Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: EL2AmOhb56XGP0aU16RwDEZpw55xC4lTkbZrj5Ku7Y0=
Subject key identifier: 6B:4D:59:E5:47:EB:73:EF:8F:7E:7B:43:8D:A6:0E:3F:62:E6:FC:70
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 01A156D44AF90999CA4C784BF7428E19023C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0C25
Signing time: Tue 20 Oct 2026 01:01:55 +0000
Manifest this update: Tue 20 Oct 2026 01:01:55 +0000
Manifest next update: Wed 21 Oct 2026 01:01:55 +0000
Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=)
2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: qWtKQnk+72saU085yIAx/uLyFcAP3DgrNipBBdv3hDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d4:4a:f9:09:99:ca:4c:78:4b:f7:42:8e:19:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Oct 20 01:01:55 2026 GMT
Not After : Oct 21 01:01:55 2026 GMT
Subject: CN=6b4d59e547eb73ef8f7e7b438da60e3f62e6fc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:9e:12:90:9b:af:8c:a3:ba:03:ff:b4:92:
7f:89:7f:eb:a5:67:14:f1:ae:e2:3a:22:83:3f:69:
c3:eb:d9:68:dc:ae:49:81:1e:cf:65:15:f8:70:8b:
aa:ba:76:69:fe:a3:76:ad:89:27:5b:c7:0e:3f:8f:
35:75:d5:ed:cd:d2:c7:3f:48:7e:74:26:53:9f:19:
31:a7:ac:2f:32:1e:2d:c9:16:12:4e:19:9b:3d:0e:
eb:72:33:e8:cb:e6:3b:74:e3:3d:f3:43:ed:ee:b7:
41:2e:16:86:7e:d3:52:ba:4a:31:59:72:61:c7:94:
aa:35:04:c2:a6:dd:5c:92:52:98:12:5a:20:fb:8d:
af:45:e4:85:9a:ea:2e:cb:e2:c3:dc:c0:9c:22:70:
12:a1:6e:a7:3e:73:89:ad:b2:c3:0d:87:74:04:01:
a5:20:d7:13:ac:44:ad:14:6b:1e:56:93:bb:d5:3f:
32:d1:94:25:ec:01:57:f7:f4:37:35:ab:21:33:ef:
9e:50:6c:bd:bf:d4:ed:fd:a7:82:e7:11:14:02:67:
c7:ed:96:4d:0c:a6:21:9a:59:a1:c7:7d:59:77:e3:
44:4b:f1:a0:3b:6e:84:a6:ed:37:83:f4:40:66:6e:
64:e4:d9:60:52:af:23:db:fb:f0:79:f9:05:27:fd:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:59:E5:47:EB:73:EF:8F:7E:7B:43:8D:A6:0E:3F:62:E6:FC:70
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bd:a9:c9:7a:81:0b:95:ec:14:e3:ca:82:64:87:19:5d:82:
37:9a:4e:0d:a0:d4:a4:5e:5a:67:c5:2a:f5:ff:4f:b1:3b:2c:
b6:e8:b6:0d:ca:55:d2:c3:63:48:51:03:ef:30:c6:9b:b4:cb:
3f:dd:4f:49:6c:aa:b7:e6:9f:d8:34:e0:46:e2:7f:95:ea:b6:
b8:9e:a6:e1:ef:6f:db:7f:98:86:1a:9c:b8:00:c9:76:75:31:
3f:6a:0b:9e:33:9b:3a:2c:19:bb:f8:21:a5:20:44:4e:14:95:
82:28:3d:fa:92:bd:c4:d1:56:55:8b:a3:ae:a4:9c:63:6d:31:
fd:af:ea:60:59:cb:d4:07:15:cd:f8:9a:f4:b8:0f:cc:33:bc:
4f:ac:5e:40:bd:31:03:c8:66:ba:e6:b9:82:bb:7d:ac:4f:55:
c0:d3:b9:83:45:fc:50:c3:1f:63:7e:1c:32:19:10:89:03:dd:
3c:08:b8:53:30:cc:14:cd:84:4b:26:6d:01:d7:bb:f0:90:58:
9f:a7:90:a6:b4:7a:01:82:03:fc:a2:88:20:f8:63:d1:1b:db:
3a:f5:91:47:26:de:58:5a:cf:df:25:f8:ed:83:7c:22:c2:69:
b3:8b:55:a0:67:06:a3:a3:75:77:d7:5f:9f:2f:b9:ab:6c:9e:
65:4d:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:50:42 2026 by rpki-client