Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: ebwXyUAyiZBcawQji84rmYdfLuoBvmsTie5ZPkzCvfM=
Subject key identifier: 3F:4E:E2:34:E4:D1:A5:D4:61:FD:9A:02:2E:C0:4C:D3:BA:8C:BA:29
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 01A14B3D85BB60BE9378C1BA2996F2BD8F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0C1F
Signing time: Sat 17 Oct 2026 19:01:25 +0000
Manifest this update: Sat 17 Oct 2026 19:01:25 +0000
Manifest next update: Sun 18 Oct 2026 19:01:25 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: lS+XJrSlCYe3QKOBpR/Qb0IvgUOV0aiMKp3ldFmfzBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:85:bb:60:be:93:78:c1:ba:29:96:f2:bd:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Oct 17 19:01:25 2026 GMT
Not After : Oct 18 19:01:25 2026 GMT
Subject: CN=3f4ee234e4d1a5d461fd9a022ec04cd3ba8cba29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e5:29:ab:4c:94:e5:82:fa:0b:60:ce:31:ed:
af:df:3a:ce:00:2f:ae:e6:87:20:b6:6f:f4:3f:bc:
4e:69:8b:fb:2b:04:09:d3:56:d2:a9:3a:fe:63:8c:
0a:e5:fc:69:ca:77:20:4b:e0:0e:71:6d:bc:33:4f:
8e:0b:83:24:0e:95:ce:2a:17:08:0f:94:45:a4:98:
dc:bc:81:db:79:87:4e:49:a8:00:99:56:10:e8:29:
ff:5c:51:20:5f:b9:02:bf:7b:17:52:41:84:2b:28:
40:f0:87:ba:c2:91:9f:2d:6c:75:c5:0f:4a:93:dc:
1e:6c:dc:6a:e7:32:0a:18:e3:00:c1:b4:80:9d:89:
14:bf:ef:e3:c9:a8:3c:22:05:e6:f4:54:a0:0d:de:
2f:51:bf:48:0b:c0:5a:03:30:33:f9:12:06:f9:d7:
49:60:ad:71:db:c7:58:5f:f6:46:fd:35:df:df:28:
bf:4f:cc:8d:f1:01:84:d5:22:07:28:5c:ec:86:86:
5b:53:88:38:df:28:e7:9c:64:2e:3a:57:ad:b1:ea:
f3:eb:fd:93:43:62:f4:f4:0d:20:f6:54:90:9b:bb:
6c:47:f7:0f:88:66:40:a8:cd:37:46:5c:36:9d:94:
ce:e7:01:fb:71:fc:28:6c:dc:19:11:b7:52:4f:ef:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:E2:34:E4:D1:A5:D4:61:FD:9A:02:2E:C0:4C:D3:BA:8C:BA:29
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5b:0d:dd:8a:00:f1:48:d5:06:4c:47:4f:3a:5e:67:08:3f:
d8:44:8e:f3:77:9c:a7:92:32:db:52:f4:54:bb:d4:5b:6a:aa:
61:5b:f3:50:69:f4:9b:0b:49:61:ba:85:4e:d6:5e:00:02:9b:
9b:fe:54:5d:cf:4c:f0:87:31:21:ed:a1:a2:27:cb:70:54:58:
92:72:c3:01:7a:9d:c0:6a:d6:ed:ca:c5:37:e6:5f:06:fc:f0:
c6:82:bc:94:fa:8c:22:e8:b5:e9:3b:ae:e9:65:43:81:79:34:
da:3a:08:30:06:05:4b:14:65:af:f1:4b:39:46:83:c4:a2:12:
a6:0a:7c:52:ff:5a:e6:57:93:83:cc:cb:ce:dc:31:94:82:1f:
c8:ec:68:4f:3c:a2:71:ff:24:07:f3:1f:11:77:46:72:2f:ff:
b1:d0:0c:32:d3:34:9a:f0:74:31:1b:3d:bf:f2:66:a8:57:ae:
5f:b6:70:4d:04:55:d0:3e:bb:d2:46:51:52:6b:24:43:b0:ac:
26:f4:ad:bb:74:bf:76:78:c4:01:1c:07:a1:97:2a:30:c0:1b:
d6:6d:9d:2f:f7:68:a5:6f:43:74:37:8a:10:7d:6f:73:d8:8e:
67:60:2b:85:f1:59:c6:d3:a4:cb:be:d0:83:4d:96:66:99:7d:
13:d4:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 05:05:19 2026 by rpki-client