Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: VO1FkjEoTOlXi7xTdoxIdQWSZAECqBelNasapKMOdYU=
Subject key identifier: BA:96:8D:8D:21:40:80:0C:71:A3:C5:8E:5E:D6:64:B9:48:AE:1E:EE
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 019DDC8C9D333E9FE2B22E9ADFBEBA9F1594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 86
Signing time: Thu 30 Apr 2026 04:01:35 +0000
Manifest this update: Thu 30 Apr 2026 04:01:35 +0000
Manifest next update: Fri 01 May 2026 04:01:35 +0000
Files and hashes: 1: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: vh0hO0ropuAxp57h4ir365FewVp0XacjbA506oVNy3I=)
2: xQDmeABqsv2igu65Zb5-86DE9rA.asa (hash: e5WFrdakuR/Nxgim2o4Ip+2V9yHQh3Xy/2uN1JQ4wss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8c:9d:33:3e:9f:e2:b2:2e:9a:df:be:ba:9f:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Apr 30 04:01:35 2026 GMT
Not After : May 1 04:01:35 2026 GMT
Subject: CN=ba968d8d2140800c71a3c58e5ed664b948ae1eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:c9:02:92:97:55:e7:be:ce:b6:f5:c1:bd:
69:bc:d6:44:e9:81:76:28:18:0b:4f:d0:98:c6:86:
40:c5:90:af:63:4b:17:6b:c3:97:0d:4e:ec:a3:a9:
dc:3c:3f:84:89:3b:35:0d:9d:70:59:d2:d9:88:aa:
34:05:59:d0:d1:2a:42:b9:65:7c:c1:97:24:40:55:
73:78:7d:36:3c:89:f7:75:aa:98:8b:f5:fc:7c:1e:
85:7d:f1:fb:98:7c:24:f6:a1:9b:bf:e5:b3:03:71:
52:a5:a7:50:83:29:c4:b3:0d:e7:82:26:77:39:34:
d6:d1:3f:85:19:b0:f4:05:07:fc:79:62:64:ad:c4:
86:e8:8d:02:e5:d5:13:73:c6:eb:7d:3f:34:a1:e6:
c1:df:57:a6:44:eb:7b:4e:c8:51:e0:43:ab:3a:f4:
11:0a:c2:74:95:e4:ee:0e:2c:1e:34:b9:ca:69:5a:
5f:85:d1:ed:f0:78:ae:e2:b4:3e:c0:3d:2e:db:21:
ce:8d:76:62:89:5a:89:27:f5:75:b2:a7:e2:c2:66:
de:d4:6d:af:fc:97:8b:da:64:48:59:96:e9:d5:d3:
d6:6f:96:5b:5e:c4:2e:b8:36:81:20:bc:64:c2:8e:
f7:df:0b:bb:4c:1d:3b:73:d5:aa:0a:9b:1f:ae:c5:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:8D:8D:21:40:80:0C:71:A3:C5:8E:5E:D6:64:B9:48:AE:1E:EE
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:98:c3:1b:4a:f0:fd:a2:3b:ed:76:7f:8f:14:b6:d3:08:
19:4c:a3:a3:df:cc:52:16:f0:5d:16:0b:2a:58:18:6e:01:10:
48:07:b4:9f:c2:37:b2:41:fb:12:d5:96:15:40:10:04:73:fa:
3b:32:56:c7:f4:38:81:81:68:7d:9e:b7:85:7a:3b:75:f9:e3:
64:3a:09:0c:56:a1:c8:01:6c:fe:ac:c9:d9:d8:89:3f:f4:db:
91:b7:f6:17:fa:2e:73:9a:61:c4:e5:97:ee:4b:3b:0d:3a:15:
42:dc:8f:af:99:68:52:91:13:c0:7b:dd:12:76:97:5e:58:cc:
7d:00:cb:f0:47:2c:42:f9:8d:75:df:fe:96:26:61:e4:53:c8:
64:2d:a1:8a:52:a7:b8:f6:07:a5:b4:40:54:06:91:28:ac:44:
05:fd:0c:8c:33:f8:9d:2e:22:39:f6:83:6c:5d:58:69:d6:9a:
7a:14:61:91:4b:30:f3:52:85:ce:19:91:e6:3d:f1:a1:24:d9:
8f:2d:fb:4c:ee:9d:93:1d:5a:95:92:d8:aa:22:0b:9a:44:a4:
00:90:74:0f:3d:8c:53:1f:90:05:b6:ba:4b:8b:34:08:fe:92:
e9:0f:51:6d:7b:00:62:1c:b8:a6:6a:75:42:92:0e:f9:15:83:
a2:59:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:39 2026 by rpki-client