Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: 7q3NjNE8Km/GpV2tzK4v1RxlsDHlKcOH4rYloLCGqYs=
Subject key identifier: 15:3B:52:9C:6A:C8:DD:37:A8:51:BF:8B:CA:01:F1:25:13:33:6D:B3
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 01A0CE2449EFB0A019F52910A0FFBF493785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 19C9
Signing time: Wed 23 Sep 2026 12:01:19 +0000
Manifest this update: Wed 23 Sep 2026 12:01:19 +0000
Manifest next update: Thu 24 Sep 2026 12:01:19 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: Aod8kn+CuN4BhvLhv3VlKI/XXReyivdPDvXPRA4QfFM=)
2: Hy1oimMyF0Zt5iOfTysR98UwmJw.roa (hash: 3j1La9nRMgrYx/fT0pGAqCAKJB3oozRUXaRVUYYxePo=)
3: iNCnK1riCAEKVwhmFq2vhexQ9pk.roa (hash: yp4qo0DIiWYanDrBleb40OUwRPWMr9ZgpnS6B52GREo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:49:ef:b0:a0:19:f5:29:10:a0:ff:bf:49:37:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Sep 23 12:01:19 2026 GMT
Not After : Sep 24 12:01:19 2026 GMT
Subject: CN=153b529c6ac8dd37a851bf8bca01f12513336db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:bd:67:15:f6:26:a6:f9:1f:8e:6b:34:70:
e7:47:61:7e:bb:e2:63:a8:4e:67:77:72:ca:0d:25:
a9:88:ad:43:e2:37:7f:71:fe:e4:e7:ed:3a:e8:c5:
ff:91:bd:53:ec:bc:b5:00:d7:e7:5b:bb:69:c9:0d:
e5:64:70:6a:b6:cc:23:9d:54:00:74:b1:28:25:5e:
78:c3:32:51:38:4b:9d:56:32:b2:d0:45:f2:7b:dd:
ce:29:22:04:b7:f3:44:73:ee:2f:06:c1:ee:94:85:
c3:f6:cd:37:9f:58:03:41:20:5f:8a:63:88:85:30:
35:9c:26:36:86:cf:5f:5b:be:e9:93:24:80:72:2d:
05:7c:3f:31:3f:33:57:3d:87:a3:a4:c9:09:8f:cf:
0a:58:3f:60:6c:34:43:a6:be:61:fd:d9:41:ba:36:
43:a5:57:f4:e7:fd:1c:b3:eb:f6:95:5b:9c:d3:68:
3b:4e:25:62:ca:24:85:f5:b4:f8:11:3a:f3:22:7e:
6e:e5:3e:1b:cc:9b:da:2e:a2:1b:37:59:3d:fe:9b:
80:98:1d:66:8a:98:49:6d:f8:e8:9d:bf:01:a9:02:
1c:e4:18:2c:d0:c1:ba:85:00:e3:9b:66:c4:c0:c5:
9e:c7:f6:96:5f:e6:e4:24:f0:e5:8a:b4:34:1d:c8:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3B:52:9C:6A:C8:DD:37:A8:51:BF:8B:CA:01:F1:25:13:33:6D:B3
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:94:66:5e:15:02:27:95:e2:f2:c9:27:5e:f0:bf:c7:82:7f:
cf:5f:42:74:b5:21:60:31:6c:22:37:f8:cd:d4:f5:89:29:4d:
4b:29:43:78:40:87:d8:3d:6d:58:85:20:77:0f:46:d5:b7:1a:
a4:3f:1b:db:c4:1a:22:32:61:82:d9:3c:ba:63:4e:19:53:5a:
50:e1:0e:6a:83:04:cc:0e:9e:b2:44:26:4f:11:24:95:fc:55:
12:ae:23:a8:c0:b4:94:58:91:68:0d:ac:a2:5b:46:72:6f:6e:
6f:0f:c9:4d:d1:7d:8d:88:82:52:7f:1f:1a:e3:78:c0:8d:39:
d3:9a:d9:6b:16:2e:46:4b:2d:d0:c2:78:ea:ae:18:26:10:bf:
6f:22:2a:9d:8d:67:57:df:fb:16:31:58:6d:6c:ae:69:87:b0:
2b:a8:04:ed:2c:7e:24:b1:9f:7f:24:96:81:5f:2f:7b:49:8d:
55:f8:9e:d1:84:40:8a:57:7b:51:12:f8:7d:6d:09:4f:b1:a6:
19:ed:b3:10:5f:35:61:9f:b1:6d:39:04:8a:4b:c0:57:c1:92:
c9:e2:2a:68:98:f4:78:16:3c:db:a2:dc:77:3b:8c:65:b4:3f:
76:c5:92:1e:e4:5c:b9:a2:41:f3:6b:f5:03:8d:b3:38:02:ed:
e1:3d:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:04:07 2026 by rpki-client