Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: akjMFwBafxtEpbBe0Im9X/Wk0MBGjw9tXHyxUuIPJNs=
Subject key identifier: CB:9E:A9:6B:40:8B:FD:56:EE:3F:75:F6:0D:B2:01:FA:58:13:1C:82
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 01A18AF79365BE44541F5210EF202A5DD6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 0271
Signing time: Fri 30 Oct 2026 04:00:43 +0000
Manifest this update: Fri 30 Oct 2026 04:00:43 +0000
Manifest next update: Sat 31 Oct 2026 04:00:43 +0000
Files and hashes: 1: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (hash: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=)
2: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: v/yZ67OPWNEL2253uM6DlSMnygOFyXw9O3jhAdEyif0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:f7:93:65:be:44:54:1f:52:10:ef:20:2a:5d:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Oct 30 04:00:43 2026 GMT
Not After : Oct 31 04:00:43 2026 GMT
Subject: CN=cb9ea96b408bfd56ee3f75f60db201fa58131c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:01:4f:1c:ea:f7:5c:41:66:96:01:21:51:
47:be:d7:ca:eb:f2:84:7e:1f:ac:22:37:c3:21:a2:
dc:6f:6f:28:1e:1e:aa:4b:70:67:c2:8a:19:b7:d2:
ff:af:1a:cb:ef:2c:a4:cf:7a:ad:48:fb:e3:d1:e0:
2a:57:18:e8:39:6f:44:c2:c2:ab:e1:72:9f:5c:67:
98:d9:23:c9:a4:cf:23:5f:ad:65:f6:e6:7c:17:5c:
e5:5e:c3:02:fb:c8:2f:c1:78:e2:61:a8:46:8a:ae:
40:48:8e:bf:54:9b:20:0b:fb:70:eb:be:04:3c:64:
82:70:f2:19:0c:ab:97:2a:3f:1b:03:de:e1:a9:a9:
6c:3c:84:57:80:2e:34:6b:4c:41:a2:5b:55:2e:48:
f8:2a:7b:90:b3:bc:ad:44:03:54:2c:17:9c:fa:56:
73:d2:9e:ea:72:34:67:8c:1f:90:7a:69:7c:b6:f2:
81:e7:a1:2d:a1:41:f2:b3:2f:c0:45:e1:0a:81:65:
be:86:db:84:99:58:7d:3f:90:82:60:79:9e:47:8b:
86:e3:34:3d:2c:03:45:01:32:8a:72:b0:61:0b:72:
f8:a8:b4:fa:09:5d:9a:ef:4a:cf:28:df:c4:68:34:
7f:f9:a6:3b:ac:b7:b1:b6:85:65:be:17:24:ec:f8:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9E:A9:6B:40:8B:FD:56:EE:3F:75:F6:0D:B2:01:FA:58:13:1C:82
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:69:6e:86:ff:22:32:b5:a2:ad:0f:c3:ef:84:08:ba:75:23:
54:38:08:79:1b:31:19:d7:2e:00:54:4d:cc:4c:32:17:3a:b0:
3a:a7:f6:56:25:03:69:67:1a:03:ad:53:0f:45:07:6d:ab:f4:
44:40:69:59:15:10:b6:65:e9:4c:41:d0:8c:8d:1e:cf:58:f4:
63:4d:35:ee:be:eb:2a:cb:61:88:4a:5d:7e:ae:b8:2a:79:24:
17:24:43:16:ad:8e:94:d7:10:61:a0:4a:22:ae:52:e6:10:04:
c2:96:0e:aa:cd:d6:f8:55:73:f9:8c:6e:a7:05:84:83:7c:0d:
7b:59:f3:a1:ef:57:f0:fd:b0:f7:d2:14:d9:7c:b9:d2:46:7a:
2c:39:ea:90:ff:4e:22:e0:59:ea:29:84:ec:76:f5:3e:85:3c:
c6:46:a3:d5:cb:7a:0e:f2:95:3d:18:09:ea:5b:95:19:a1:df:
a2:82:ec:6d:cd:64:ac:85:af:4f:69:20:07:af:f4:68:a9:2f:
a7:dc:77:0a:2c:6f:db:89:21:9f:88:6f:99:ce:f8:62:94:b3:
02:c6:09:5e:a2:8a:95:51:53:eb:bb:1e:da:ed:d8:f8:1a:6d:
7d:c2:03:bd:c8:b2:9d:60:3a:3c:e1:91:bf:5a:3e:f7:37:69:
8c:2b:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 09:06:55 2026 by rpki-client