:5b:1e:44:42:
9a:bd:5f:e1:d2:a4:80:ac:0b:e3:68:5f:27:b9:5f:
68:44:8a:49:b3:b5:2d:1c:78:a7:b4:6d:6d:61:91:
55:dd:ea:6f:fa:50:cf:02:72:d7:0c:40:00:61:76:
54:21:4a:8a:78:86:25:15:67:b3:4c:7e:f3:f1:b8:
17:31:3d:a2:33:82:42:a8:97:4e:87:ce:78:13:7a:
90:53:ba:eb:71:0c:3c:4f:6a:48:10:7f:7f:80:3f:
72:bf:77:ae:c4:f1:1e:7a:96:e8:a9:45:c0:83:b3:
e6:c3:1e:99:41:29:8e:e4:8d:11:a6:f8:07:e1:15:
bd:f5:33:f6:ad:18:b6:f0:71:4e:f2:cb:6c:14:9a:
9a:a0:08:73:64:fd:a1:aa:e1:48:21:a4:55:c2:bc:
1a:d7:18:ed:4f:d7:83:8a:86:a7:63:72:78:18:51:
10:dc:ec:88:19:32:02:e7:06:ca:0a:ab:ce:28:d0:
7b:ba:61:f2:66:a3:a4:00:b0:56:69:9e:ff:0e:28:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:61:D7:36:84:6D:C3:28:D4:2B:93:A3:16:D8:C5:A3:91:EF:52
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:fc:7e:ec:bd:81:de:57:6c:ad:dd:9a:7e:ca:41:98:e3:
bd:cc:a1:23:55:e2:18:e3:5f:90:d4:9c:ab:6f:4d:70:0a:de:
33:42:54:df:79:1a:ee:3b:bc:08:92:6e:7a:b6:5b:05:90:01:
6a:ae:06:a7:98:fa:17:7e:79:22:6b:53:66:6d:1e:41:41:e0:
ac:98:b7:fa:ef:db:18:f8:e0:cf:ac:83:b2:7b:70:5c:13:d0:
6e:ae:26:8a:4c:e4:56:e6:d0:76:98:cc:80:39:cf:0c:e2:26:
1f:84:90:26:89:0e:ea:14:e2:12:1c:a0:fc:4b:7a:d3:68:ce:
8f:84:9d:21:9d:f9:d9:f0:6b:94:cd:d3:8a:e0:fd:be:20:39:
37:10:14:b6:69:e2:96:74:9c:23:ba:06:57:83:b2:52:2d:5f:
e5:85:fd:4e:8a:e3:83:9e:78:dd:4a:41:3a:32:e0:8b:ff:da:
b2:4d:9b:ee:8e:94:55:03:25:54:3b:93:ff:06:d1:70:c3:32:
5f:ac:db:3b:bb:a6:9a:e9:6b:19:81:f8:4b:f0:37:05:48:e9:
d3:9b:8b:0f:5c:bb:cb:08:fc:e7:f1:16:3c:5b:a0:67:65:b5:
e0:71:78:5a:cd:cb:81:58:91:1a:5f:61:1e:6d:8e:71:64:33:
18:7e:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:31 2026 by rpki-client