Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: c01JeaTTwXfAC73zufsqTgaTXsudHcd7mZh2Z+3wzE4=
Subject key identifier: FD:04:3A:F9:C7:26:DD:EC:0C:00:1A:65:BD:1C:EC:06:05:01:44:F7
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 019D37F7412ABF38D335123B708B51FB6C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 0710
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: ZapQiAtJnc9a1-GW4H20whNpSZw.roa (hash: hZ+kaGEM7fGXJLA7SsYpcn/FFyPh/7kbyCyQAEi9eHM=)
2: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: yYwPhjTst3njvQ97t8qkNkLena5HC0BnE0tsfKKNwbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:41:2a:bf:38:d3:35:12:3b:70:8b:51:fb:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=fd043af9c726ddec0c001a65bd1cec06050144f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:8a:02:87:79:05:6d:12:69:a6:f2:98:69:
39:bd:0e:41:36:4b:a4:59:12:22:54:1f:bb:d8:b9:
9e:bf:4a:d3:b1:b9:99:32:fd:43:eb:60:46:d9:50:
42:2f:82:3b:f3:22:d4:81:24:c0:6d:e4:c8:f1:54:
63:6f:d7:84:17:42:fa:66:c3:e5:42:57:97:32:2e:
d5:aa:24:3b:8d:76:02:9c:18:6e:1c:3d:c2:a4:83:
9a:d2:1d:54:db:9a:4b:93:ac:e6:b8:2c:d4:8e:36:
cc:dd:39:f4:1a:3b:20:2b:c7:6c:51:26:75:ea:db:
d4:aa:4f:23:57:55:4b:bd:03:97:78:8f:8c:43:38:
e5:94:d1:58:eb:6d:29:0e:fd:82:c0:6b:a4:58:16:
e3:f6:78:70:74:cf:ca:1a:53:51:82:16:98:12:0d:
9d:cf:fa:8d:35:5b:14:c7:93:b0:4d:eb:02:9c:37:
ba:2c:9e:14:57:64:71:8c:ec:0e:10:2f:d3:2f:33:
b1:40:c0:b1:0c:d2:cf:cd:c2:38:e7:bc:a3:29:c5:
6f:ee:bf:ce:2b:47:1e:0e:f3:58:5e:31:91:bf:5b:
6e:6b:a2:79:7b:7c:20:f3:ae:86:cb:93:13:1d:35:
7c:56:92:9d:83:77:23:e6:60:8d:be:3a:c2:28:5c:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:04:3A:F9:C7:26:DD:EC:0C:00:1A:65:BD:1C:EC:06:05:01:44:F7
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:81:75:70:e0:e8:3c:88:81:63:51:de:ea:2c:2e:33:f7:4d:
80:e7:9a:35:53:71:3e:6f:29:9c:46:51:e6:ca:d0:9a:c3:e5:
c2:50:58:a2:a8:fa:53:0e:fa:a6:66:3a:a0:cc:b7:80:a5:11:
e5:2e:88:bb:70:c3:88:12:eb:2a:de:ca:49:1e:e3:cd:db:0d:
9f:51:9a:8a:49:2f:52:77:06:5c:6c:e3:d9:80:a4:c4:1f:79:
c0:9c:96:8a:3e:3f:ed:e6:ea:1d:b9:a1:fe:f8:28:6a:f9:08:
a7:8f:d3:da:46:66:5e:6b:9c:d9:2f:90:6f:96:3f:7c:16:0f:
d4:1c:85:79:cf:c6:a5:59:3d:38:80:95:5e:9f:42:19:73:8a:
35:6d:6c:56:04:8d:d2:ac:bd:6e:12:20:40:7a:4d:68:c0:26:
c3:6f:a0:56:97:aa:15:41:a6:00:d7:52:c3:f2:9e:30:32:8c:
44:f8:ac:d5:32:0e:01:8d:7a:c7:86:e4:85:8e:8d:e6:67:4b:
bb:64:68:12:5a:e1:ce:da:e7:00:29:15:c4:dd:f9:9c:95:e4:
c8:91:9b:19:16:21:b8:c5:86:d4:36:a5:9c:7a:7e:81:c3:42:
b8:b6:07:88:2a:93:42:f1:03:1c:79:ea:de:e8:e9:e6:0e:d7:
4d:c8:64:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390EqvzjTNRI7cItR+2wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl
MjJiNmYwHhcNMjYwMzI5MDUwMDQ0WhcNMjYwMzMwMDUwMDQ0WjAzMTEwLwYDVQQD
EyhmZDA0M2FmOWM3MjZkZGVjMGMwMDFhNjViZDFjZWMwNjA1MDE0NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OOKAod5BW0SaabymGk5vQ5BNkuk
WRIiVB+72Lmev0rTsbmZMv1D62BG2VBCL4I78yLUgSTAbeTI8VRjb9eEF0L6ZsPl
QleXMi7VqiQ7jXYCnBhuHD3CpIOa0h1U25pLk6zmuCzUjjbM3Tn0GjsgK8dsUSZ1
6tvUqk8jV1VLvQOXeI+MQzjllNFY620pDv2CwGukWBbj9nhwdM/KGlNRghaYEg2d
z/qNNVsUx5OwTesCnDe6LJ4UV2RxjOwOEC/TLzOxQMCxDNLPzcI457yjKcVv7r/O
K0ceDvNYXjGRv1tua6J5e3wg866Gy5MTHTV8VpKdg3cj5mCNvjrCKFwTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0EOvnHJt3sDAAaZb0c7AYFAUT3MB8GA1UdIwQY
MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt
ZWE1ODdmZDY1OGIyLzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy
LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4F1cODo
PIiBY1He6iwuM/dNgOeaNVNxPm8pnEZR5srQmsPlwlBYoqj6Uw76pmY6oMy3gKUR
5S6Iu3DDiBLrKt7KSR7jzdsNn1GaikkvUncGXGzj2YCkxB95wJyWij4/7ebqHbmh
/vgoavkIp4/T2kZmXmuc2S+Qb5Y/fBYP1ByFec/GpVk9OICVXp9CGXOKNW1sVgSN
0qy9bhIgQHpNaMAmw2+gVpeqFUGmANdSw/KeMDKMRPis1TIOAY16x4bkhY6N5mdL
u2RoElrhztrnACkVxN35nJXkyJGbGRYhuMWG1DalnHp+gcNCuLYHiCqTQvEDHHnq
3ujp5g7XTchk2w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:54 2026 by rpki-client