Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: aYZ4VgxSSpOZBw/XsUNahvKWW1uTlEf2TRc8yFjH78M=
Subject key identifier: 6C:26:A7:1C:A1:4B:BF:04:EE:F3:50:A8:64:D8:02:04:6D:64:20:12
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019DA3E5EFEB512E0B34EF21FE26AB4CF494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1823
Signing time: Sun 19 Apr 2026 04:00:48 +0000
Manifest this update: Sun 19 Apr 2026 04:00:48 +0000
Manifest next update: Mon 20 Apr 2026 04:00:48 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: QH1MjJ4Ei1siL5bXeTDJRk7/mHWbnEeCSXGq0/LUj9Y=)
2: NBjeVpa5jOcLpNqJCtC8vrZGnW0.roa (hash: prtuEAhteJnyPtEN60rHKuUcM2dOiBz2oKoaK+ZKr2g=)
3: hoPfu4vQl1LbfxuREgOD1eCCNGs.roa (hash: hc7so0LQYU8sxZCxb5wNZJ1X+oWMevqkrEqrG75cW/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:ef:eb:51:2e:0b:34:ef:21:fe:26:ab:4c:f4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Apr 19 04:00:48 2026 GMT
Not After : Apr 20 04:00:48 2026 GMT
Subject: CN=6c26a71ca14bbf04eef350a864d802046d642012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:15:b6:43:05:a4:71:91:22:6f:9b:99:9b:
28:fa:36:8f:59:b4:c0:74:f9:f4:8f:40:00:ee:05:
ad:de:ab:fb:62:24:20:5c:16:a1:4b:7c:7b:8c:79:
58:ab:f3:89:4c:6f:e0:06:c4:4f:9f:58:77:b3:fa:
79:a2:da:df:94:cb:5a:a8:bc:93:cc:59:9b:d0:55:
f1:14:cc:4a:74:60:04:7b:21:1a:8c:e9:fa:b7:9c:
21:f6:c7:31:f9:19:e2:8b:2b:0c:14:56:6d:ee:f2:
e1:88:ea:72:9e:d9:56:99:93:65:c8:61:0a:31:fe:
82:7d:cd:0d:11:7c:44:35:db:b8:6c:eb:52:b5:7f:
f7:e2:27:86:32:5c:23:30:8c:cd:3b:84:56:90:3f:
b3:2c:36:af:8a:e2:aa:75:00:9f:ed:3a:67:34:65:
e1:13:b7:88:6a:a3:08:2d:3f:38:b3:cf:6d:e6:a5:
c0:4b:26:63:57:72:66:4f:d6:07:92:a2:12:a1:7d:
27:23:90:92:72:a4:75:9a:1f:7d:b8:0c:29:4f:e2:
ce:5d:23:ae:44:25:39:cc:af:9f:e0:8b:36:3a:1d:
8e:44:57:c8:da:cc:b5:61:41:b9:8c:99:03:c9:7f:
d9:a6:f2:cd:aa:11:9a:0c:c8:27:a8:0c:04:a5:17:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:A7:1C:A1:4B:BF:04:EE:F3:50:A8:64:D8:02:04:6D:64:20:12
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e1:f2:46:a3:7e:f7:ae:e2:4c:83:f3:dd:d6:8d:b7:54:2b:
2f:82:82:0f:2d:23:b0:56:95:92:37:96:87:e3:82:5b:ab:a6:
98:aa:71:7d:30:ae:cc:28:ca:75:23:3b:d7:7e:74:0e:2e:f5:
a5:99:9a:a2:9c:8b:a0:0c:5a:9a:0b:00:01:44:0b:00:bb:db:
02:ee:8a:a4:11:29:02:42:ca:6a:99:12:66:47:18:f6:98:ff:
00:d5:b1:e9:a5:5f:a2:67:48:87:2d:0a:1f:11:66:a8:c9:f0:
89:48:9c:34:8d:1a:23:af:82:59:e4:e9:30:8e:cd:d9:4c:80:
22:d8:67:50:1a:dd:8f:0a:2d:53:f9:e3:3d:44:ee:e1:bc:6f:
3e:15:f1:0d:ce:f7:84:2f:91:f8:2b:08:97:dd:0a:f7:d7:d2:
53:36:d8:0c:fb:c7:d9:cc:1f:0e:dc:14:45:5d:2f:db:45:0b:
ff:8b:75:ab:17:f3:fc:18:e3:14:ae:22:16:b3:63:44:6b:1a:
68:77:e1:b2:47:42:19:ee:5b:36:75:a8:fd:4d:33:34:bb:5b:
d8:f4:15:b5:14:5a:49:22:99:08:1c:3b:9e:b9:e8:ed:64:8f:
7d:c4:9c:00:d8:c7:79:16:69:62:78:49:0a:71:49:cc:39:1a:
71:10:9d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5e/rUS4LNO8h/iarTPSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw
MzZmZTQwHhcNMjYwNDE5MDQwMDQ4WhcNMjYwNDIwMDQwMDQ4WjAzMTEwLwYDVQQD
Eyg2YzI2YTcxY2ExNGJiZjA0ZWVmMzUwYTg2NGQ4MDIwNDZkNjQyMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX0VtkMFpHGRIm+bmZso+jaPWbTA
dPn0j0AA7gWt3qv7YiQgXBahS3x7jHlYq/OJTG/gBsRPn1h3s/p5otrflMtaqLyT
zFmb0FXxFMxKdGAEeyEajOn6t5wh9scx+RniiysMFFZt7vLhiOpyntlWmZNlyGEK
Mf6Cfc0NEXxENdu4bOtStX/34ieGMlwjMIzNO4RWkD+zLDaviuKqdQCf7TpnNGXh
E7eIaqMILT84s89t5qXASyZjV3JmT9YHkqISoX0nI5CScqR1mh99uAwpT+LOXSOu
RCU5zK+f4Is2Oh2ORFfI2sy1YUG5jJkDyX/ZpvLNqhGaDMgnqAwEpRdd8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwmpxyhS78E7vNQqGTYAgRtZCASMB8GA1UdIwQY
MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt
MjY2ZmUyNzM3YjhmLzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm
LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+HyRqN+
967iTIPz3daNt1QrL4KCDy0jsFaVkjeWh+OCW6ummKpxfTCuzCjKdSM71350Di71
pZmaopyLoAxamgsAAUQLALvbAu6KpBEpAkLKapkSZkcY9pj/ANWx6aVfomdIhy0K
HxFmqMnwiUicNI0aI6+CWeTpMI7N2UyAIthnUBrdjwotU/njPUTu4bxvPhXxDc73
hC+R+CsIl90K99fSUzbYDPvH2cwfDtwURV0v20UL/4t1qxfz/BjjFK4iFrNjRGsa
aHfhskdCGe5bNnWo/U0zNLtb2PQVtRRaSSKZCBw7nrno7WSPfcScANjHeRZpYnhJ
CnFJzDkacRCdgQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:26:35 2026 by rpki-client