Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File: TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier: /PhflaXb2kFAjo4QKWP2+FVetdOnX1mh6lWbV36JKhs=
Subject key identifier: 59:05:63:B5:49:0A:CA:FD:67:93:CC:19:6F:25:54:42:12:7F:BA:1B
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 019DA4F8ABA6045EA205A72D9DB9AC54CDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number: 69
Signing time: Sun 19 Apr 2026 09:00:53 +0000
Manifest this update: Sun 19 Apr 2026 09:00:53 +0000
Manifest next update: Mon 20 Apr 2026 09:00:53 +0000
Files and hashes: 1: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: Etr6Vj58Zl40XTQRiaMWVqTGaVjzqBtkJWlHZre/dP4=)
2: oItuACLpKbdC_mRgmNlHZf4Izzc.asa (hash: OZeWH70QG5hehrS+dFmMwPZHbnFgCNtsrek4wAGfcVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:ab:a6:04:5e:a2:05:a7:2d:9d:b9:ac:54:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Apr 19 09:00:53 2026 GMT
Not After : Apr 20 09:00:53 2026 GMT
Subject: CN=590563b5490acafd6793cc196f255442127fba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:f9:d9:14:9a:4a:eb:74:16:e6:26:05:1c:
c6:d3:c2:13:8a:7a:f9:e6:43:1e:a3:00:f3:b5:53:
a4:18:8a:70:54:c7:86:a7:36:a6:16:3c:54:f9:e9:
00:6c:02:de:df:f4:75:df:57:9f:b1:47:8a:99:19:
ce:25:cd:61:6f:14:b3:31:cc:c2:88:35:3b:53:33:
66:64:92:17:5a:28:f4:70:f8:b8:d1:fd:ed:59:6d:
cb:4d:1a:1a:59:0d:61:41:4a:17:62:df:f9:81:4c:
16:c8:8a:d1:e2:90:2f:b9:95:3a:b1:11:87:6a:aa:
d0:d1:33:4d:84:85:28:a8:f0:ce:2b:f7:f7:26:4b:
88:dd:01:d1:bd:15:fd:3f:52:7d:7c:ad:86:26:24:
6c:50:01:d5:33:5a:4b:41:7c:fb:56:74:52:4b:71:
86:a9:df:82:ed:a8:ae:16:44:ab:b1:b0:83:af:01:
bf:a6:2e:52:2e:dd:d1:3e:52:5c:5b:b7:a6:c8:6e:
78:74:2d:ec:4d:f7:ce:26:e7:28:91:a4:f8:f3:31:
c2:a0:8c:40:f7:d4:f5:a0:05:e1:b0:61:98:a9:2f:
b5:7c:21:84:3d:0c:72:da:e1:13:f7:8b:f4:26:6a:
b2:ed:3b:c6:e5:a1:2b:2a:f2:7b:cd:c8:84:eb:05:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:05:63:B5:49:0A:CA:FD:67:93:CC:19:6F:25:54:42:12:7F:BA:1B
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:98:25:c7:fc:ea:4a:aa:1e:3c:1e:20:da:67:17:9a:16:fc:
8d:c8:5a:27:66:3c:80:3c:b9:64:a4:52:c3:e7:75:0e:60:fc:
6b:5a:8d:d8:c1:4f:9b:8a:34:32:3e:c4:83:48:2f:57:33:cc:
82:2e:a9:6d:20:03:9c:62:1d:ed:2a:5c:08:85:d9:6b:bc:46:
57:a7:39:fd:d3:33:51:03:81:e9:12:29:c2:df:41:f7:31:48:
4f:24:8a:9e:81:1c:c9:aa:24:ec:c9:fc:1c:7e:12:da:31:61:
83:b5:d6:2c:29:79:07:c9:04:f2:19:27:9f:d0:05:34:79:61:
e9:1b:e4:67:ef:14:ae:9d:9a:dd:85:79:f5:a0:cc:1a:13:a7:
6e:5d:b4:0d:b4:f2:83:14:bc:69:71:26:d1:d2:10:da:e4:97:
91:b6:62:02:7b:da:04:75:cb:7b:26:b3:cc:95:8a:33:77:5e:
a0:c7:db:7a:e0:dc:60:b6:65:5e:04:e4:b2:48:85:54:18:84:
22:8e:81:44:a7:e5:e9:c1:d9:f6:40:82:7c:49:f8:60:ed:1f:
4a:c4:74:12:fc:82:58:b9:5c:f5:9c:40:77:b9:19:cc:dd:0a:
a8:af:97:5a:44:a0:8a:e1:2d:fc:3a:a6:e2:63:3c:a4:2d:73:
de:d9:a3:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+KumBF6iBactnbmsVM3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTM3ZWNlNzM1Zjk0YjMxNjcxMjExMTNkOGZkYTRkNmJm
M2I4ODgwHhcNMjYwNDE5MDkwMDUzWhcNMjYwNDIwMDkwMDUzWjAzMTEwLwYDVQQD
Eyg1OTA1NjNiNTQ5MGFjYWZkNjc5M2NjMTk2ZjI1NTQ0MjEyN2ZiYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom352RSaSut0FuYmBRzG08ITinr5
5kMeowDztVOkGIpwVMeGpzamFjxU+ekAbALe3/R131efsUeKmRnOJc1hbxSzMczC
iDU7UzNmZJIXWij0cPi40f3tWW3LTRoaWQ1hQUoXYt/5gUwWyIrR4pAvuZU6sRGH
aqrQ0TNNhIUoqPDOK/f3JkuI3QHRvRX9P1J9fK2GJiRsUAHVM1pLQXz7VnRSS3GG
qd+C7aiuFkSrsbCDrwG/pi5SLt3RPlJcW7emyG54dC3sTffOJucokaT48zHCoIxA
99T1oAXhsGGYqS+1fCGEPQxy2uET94v0Jmqy7TvG5aErKvJ7zciE6wXSEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkFY7VJCsr9Z5PMGW8lVEISf7obMB8GA1UdIwQY
MBaAFEwTfs5zX5SzFnEhET2P2k1r87iIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAt
MmVmMjI1NjRhNDAwLzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAtMmVmMjI1NjRhNDAw
LzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZglx/zq
SqoePB4g2mcXmhb8jchaJ2Y8gDy5ZKRSw+d1DmD8a1qN2MFPm4o0Mj7Eg0gvVzPM
gi6pbSADnGId7SpcCIXZa7xGV6c5/dMzUQOB6RIpwt9B9zFITySKnoEcyaok7Mn8
HH4S2jFhg7XWLCl5B8kE8hknn9AFNHlh6RvkZ+8Urp2a3YV59aDMGhOnbl20DbTy
gxS8aXEm0dIQ2uSXkbZiAnvaBHXLeyazzJWKM3deoMfbeuDcYLZlXgTkskiFVBiE
Io6BRKfl6cHZ9kCCfEn4YO0fSsR0EvyCWLlc9ZxAd7kZzN0KqK+XWkSgiuEt/Dqm
4mM8pC1z3tmjkg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:24:57 2026 by rpki-client