Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: 5NM/fDB3LzKnOITkHK/mT+i1NjQfobPp2Mi6XU8oGyw=
Subject key identifier: E4:57:5C:8E:6C:CE:29:04:3E:5B:57:79:89:D0:DA:06:E1:5E:FA:F0
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 019F118A2309F1EC7A445753CA3FD2F5AF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 0129
Signing time: Mon 29 Jun 2026 04:01:33 +0000
Manifest this update: Mon 29 Jun 2026 04:01:33 +0000
Manifest next update: Tue 30 Jun 2026 04:01:33 +0000
Files and hashes: 1: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (hash: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=)
2: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: ipi3RLn/+1Dz+gCOVTUB8Gj1lnXI58JNwNscYIcGAxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:8a:23:09:f1:ec:7a:44:57:53:ca:3f:d2:f5:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Jun 29 04:01:33 2026 GMT
Not After : Jun 30 04:01:33 2026 GMT
Subject: CN=e4575c8e6cce29043e5b577989d0da06e15efaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:78:8e:13:ea:7e:ed:c3:b1:43:04:39:8c:
fa:63:1b:ce:92:db:5c:e7:9a:97:5d:cf:00:58:62:
74:5d:5f:0c:9a:2c:09:c0:4b:d5:27:b6:da:9e:a7:
7c:d6:9c:37:54:e0:80:05:da:9e:37:3c:ec:6c:a1:
d7:3f:d1:f2:a4:a9:ce:ca:b9:fe:53:1c:f9:0d:27:
4f:2d:b1:15:54:09:2f:62:7c:0a:20:68:4e:4b:66:
89:54:3c:0d:c3:82:99:01:e0:13:30:49:c1:45:25:
aa:29:16:94:2b:d7:fe:14:6f:11:be:d5:7c:1f:78:
c3:6d:b2:d8:6a:ba:19:a6:70:c4:fb:a6:82:f4:18:
4f:8e:15:4d:13:c2:e1:d1:b1:1d:c9:63:6c:c1:fb:
e9:1f:88:62:6b:f2:b6:d9:b7:90:37:24:27:a7:f2:
1c:5f:e5:ec:eb:69:6c:9f:6e:2e:9f:54:34:00:26:
fb:0e:26:27:da:7c:98:b4:af:3f:5b:02:75:01:bb:
fe:07:80:50:d3:79:ee:09:7e:7a:62:72:c6:78:d1:
9b:b1:b2:4c:39:23:af:b4:1c:4f:8d:0f:ea:35:40:
75:3d:d2:b4:b2:59:8f:14:34:4b:65:11:85:bf:42:
1c:1a:d1:a0:36:f4:a0:ef:38:44:48:7e:82:4a:bb:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:5C:8E:6C:CE:29:04:3E:5B:57:79:89:D0:DA:06:E1:5E:FA:F0
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:15:61:bd:e1:c5:cf:f7:f9:43:5b:37:aa:dd:cc:ed:5a:
7e:75:22:61:98:00:a3:d1:42:bd:12:bc:f3:e1:e9:a7:54:af:
ad:a6:ff:32:17:df:22:7c:01:7c:75:01:f5:82:cc:05:67:8b:
37:f5:f9:84:27:f9:cf:9c:9f:17:70:68:b7:44:19:47:97:17:
66:a1:b6:af:7c:d6:23:79:e0:81:2e:d0:8f:86:e3:4c:65:84:
5b:a4:d7:70:54:45:28:5c:ed:09:4e:7a:a1:36:61:bc:c2:81:
58:49:4a:6e:a4:33:26:15:fb:60:6c:0d:66:35:08:d8:5c:4c:
18:82:ac:0d:3e:f3:8d:00:d9:90:a3:e9:bc:42:a7:1b:7e:8e:
08:52:57:c8:b2:51:ee:5d:ad:af:46:6a:16:ba:79:d8:22:7f:
f7:6a:ff:48:52:89:61:8c:d7:49:b1:d1:72:80:01:15:d3:64:
a0:bb:77:d1:a3:a2:6d:46:26:cd:a3:23:dd:30:e1:2f:a1:5d:
2c:e4:4d:af:81:6b:06:81:71:83:05:b6:ac:3f:5c:74:09:32:
15:82:77:b2:d3:3f:27:4e:f1:ed:1a:c9:d9:c3:0b:21:af:30:
c6:90:6f:05:8f:16:d9:68:b8:89:ad:aa:86:ff:21:69:75:7f:
24:97:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:34:42 2026 by rpki-client