Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: xShzJSnD84Ur8YGEkET/lfnOqUvjJ6MauHRf53gaVnA=
Subject key identifier: 3C:2B:BE:A4:7C:60:4D:72:72:99:84:44:88:4E:AA:B0:94:44:A5:8C
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 019F8F10BD5F066AFE84945B59DD0A6368E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 016A
Signing time: Thu 23 Jul 2026 13:01:06 +0000
Manifest this update: Thu 23 Jul 2026 13:01:06 +0000
Manifest next update: Fri 24 Jul 2026 13:01:06 +0000
Files and hashes: 1: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (hash: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=)
2: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: YrR29YvWzz+mh2yFAA0OmUL770xAudCjCHUm8SCR9Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:bd:5f:06:6a:fe:84:94:5b:59:dd:0a:63:68:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Jul 23 13:01:06 2026 GMT
Not After : Jul 24 13:01:06 2026 GMT
Subject: CN=3c2bbea47c604d7272998444884eaab09444a58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:82:c2:7b:c8:89:0c:43:05:bb:47:8d:4e:
8d:40:2a:98:60:f4:fd:24:45:a3:b2:58:b5:cf:81:
4a:ce:bc:5e:6a:45:a2:d7:66:6d:06:d1:c7:e3:de:
ae:b5:c5:a4:fb:60:b5:eb:96:f9:19:42:74:d3:6d:
27:2a:3f:e7:18:3e:07:80:09:71:6f:8f:a9:b6:e5:
5b:e6:16:1a:f4:94:0c:0e:cd:3a:6f:9d:04:c5:cf:
f3:ec:7c:c3:f9:c8:1a:9a:33:d0:2c:a2:67:c8:e4:
37:37:f5:8d:9d:a6:1b:b1:b4:ea:57:7f:35:64:f8:
c7:ab:ae:5e:85:56:87:fb:3d:bf:03:a6:1e:2b:6b:
90:33:95:bb:9b:fa:65:c7:f4:01:d0:78:e1:09:6d:
af:d1:48:6c:6c:cd:c2:b4:e5:e1:e0:bb:4b:e5:1f:
0c:7a:86:ca:20:69:59:9d:6c:4d:96:d6:02:2f:16:
1a:be:1b:75:23:af:38:ce:e8:d0:40:aa:b8:05:08:
92:14:f2:55:eb:ad:b3:d9:db:25:35:69:eb:86:4b:
3c:28:45:e2:2f:5c:84:a4:36:f7:a7:21:eb:aa:8d:
a6:a9:19:9f:38:1f:0b:f5:7f:3b:f6:fa:44:d3:31:
e1:ca:8e:9b:6c:7d:30:44:ad:37:7d:f6:cb:06:56:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:BE:A4:7C:60:4D:72:72:99:84:44:88:4E:AA:B0:94:44:A5:8C
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:47:ee:84:a1:97:5d:21:35:eb:d5:d0:ac:5e:3f:b4:05:0b:
a5:ec:d7:51:68:ac:d3:61:b3:e2:20:a7:85:ae:99:a4:07:ab:
b5:7a:31:3c:66:88:d3:d8:27:5a:11:56:82:0c:2b:64:2d:68:
77:ae:17:b9:01:f0:8a:56:ee:64:cc:ce:c4:73:41:45:78:70:
5a:63:44:db:70:73:41:0e:2b:4f:21:01:33:41:c3:8b:87:37:
d3:39:76:3b:c9:93:82:17:78:32:dc:ec:f2:99:00:f6:ae:66:
26:7c:54:8f:95:8b:03:4f:3a:e0:03:51:e5:52:37:6e:77:71:
91:a4:f1:ba:db:36:f2:8b:70:37:0b:86:3b:4f:6d:c2:ef:55:
c1:e4:75:cf:40:62:70:fe:30:49:eb:38:0b:f4:a6:55:11:89:
03:4d:58:0d:22:e2:18:d3:ab:a0:ae:b5:ab:2f:68:f6:53:7b:
40:1d:95:e1:3d:b0:a8:32:7b:3c:7d:45:8d:48:98:91:4c:94:
9a:6b:3b:a0:70:07:06:3d:2b:bf:19:15:aa:6a:e0:33:e0:26:
5c:30:11:d1:b3:cf:d1:a7:55:4a:f1:99:f8:41:72:83:d4:55:
a2:59:26:12:1b:2c:db:a3:35:46:5f:d5:59:50:b9:02:f4:12:
7f:dd:06:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:34 2026 by rpki-client