Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: g8IVAPDUOYFrhmyndhNBhnWccw/j784U0gfi1eqc5TY=
Subject key identifier: A5:DD:47:B3:97:CA:A7:3E:52:17:92:28:D9:0F:BA:34:B2:89:6A:CA
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 01A0D57098A6A96F0D22B8D6924D230ADB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 0213
Signing time: Thu 24 Sep 2026 22:02:01 +0000
Manifest this update: Thu 24 Sep 2026 22:02:01 +0000
Manifest next update: Fri 25 Sep 2026 22:02:01 +0000
Files and hashes: 1: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (hash: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=)
2: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: RiXxl5gUPvzqFq8RJckgBMOffDTTccyizhEz5pLTCsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:98:a6:a9:6f:0d:22:b8:d6:92:4d:23:0a:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Sep 24 22:02:01 2026 GMT
Not After : Sep 25 22:02:01 2026 GMT
Subject: CN=a5dd47b397caa73e52179228d90fba34b2896aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:38:30:fd:91:aa:92:39:64:f9:62:bf:f7:
ba:15:0f:3e:d1:11:8a:6a:ea:c1:35:5b:55:20:59:
85:3c:e0:0f:85:a7:49:a1:5e:68:1b:83:8f:e4:82:
82:d4:16:86:e8:88:f0:91:65:8c:ff:db:12:7b:bf:
cd:b1:a9:59:8a:39:91:d7:49:04:a0:20:21:81:be:
b7:55:51:92:eb:ec:35:b4:c4:c1:22:87:20:d8:ae:
6b:04:1f:e3:9e:d1:ac:76:45:5b:fa:66:5e:fe:3d:
1f:dd:ed:91:2c:63:ca:ec:51:5e:70:75:bf:e2:04:
51:8b:8f:40:cf:72:f3:e9:36:5e:d7:a1:e8:93:df:
1f:9b:6c:8e:81:25:f7:10:22:10:1a:59:13:46:2a:
f7:54:1e:05:79:df:44:66:af:93:a9:db:38:c1:f0:
e0:0a:3d:53:70:e8:2c:ce:3d:8b:16:7c:25:a0:07:
51:c7:45:1d:6b:50:40:6d:ad:14:13:a4:14:48:2f:
af:2b:a5:7f:a6:a5:b8:7f:82:6e:33:80:a5:07:a3:
91:33:d9:1b:a1:6f:a5:b4:4f:e5:36:b0:b6:c1:d2:
e4:9c:be:76:22:60:b4:7e:a3:34:59:ad:f7:32:3f:
a9:14:8a:c7:2a:8f:7f:3d:db:df:2a:6a:53:d5:bf:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:47:B3:97:CA:A7:3E:52:17:92:28:D9:0F:BA:34:B2:89:6A:CA
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:49:d9:ab:62:9c:be:76:a6:97:15:9f:82:d9:73:6b:84:0e:
fa:4e:6a:ee:b6:4c:37:b9:60:a7:82:6e:e0:8d:6f:e0:0a:f1:
87:45:ec:63:29:a8:99:f7:71:66:1c:14:0f:da:be:3a:a7:e5:
d2:1c:89:07:0f:90:1f:16:c1:74:0e:a0:75:78:39:ba:be:a9:
51:77:41:ce:92:9b:93:bf:d8:46:3f:0a:61:b8:87:af:75:88:
f0:b8:90:44:b5:df:85:3d:dc:9c:f3:95:0e:88:dd:11:c3:d2:
19:10:89:17:a8:ce:af:96:c1:b6:bf:47:61:4c:e6:9e:01:e1:
9f:1b:22:99:68:6d:66:69:d4:4a:74:4c:1f:e6:31:ac:b7:b8:
14:f7:1e:19:6f:55:83:f0:91:da:61:fc:17:b6:3f:77:aa:43:
ea:3e:1c:3d:22:77:d5:53:9b:bb:a2:04:bf:76:83:69:68:30:
b5:e1:72:88:98:36:f4:f9:18:96:b1:73:4a:2f:24:8e:b2:41:
fb:37:57:e6:47:cc:cb:26:32:c9:a2:dc:de:f5:68:40:c7:d3:
a4:9b:11:be:0a:3e:3f:b3:fd:e0:f4:0c:32:97:7f:28:e7:6f:
a3:ed:49:ec:3e:a1:44:2e:63:13:e3:d5:79:52:1f:6b:ef:13:
47:b8:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:21:47 2026 by rpki-client