Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: +hl77YN5mgQWZv4TOXd34ZC2tbjHEo/xtF/4L0LOdZg=
Subject key identifier: 9D:C9:7A:67:40:4E:63:8D:DF:30:E9:9F:96:8D:F4:0E:39:63:F9:4A
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019E2FCD8467183FDA7D2D6008384320BEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 186C
Signing time: Sat 16 May 2026 08:00:58 +0000
Manifest this update: Sat 16 May 2026 08:00:58 +0000
Manifest next update: Sun 17 May 2026 08:00:58 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: /dCPRjwFmJM2ScwWwimrW//DKWf+PXA5+YLXHMwKSlk=)
2: iNCnK1riCAEKVwhmFq2vhexQ9pk.roa (hash: yp4qo0DIiWYanDrBleb40OUwRPWMr9ZgpnS6B52GREo=)
3: yBFJbFMqqbu_jw-IuzQj64hYTkk.roa (hash: Be/MDYMq/leuNVsg2savAixZPY6XwwlfEfNgtafhrkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:84:67:18:3f:da:7d:2d:60:08:38:43:20:be:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: May 16 08:00:58 2026 GMT
Not After : May 17 08:00:58 2026 GMT
Subject: CN=9dc97a67404e638ddf30e99f968df40e3963f94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:89:ee:2c:84:6a:28:5a:0b:0f:e5:0e:77:
52:e1:b8:bf:b1:ae:af:14:08:99:1a:02:d4:b3:78:
f7:61:54:9e:26:53:ce:64:6c:c8:a1:87:18:8e:fc:
58:26:cb:00:54:28:6e:1e:ae:ec:13:15:36:14:db:
68:95:db:c0:a1:86:bc:70:09:98:ed:4e:f3:4b:3f:
7b:b0:8a:d7:30:1c:c3:e6:1c:26:df:04:1d:1f:24:
6e:71:f9:4c:70:79:2d:b9:c0:c2:a0:14:3f:d0:79:
73:4a:ec:70:57:1c:94:07:cc:31:df:cf:dc:3b:57:
84:e2:6e:b6:6c:d5:32:0f:eb:05:6a:68:2f:43:41:
9e:b6:76:18:0e:7d:09:f9:cc:bc:77:be:51:f0:43:
15:dd:dd:25:7d:7d:09:4b:83:b5:32:c1:65:71:b8:
a0:2a:df:4d:52:76:57:c4:c2:13:34:29:97:1b:c4:
f2:f8:65:95:79:1a:37:34:b0:9c:63:3a:1d:5e:04:
9a:f7:31:26:22:e2:22:aa:c1:75:b5:fb:02:22:ac:
8d:70:f9:7c:af:ba:4c:58:a1:cf:b7:e5:bc:8d:2a:
5a:16:dc:1f:fd:1f:e2:51:8a:a0:b6:c9:35:e1:dc:
8c:26:15:66:a2:15:e0:a3:73:de:9c:13:63:66:ab:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:7A:67:40:4E:63:8D:DF:30:E9:9F:96:8D:F4:0E:39:63:F9:4A
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:43:f8:b7:5c:24:17:45:dc:e7:ce:e7:76:7a:42:57:a4:38:
7f:48:0a:83:62:97:d0:66:98:4c:47:4e:b0:9b:dd:32:14:7c:
f0:73:b1:b6:2d:de:d4:01:0a:ae:26:5b:d2:a7:06:7a:92:b1:
4f:37:c1:1b:e0:59:0c:e9:01:b4:d9:25:e5:c4:41:ce:3b:a5:
31:78:9e:22:7b:53:d6:aa:32:65:1e:30:91:c5:40:6c:7d:1f:
66:46:65:70:75:68:81:f7:19:86:09:26:51:88:24:20:c4:cf:
58:ee:ef:a5:de:2e:7c:c7:07:71:15:2f:d0:40:1b:f3:b1:83:
84:22:e1:7a:12:73:25:89:bb:80:a9:c7:df:a9:c8:a9:0d:01:
ee:8c:1e:24:d3:22:ca:ca:26:7e:cd:8b:e1:1a:1d:0f:fa:90:
78:58:37:9e:e6:ec:99:49:b4:ea:c0:01:a1:fb:3c:af:23:a9:
f1:a6:96:0d:ac:1c:df:4b:9f:19:ac:c9:a3:4f:7e:86:98:81:
96:50:4f:af:e1:b6:ec:42:0f:3c:a4:b6:50:d1:ea:a3:ab:2e:
45:a5:a6:a0:8e:ec:61:6e:1a:d8:53:c4:43:51:ba:42:f4:a7:
a6:31:f7:7d:31:8b:f1:b8:b2:55:7a:86:dd:0b:94:eb:77:b6:
a6:32:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:39 2026 by rpki-client