Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: TszyMbfUTStt2JOj94+Eh4noaVZKJ9aj4X0rAmubiOw=
Subject key identifier: EF:1F:2A:5E:75:34:B1:A0:A1:C6:53:13:FA:44:EA:FC:50:D1:8C:EC
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019F17C23DD5E6360C09D94E67440DA76857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 18E5
Signing time: Tue 30 Jun 2026 09:00:33 +0000
Manifest this update: Tue 30 Jun 2026 09:00:33 +0000
Manifest next update: Wed 01 Jul 2026 09:00:33 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: YA7AMmoAxMyPMyc4GTChlbBle94v5z6+QJzcwkKhLAM=)
2: iNCnK1riCAEKVwhmFq2vhexQ9pk.roa (hash: yp4qo0DIiWYanDrBleb40OUwRPWMr9ZgpnS6B52GREo=)
3: sWX-HSOeRAuWqC5VFhhZlWiICD8.roa (hash: +5FVOEPQlVmu84Bor7ae+bvovnrqW0Ox8oTKHK/3MVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:3d:d5:e6:36:0c:09:d9:4e:67:44:0d:a7:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jun 30 09:00:33 2026 GMT
Not After : Jul 1 09:00:33 2026 GMT
Subject: CN=ef1f2a5e7534b1a0a1c65313fa44eafc50d18cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:ab:34:b7:38:85:c5:83:da:6c:8a:e0:70:
61:b6:7a:c9:8c:a4:56:05:00:8c:c7:6a:b8:77:45:
07:4e:66:19:b6:dc:2f:99:fe:e2:1d:64:22:2a:9b:
4d:b9:58:3c:89:a8:32:18:c9:8b:50:88:df:ba:7c:
6c:76:f1:ca:8f:be:43:ff:73:f4:42:01:53:88:2d:
ca:90:e2:84:74:4a:13:90:b1:e8:3f:d8:9b:98:58:
07:77:08:7c:d1:f6:1b:a9:a7:5f:67:b2:23:e8:d1:
74:88:0f:98:e1:0b:27:40:bb:59:b5:98:a3:98:d8:
d1:2b:69:e1:5d:bf:3f:f4:87:f5:84:2c:d3:85:61:
bb:08:56:45:1c:6c:ec:6f:76:62:fc:c5:8b:fd:9c:
2a:98:ad:d8:7e:2a:2d:08:5a:af:73:84:18:7e:23:
3f:79:c7:a0:23:3f:c6:4f:fe:4b:20:cf:57:90:b2:
41:23:d7:ea:3e:35:48:5b:31:b7:9e:95:25:3e:e3:
07:71:ad:de:98:df:c5:06:98:b6:fb:0d:0a:94:2f:
d7:2f:e8:62:27:f9:62:39:17:eb:4c:01:55:fb:a6:
6f:93:71:e9:02:dc:d1:f9:e8:3f:69:0e:95:a1:16:
b1:c4:cf:7a:53:6d:75:f8:26:0f:a5:fe:27:41:f8:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1F:2A:5E:75:34:B1:A0:A1:C6:53:13:FA:44:EA:FC:50:D1:8C:EC
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:53:fc:38:5f:59:42:00:b6:43:ef:74:87:96:55:48:b6:
62:55:c3:08:36:74:3d:f4:59:1b:d1:82:d3:10:1e:0e:eb:c8:
cc:98:37:74:4d:a5:1f:6b:61:00:c5:f4:be:ae:62:1f:3e:17:
85:27:a1:bb:fb:45:95:1d:09:32:9c:60:08:92:02:66:36:65:
76:17:56:7d:27:12:00:7c:80:ea:e0:62:c9:34:5c:2c:fe:4d:
f1:b1:65:b0:e0:c7:1c:49:41:41:19:f0:bb:ff:7b:a0:3e:82:
22:09:94:f9:71:82:96:99:50:2b:33:8e:db:eb:e6:c2:7f:56:
8e:46:c9:ad:2b:b3:65:03:f8:48:28:12:7b:8b:71:a5:f5:33:
99:d6:ba:ed:81:a6:84:0b:95:f0:b0:08:54:9b:c5:cb:2b:7b:
21:6a:04:2a:ac:0d:a1:6c:27:22:39:ab:19:e6:7f:8a:f6:68:
a5:c3:e0:fc:e2:48:8c:92:d3:0c:6a:70:62:52:11:41:90:a9:
8f:ff:dc:da:2f:2a:fb:80:60:5d:cc:3a:a3:57:76:e4:ec:29:
e7:9d:f7:1f:98:b7:b6:63:91:c0:f5:f3:c6:43:64:c0:aa:9c:
bf:ba:45:58:2f:e6:4c:16:7b:98:76:c8:c3:d9:89:8e:31:02:
28:d7:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:53 2026 by rpki-client