Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: QYQBcHgFN7xcdVaSfXTorcDncdDvyzV8I7vYxdOBjjc=
Subject key identifier: 8A:7C:B1:81:76:27:66:C8:00:F6:77:BC:C9:DF:13:2E:C5:A9:61:17
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019F916D4BC001C084B34136E816C32C655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1925
Signing time: Fri 24 Jul 2026 00:01:26 +0000
Manifest this update: Fri 24 Jul 2026 00:01:26 +0000
Manifest next update: Sat 25 Jul 2026 00:01:26 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: Kqo4NPvNuIoXMNmlPSnadUGzSDh5WCveI5WjF137QJs=)
2: Hy1oimMyF0Zt5iOfTysR98UwmJw.roa (hash: 3j1La9nRMgrYx/fT0pGAqCAKJB3oozRUXaRVUYYxePo=)
3: iNCnK1riCAEKVwhmFq2vhexQ9pk.roa (hash: yp4qo0DIiWYanDrBleb40OUwRPWMr9ZgpnS6B52GREo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:4b:c0:01:c0:84:b3:41:36:e8:16:c3:2c:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jul 24 00:01:26 2026 GMT
Not After : Jul 25 00:01:26 2026 GMT
Subject: CN=8a7cb181762766c800f677bcc9df132ec5a96117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:59:6d:47:40:c0:d9:9e:e3:0e:27:81:0e:
b6:5d:67:ac:09:4a:10:68:2e:ac:77:d9:f3:eb:4f:
15:b7:ac:2b:f2:60:5d:7a:41:02:63:19:b3:d8:34:
21:5e:b1:c7:07:7f:4e:1e:e8:03:73:d5:da:b7:d1:
8e:fb:33:eb:62:b8:b2:ff:6b:09:f7:ce:f5:aa:3d:
ec:b0:ae:4f:ba:29:0c:1c:5f:51:b9:16:36:bd:97:
e2:1b:45:c3:4d:b1:a2:36:58:6f:a1:ef:8a:88:cc:
9a:41:ac:1f:d8:43:8e:4c:1f:fa:c0:0f:3a:7e:df:
aa:a0:6b:54:98:38:73:54:20:fd:d0:ac:fb:10:23:
c7:88:ae:50:d7:5f:2a:6f:0e:a3:46:1a:9d:d4:a6:
42:a2:aa:76:3e:ce:38:93:0f:52:98:dc:81:ea:00:
84:9d:75:50:fc:1e:cd:11:60:0d:1d:a0:13:b6:77:
bd:56:d8:d7:ac:cf:bd:4e:88:ad:e8:c3:f1:51:46:
77:4a:83:0a:2c:f4:28:ae:d9:aa:f9:42:d0:b0:bb:
ff:21:dc:f7:7a:89:84:9b:f3:04:f3:e2:7a:0c:0e:
1e:cb:21:9e:41:95:45:4d:4d:ce:63:bb:14:62:9e:
6e:b8:b5:27:ce:c9:72:5e:c0:10:52:bf:ba:61:43:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7C:B1:81:76:27:66:C8:00:F6:77:BC:C9:DF:13:2E:C5:A9:61:17
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d4:88:b3:d3:bd:fa:82:4e:ed:b1:a3:c3:b7:5b:1c:a6:66:
4b:64:65:21:ea:91:bc:1a:6d:2f:0d:a9:50:27:87:6a:e2:cb:
0f:74:c2:0f:57:be:4d:10:69:7c:16:11:9e:2f:ae:95:1e:fe:
da:ab:2b:dc:42:5e:d2:2c:04:a8:df:f9:ca:81:17:f9:f4:48:
18:cc:46:a1:f7:67:2b:70:86:26:65:84:b8:6b:a5:6b:6a:4d:
87:11:13:4c:5a:11:a9:42:e7:0c:ce:0e:99:00:ba:2c:c8:ea:
c9:b0:30:fa:ca:90:24:de:60:a0:23:bf:4a:7b:67:40:62:39:
a3:ef:1a:1a:c1:a0:9f:1a:70:f1:9b:f7:df:e3:62:30:5b:d6:
17:66:0a:71:b3:1e:e0:8d:18:aa:69:09:54:27:46:e1:5b:ce:
0d:e2:3b:d9:f2:a9:0d:9e:3c:23:92:33:25:46:e6:24:c8:b3:
f9:9c:87:57:e9:5d:e2:d2:01:7c:ac:c9:f2:7f:73:44:f9:3b:
db:49:05:b0:8d:4b:03:3e:9b:8e:9e:fa:1b:73:f8:96:5e:5c:
ec:4c:57:ac:1f:1a:04:be:67:ec:9e:94:cf:3c:fb:ac:ed:a9:
f7:e8:f8:34:6d:d1:c4:92:55:82:54:f3:a9:2e:0f:fa:04:9c:
7b:09:cf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:11 2026 by rpki-client