Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: Q2jkiODaEGsgGY/pOCbLSbTrd8817p5g7KtIPrVobIs=
Subject key identifier: EF:F4:14:06:B8:CB:ED:97:2E:AA:CF:24:1B:C1:42:9E:EA:54:2A:C6
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019FA899E29FC770529A2D5DEC30F1CF3AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1931
Signing time: Tue 28 Jul 2026 12:01:25 +0000
Manifest this update: Tue 28 Jul 2026 12:01:25 +0000
Manifest next update: Wed 29 Jul 2026 12:01:25 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: 2g+IX9IkSI7f7LLysTrzYpHiToP0lDxFm8e9L9M9Md4=)
2: Hy1oimMyF0Zt5iOfTysR98UwmJw.roa (hash: 3j1La9nRMgrYx/fT0pGAqCAKJB3oozRUXaRVUYYxePo=)
3: iNCnK1riCAEKVwhmFq2vhexQ9pk.roa (hash: yp4qo0DIiWYanDrBleb40OUwRPWMr9ZgpnS6B52GREo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:e2:9f:c7:70:52:9a:2d:5d:ec:30:f1:cf:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jul 28 12:01:25 2026 GMT
Not After : Jul 29 12:01:25 2026 GMT
Subject: CN=eff41406b8cbed972eaacf241bc1429eea542ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:63:63:3f:a4:a4:4d:57:e1:19:8c:a5:13:
01:ba:16:88:33:05:ab:6e:60:16:01:7d:2a:4f:6a:
07:a4:be:be:c4:a5:7c:c1:a6:2a:4c:91:ba:1c:30:
3a:f5:30:2e:d2:29:44:4c:aa:10:06:b4:47:60:ad:
3e:c6:00:e7:bc:1c:bb:30:a5:30:55:fd:63:c6:07:
6f:87:21:9c:8a:f5:4f:49:4e:e4:70:dc:15:1f:49:
d5:40:49:d4:7d:3b:44:66:66:ac:47:6d:2f:bd:e1:
14:85:eb:70:70:01:10:1c:41:79:13:ef:08:78:15:
31:d6:9d:ce:c4:32:69:a9:d3:e4:5d:c7:f4:69:f1:
db:21:41:44:9b:27:d9:9a:45:26:7f:26:39:16:3f:
4b:5c:cb:69:8a:e8:5c:b7:20:19:ae:ca:f0:b1:05:
7d:b7:13:09:d2:5b:f4:f9:5b:98:4f:c1:f4:de:5d:
aa:5f:21:fe:97:06:ba:6e:5c:44:7b:b6:da:4b:1f:
2f:c0:20:f8:19:fe:92:76:40:0e:84:d3:38:e4:e2:
29:bb:aa:b2:4e:48:8c:bc:17:c7:b0:ca:d8:b9:48:
b5:50:9a:7a:35:69:22:25:ca:20:81:b5:7c:9a:62:
81:c7:be:d8:a7:0e:ef:51:31:8e:a2:bd:12:35:15:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:14:06:B8:CB:ED:97:2E:AA:CF:24:1B:C1:42:9E:EA:54:2A:C6
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:5e:3e:39:8d:59:ef:05:1a:4a:25:8f:cb:77:0d:98:ce:
1a:28:7f:21:f7:83:4d:6c:75:6f:3a:d8:1c:d6:05:2d:5d:88:
a0:e1:08:76:24:5f:6f:ad:7c:69:22:9a:be:f1:97:71:14:3b:
83:6c:df:e5:54:25:76:96:5f:03:77:8a:bf:17:aa:74:c9:30:
c6:b0:2b:a6:8d:aa:ed:f9:47:e3:7d:4d:d0:ca:f0:63:6b:46:
71:12:c7:7b:ad:e5:67:ec:16:b9:7f:a3:07:f1:92:2a:96:ec:
e1:5a:09:fc:bc:8d:7a:d9:a0:21:05:e7:01:b0:87:d3:88:1f:
78:4c:2b:68:c9:54:8b:71:3f:54:96:43:c0:84:92:89:e6:dc:
48:94:a1:88:34:36:78:82:a8:c9:8c:b1:3f:df:cf:b7:da:63:
89:0b:25:0a:64:2f:41:d9:79:cc:49:eb:3e:a2:57:4f:ab:3b:
25:2c:d6:56:45:fe:c6:6a:57:75:b9:d3:9b:5e:2a:d4:1d:68:
82:02:08:e5:e4:16:a4:86:9d:5e:cd:53:7c:9d:0b:db:1e:e9:
c5:4c:1d:21:3a:ee:7b:5e:f3:a0:af:0e:c9:38:db:aa:d3:0b:
e9:a1:b9:2c:ce:d0:d6:49:74:2b:70:aa:85:10:fb:73:47:9d:
43:c8:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:38 2026 by rpki-client