Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: DyWnqdW4czLvg3to5btlNiYm7RyaVVgEAC6ToiqTakM=
Subject key identifier: 4A:D1:4B:87:C7:B4:C2:06:13:54:4C:94:4C:B2:46:A0:E4:95:BB:83
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019EBEB5A04557D428F21B6B43700E5167EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 18B6
Signing time: Sat 13 Jun 2026 02:00:34 +0000
Manifest this update: Sat 13 Jun 2026 02:00:34 +0000
Manifest next update: Sun 14 Jun 2026 02:00:34 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: lu/UW/jnP+1ptYqJm8QQJ5V2cV4M/vRmjzGK6q8WB2w=)
2: iNCnK1riCAEKVwhmFq2vhexQ9pk.roa (hash: yp4qo0DIiWYanDrBleb40OUwRPWMr9ZgpnS6B52GREo=)
3: yBFJbFMqqbu_jw-IuzQj64hYTkk.roa (hash: Be/MDYMq/leuNVsg2savAixZPY6XwwlfEfNgtafhrkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:a0:45:57:d4:28:f2:1b:6b:43:70:0e:51:67:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jun 13 02:00:34 2026 GMT
Not After : Jun 14 02:00:34 2026 GMT
Subject: CN=4ad14b87c7b4c20613544c944cb246a0e495bb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:2f:fc:dd:08:94:02:67:b2:32:61:e4:1b:
39:7f:91:22:39:f1:e6:b3:80:d6:19:39:5f:35:fe:
80:7c:5b:9d:52:1f:21:85:29:af:05:55:5f:7b:3c:
51:e7:11:a1:ae:12:3e:ab:5b:04:26:97:60:51:5a:
3b:bf:1e:5a:a4:93:25:db:6f:75:a3:04:f0:5c:67:
65:c2:da:f1:bb:05:a8:ba:d4:fc:65:50:c6:0e:f7:
79:02:bd:c0:46:25:52:52:f9:41:9a:37:19:72:ff:
ee:a7:7b:22:ce:8a:1b:61:2d:d9:c6:d4:71:3f:3a:
0f:b3:a9:50:0b:e8:ca:30:d1:f7:4e:94:5c:86:d3:
d9:37:4d:28:57:b3:20:0a:8d:df:95:6f:bc:91:fe:
3f:0e:45:8e:02:ec:9f:06:c5:6c:7a:fa:eb:24:96:
5f:03:62:b0:f4:1b:1e:ad:82:a2:06:34:1f:47:28:
ff:cd:a6:19:01:c2:04:a0:9c:27:d4:6c:c2:e5:39:
52:56:38:9c:52:99:d2:06:57:67:bc:42:24:59:f6:
f1:45:6c:d8:9f:8c:67:5a:cd:4d:94:66:fe:77:90:
23:8e:d5:19:29:94:01:15:5d:e7:4b:a4:08:e8:68:
fb:87:db:e3:6c:f1:00:1d:bd:14:70:38:96:f8:7c:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:4B:87:C7:B4:C2:06:13:54:4C:94:4C:B2:46:A0:E4:95:BB:83
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c3:07:8a:47:76:80:7c:29:db:19:7d:8c:c3:a1:5e:12:07:
98:cd:84:06:8a:a7:9f:78:c6:19:35:be:a9:64:b8:12:51:35:
57:c1:da:12:49:9e:c2:36:10:b2:32:95:2c:90:b6:ec:64:ac:
48:12:43:78:a6:9a:e0:80:0f:de:4f:f5:cf:ed:5c:46:2e:49:
ad:36:cf:3d:dd:74:9d:cb:22:c0:36:72:f6:c2:7b:17:48:aa:
81:19:ac:9e:fb:08:16:d6:3d:0b:35:82:ae:fb:27:bd:7f:e1:
32:76:e6:25:21:24:f6:98:49:cf:b8:9c:09:5e:61:ae:e3:e4:
e1:c2:3e:6f:b6:9f:75:a4:bb:ce:5a:be:83:1c:2d:df:f5:20:
e3:df:e8:ac:71:f2:b4:95:bd:a0:43:7d:ff:e4:a2:84:14:8f:
b3:44:37:ff:9f:3c:01:af:ef:5e:87:56:c0:53:a8:85:d8:4b:
38:c7:44:8e:94:c4:5c:7d:50:75:5c:f8:b2:74:85:45:f1:dc:
3c:a3:66:e7:c1:c7:48:d1:5c:31:9b:e5:6d:cc:50:e3:94:ba:
84:b3:b9:bd:0c:77:2a:7e:7c:5a:c5:d4:dc:37:7c:f9:b6:71:
3b:a4:8f:36:57:b7:c3:7e:6b:ec:45:7c:29:3c:0a:db:06:03:
3a:b4:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:28:59 2026 by rpki-client