Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: 5eok2TwoXgb23aYmsEXT2xo3/QOog2q/MpgMg3zssFU=
Subject key identifier: D7:7F:82:4D:E8:B2:79:43:75:9B:8D:E7:06:03:B6:27:EE:3D:68:17
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 019CAAFD6C736A1FD348D73BBBB14CD1539B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 06C7
Signing time: Sun 01 Mar 2026 20:01:00 +0000
Manifest this update: Sun 01 Mar 2026 20:01:00 +0000
Manifest next update: Mon 02 Mar 2026 20:01:00 +0000
Files and hashes: 1: ZapQiAtJnc9a1-GW4H20whNpSZw.roa (hash: hZ+kaGEM7fGXJLA7SsYpcn/FFyPh/7kbyCyQAEi9eHM=)
2: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: gj3zSvmPY+H3rTCf/lAgUn043X7xIcTDYE772fS7tOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6c:73:6a:1f:d3:48:d7:3b:bb:b1:4c:d1:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Mar 1 20:01:00 2026 GMT
Not After : Mar 2 20:01:00 2026 GMT
Subject: CN=d77f824de8b27943759b8de70603b627ee3d6817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:63:6f:bc:d1:84:d6:b9:fd:dd:be:c8:58:
51:d4:76:5e:3d:cc:2c:1e:40:b5:14:29:e1:b5:d6:
c7:a8:1a:18:73:a5:b8:ae:2d:c5:b8:3a:df:a0:5b:
52:3d:b1:3b:55:23:58:b5:8d:9d:c5:cd:be:30:fe:
59:0d:b6:7d:56:d7:16:e9:4e:a5:33:df:4d:c4:a1:
24:0f:3f:d6:19:2a:6e:79:47:e0:ec:0d:6b:19:e9:
5d:36:b2:2b:6e:b5:a0:78:2c:b3:18:e2:f8:75:f4:
e8:e6:d5:06:bc:9b:0e:a7:c4:35:4a:22:09:ff:b3:
5e:9c:7c:b3:c6:f4:b9:18:13:14:05:09:00:7d:ea:
74:b2:6d:47:83:7c:ed:92:63:3a:41:d9:e3:03:db:
6a:81:bc:96:9f:86:f2:42:e0:a2:b1:db:9c:38:87:
81:96:74:f0:79:59:30:76:3f:0e:4e:e2:64:8e:65:
a1:77:58:84:d3:87:2f:d7:75:1d:2b:04:33:3e:16:
e9:b8:77:f9:73:1e:11:d8:90:fa:81:7c:08:19:53:
0c:32:45:e8:fe:fa:f6:df:9a:27:1d:b1:8a:84:09:
7b:91:69:a1:1e:40:6e:6c:77:89:6e:cb:35:63:fe:
fe:ce:dd:25:8e:0f:7e:24:ea:2e:50:8b:8c:93:6a:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:82:4D:E8:B2:79:43:75:9B:8D:E7:06:03:B6:27:EE:3D:68:17
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cf:8b:69:e9:ea:14:ca:84:f8:ec:13:0a:df:6c:f6:5b:c8:
d1:e9:2a:05:ec:6c:e1:e3:11:8d:09:b2:53:77:5f:39:7f:5a:
3f:ff:a6:e3:90:c0:67:eb:f4:2c:3d:60:57:96:d3:85:21:cf:
71:21:65:89:88:e2:68:00:ac:05:96:b0:8e:4b:74:13:13:b9:
8c:af:d1:9c:bd:3e:54:65:14:18:51:b6:63:b6:ae:02:cf:90:
61:b9:4b:90:aa:93:81:72:52:54:75:9f:e2:c3:e4:ed:5a:2a:
11:95:d5:3d:5b:15:b3:c4:70:7f:5e:f3:c5:5a:f3:4f:21:b7:
b3:57:dc:e6:5d:d7:73:af:31:2e:18:46:ea:84:9c:0d:a1:d0:
74:4c:50:eb:86:0a:20:4f:11:1f:ce:5a:7e:e7:15:93:61:1a:
16:22:ca:43:f9:42:0e:dc:a4:43:53:b5:6d:e0:e8:c4:cd:cb:
d7:46:c0:68:b5:25:74:d5:02:03:eb:3f:c0:d2:a4:79:38:84:
ce:6a:3a:88:5d:4d:34:f8:9d:a2:5f:ee:c6:a0:3e:44:66:45:
5e:10:37:8a:6a:d2:de:94:02:64:23:2c:a5:69:71:01:19:17:
cd:04:58:57:03:e2:18:31:b5:b7:bf:40:11:d0:91:45:e3:02:
c8:c8:10:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:46 2026 by rpki-client