Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: 7ePp/R98Xn2SJ5MTIheuqUtvZ8QUgyaQ+ebIlA32X5Q=
Subject key identifier: A9:9F:D2:6C:76:4D:7A:41:AF:1B:85:75:9D:E9:67:A2:E6:69:C1:FC
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 019CF504F7FBC71821F8E438C22BA5E04150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 0D
Signing time: Mon 16 Mar 2026 05:01:09 +0000
Manifest this update: Mon 16 Mar 2026 05:01:09 +0000
Manifest next update: Tue 17 Mar 2026 05:01:09 +0000
Files and hashes: 1: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: qg2Rx2CR6IieGWuGyUCGL0wXTLb8HC1le2k34yDVK2E=)
2: iBdQ4-j2QPRvV9QDAxhNzumCVxM.asa (hash: rol4Tsh0AMx9fLVtNYvLGyZwGsnFMX2emhGc8/Pqh68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:04:f7:fb:c7:18:21:f8:e4:38:c2:2b:a5:e0:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Mar 16 05:01:09 2026 GMT
Not After : Mar 17 05:01:09 2026 GMT
Subject: CN=a99fd26c764d7a41af1b85759de967a2e669c1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:6d:73:d6:7d:38:4c:45:70:d0:b1:87:dd:
85:f4:44:62:ab:29:cf:ca:39:85:11:52:c4:a3:39:
8e:e0:66:5a:63:e8:16:74:a0:f8:76:a8:c2:e2:a2:
51:fc:09:7a:90:c6:80:cb:39:6f:52:ff:54:10:d4:
f6:f2:16:01:78:57:b0:c3:48:d4:fc:31:e3:ca:b3:
28:6e:8c:8e:a1:90:09:be:41:34:9f:f9:49:1c:31:
8e:fa:de:e8:78:92:88:90:22:85:95:4a:bf:6a:c8:
ed:a7:f3:76:7f:3a:a2:93:4f:d7:0f:60:0d:c8:73:
48:0d:2e:0d:39:36:69:8a:63:cd:b8:91:01:e0:5e:
70:6c:7b:d1:1f:c8:7a:cd:dc:47:ed:fd:17:51:c0:
aa:ca:60:8b:a3:72:d6:7b:e3:f1:e0:74:98:15:24:
c3:3e:c0:08:94:8d:f5:6a:ac:22:49:d9:ba:81:f4:
f0:08:9d:fc:6e:6f:a0:29:e4:f3:03:be:98:68:c1:
c7:b5:c9:72:3f:fb:df:1e:61:9c:91:af:53:d1:70:
f4:b3:f2:06:6e:20:f0:2f:1d:4a:a4:fb:73:af:db:
a5:90:24:c2:b2:97:82:7f:7b:50:b9:62:3c:24:56:
7d:62:a1:15:95:67:f5:5d:bf:10:19:8f:72:56:58:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:D2:6C:76:4D:7A:41:AF:1B:85:75:9D:E9:67:A2:E6:69:C1:FC
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b8:ac:af:0b:19:08:b3:45:8a:26:a8:cb:c1:35:31:a9:5e:
59:7c:ff:19:3a:55:2d:d2:ec:b5:e6:a6:13:b1:73:b0:0a:c9:
09:cf:6c:9c:61:02:62:92:f1:d9:18:6b:b6:e1:02:ca:c2:a4:
62:3c:7e:b4:9a:51:e9:7d:de:cd:76:95:2d:8b:1c:ae:92:43:
2a:34:e0:3b:0a:ea:94:4d:34:99:65:4a:73:f2:70:79:eb:82:
c2:1e:f8:32:95:b3:33:55:39:a5:dc:4f:29:ce:cb:d2:5c:49:
fa:1f:55:76:13:83:5e:41:d7:10:95:df:d8:d9:79:7c:12:e0:
a7:63:08:9b:0c:fa:4f:87:83:89:58:ca:30:67:72:b3:b2:dd:
ef:35:f5:f2:9f:f7:69:e7:2c:76:49:bb:af:b7:59:ff:ce:d4:
0e:0c:04:b0:72:13:9e:74:49:f3:c6:e5:1d:d8:a6:b1:2c:3c:
9d:e1:a0:a0:60:70:75:41:a5:78:ea:79:7f:b7:6d:cd:5e:53:
e8:9e:3c:36:5d:d5:86:de:49:05:f0:c7:93:15:3a:bd:41:6e:
18:d8:b2:fd:3f:0e:4a:45:3e:eb:b8:8b:d1:cf:ea:67:29:95:
38:ae:a9:1e:8c:d7:0f:b0:18:24:b5:94:08:c2:c7:6f:d8:43:
4c:ce:68:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz1BPf7xxgh+OQ4wiul4EFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTM3ZWNlNzM1Zjk0YjMxNjcxMjExMTNkOGZkYTRkNmJm
M2I4ODgwHhcNMjYwMzE2MDUwMTA5WhcNMjYwMzE3MDUwMTA5WjAzMTEwLwYDVQQD
EyhhOTlmZDI2Yzc2NGQ3YTQxYWYxYjg1NzU5ZGU5NjdhMmU2NjljMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzhtc9Z9OExFcNCxh92F9ERiqynP
yjmFEVLEozmO4GZaY+gWdKD4dqjC4qJR/Al6kMaAyzlvUv9UENT28hYBeFeww0jU
/DHjyrMoboyOoZAJvkE0n/lJHDGO+t7oeJKIkCKFlUq/asjtp/N2fzqik0/XD2AN
yHNIDS4NOTZpimPNuJEB4F5wbHvRH8h6zdxH7f0XUcCqymCLo3LWe+Px4HSYFSTD
PsAIlI31aqwiSdm6gfTwCJ38bm+gKeTzA76YaMHHtclyP/vfHmGcka9T0XD0s/IG
biDwLx1KpPtzr9ulkCTCspeCf3tQuWI8JFZ9YqEVlWf1Xb8QGY9yVljQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmf0mx2TXpBrxuFdZ3pZ6LmacH8MB8GA1UdIwQY
MBaAFEwTfs5zX5SzFnEhET2P2k1r87iIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAt
MmVmMjI1NjRhNDAwLzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAtMmVmMjI1NjRhNDAw
LzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALisrwsZ
CLNFiiaoy8E1MaleWXz/GTpVLdLsteamE7FzsArJCc9snGECYpLx2RhrtuECysKk
Yjx+tJpR6X3ezXaVLYscrpJDKjTgOwrqlE00mWVKc/JweeuCwh74MpWzM1U5pdxP
Kc7L0lxJ+h9VdhODXkHXEJXf2Nl5fBLgp2MImwz6T4eDiVjKMGdys7Ld7zX18p/3
aecsdkm7r7dZ/87UDgwEsHITnnRJ88blHdimsSw8neGgoGBwdUGleOp5f7dtzV5T
6J48Nl3Vht5JBfDHkxU6vUFuGNiy/T8OSkU+67iL0c/qZymVOK6pHozXD7AYJLWU
CMLHb9hDTM5oVA==
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:16:46 2026 by rpki-client