Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: b1sCuUg7hjw5rR/ud0N6Xi6idnH3dKzG7bIgJg8PAdw=
Subject key identifier: 9C:68:D3:18:E3:2D:26:38:E1:54:E2:BE:3D:30:41:EA:26:96:7C:DB
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 01A0E10722F0E7E28E99F3DD7AF500F1D70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 0219
Signing time: Sun 27 Sep 2026 04:02:16 +0000
Manifest this update: Sun 27 Sep 2026 04:02:16 +0000
Manifest next update: Mon 28 Sep 2026 04:02:16 +0000
Files and hashes: 1: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (hash: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=)
2: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: XhccfTXO0Z2oNY9RE250nainelLKshrjrF9L+7zbWas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:22:f0:e7:e2:8e:99:f3:dd:7a:f5:00:f1:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Sep 27 04:02:16 2026 GMT
Not After : Sep 28 04:02:16 2026 GMT
Subject: CN=9c68d318e32d2638e154e2be3d3041ea26967cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:1f:af:01:d1:91:60:dc:fd:63:d1:cf:72:
f1:b0:ec:e2:05:eb:20:9f:f1:8f:f4:64:02:25:42:
62:97:d2:3f:06:52:34:c5:49:3a:77:22:95:d3:c4:
c0:96:10:09:c3:0a:87:74:ac:85:8f:a0:a5:56:94:
08:17:85:68:07:32:b0:89:a9:7b:f4:e4:ad:02:28:
d6:57:5a:64:41:f5:8f:ed:f7:c4:b7:f0:bb:e7:e7:
87:e1:73:a5:62:34:d9:15:e5:9d:15:00:65:9c:ae:
52:85:48:f3:81:ac:ab:1f:1b:94:84:a0:fa:d2:3d:
c3:28:15:ae:0c:56:d7:35:2a:f1:70:b0:f4:71:09:
27:c0:39:b6:43:19:45:4e:d7:ac:0d:67:ee:fe:05:
c2:a6:1d:c3:29:0a:14:fa:73:b6:b6:b3:64:15:3e:
0a:c0:0d:dc:bf:3e:98:c6:b1:06:40:aa:86:55:42:
4d:c8:66:f7:68:7e:8f:f2:eb:53:c7:b3:57:16:0d:
48:9f:2b:c6:c7:98:2a:90:03:7d:7f:dd:5c:61:71:
b4:60:29:0d:c0:6f:70:1e:47:f4:49:28:30:84:82:
44:9d:c1:a3:e8:77:43:f6:0b:cc:35:00:ac:7e:d2:
d7:82:ae:f8:46:55:ec:55:7d:df:60:8d:36:60:2e:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:D3:18:E3:2D:26:38:E1:54:E2:BE:3D:30:41:EA:26:96:7C:DB
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:20:71:e3:83:70:fe:3f:e8:07:f2:42:a5:6a:3b:3f:08:16:
1b:28:8a:de:fa:53:27:28:83:a0:52:04:b9:f5:c5:01:a3:0f:
4d:ee:eb:fe:0c:80:61:62:b9:5e:5a:aa:db:2f:a2:32:37:51:
4c:39:19:f4:e9:da:05:07:c4:7a:55:5a:38:a1:99:e2:35:d1:
d6:64:e5:a2:f8:b6:1c:7d:ec:f0:b0:00:3b:20:04:3a:c7:30:
b1:d6:1e:0d:7e:cc:01:85:78:7f:6c:4b:3d:27:b1:95:9a:f4:
8d:1b:9e:74:63:fe:c0:2b:35:9f:76:03:b9:e3:e3:47:76:64:
7f:65:aa:aa:5c:af:bf:25:3f:fd:57:79:84:2b:b4:b0:0b:4d:
8a:42:ab:a5:8c:de:61:98:b1:ed:42:83:88:82:79:50:23:8c:
0e:2a:41:6b:a0:52:59:f4:ed:74:25:5a:63:d1:ee:74:a8:e9:
98:6b:8c:27:3d:ff:dc:78:67:93:bc:b7:c6:18:14:f9:f1:44:
3e:cd:97:85:bb:86:cb:e2:4f:6b:4d:2b:9a:16:87:56:36:7c:
6b:79:b5:72:e4:e8:f6:70:0e:37:a5:3a:7e:cf:90:7a:64:f6:
2a:35:2d:1c:a3:c8:f4:c5:f1:de:58:9d:b6:22:e6:5e:69:e5:
de:85:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:50:57 2026 by rpki-client