Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: S1w8+X50ScirwEW+QUIUOsFstr0G1SSzZIA8In1nAa4=
Subject key identifier: 1F:CA:51:B0:6A:1C:BC:CB:C9:C2:BA:11:67:9B:00:28:0C:22:6B:D1
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019E1C7DB44CC6DC0F278589ADE0C0CCA3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1862
Signing time: Tue 12 May 2026 14:01:00 +0000
Manifest this update: Tue 12 May 2026 14:01:00 +0000
Manifest next update: Wed 13 May 2026 14:01:00 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: w00LmW9q4+AVHa//Coc9An41y1FkqDvzLH9u2CGuOLU=)
2: iNCnK1riCAEKVwhmFq2vhexQ9pk.roa (hash: yp4qo0DIiWYanDrBleb40OUwRPWMr9ZgpnS6B52GREo=)
3: yBFJbFMqqbu_jw-IuzQj64hYTkk.roa (hash: Be/MDYMq/leuNVsg2savAixZPY6XwwlfEfNgtafhrkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b4:4c:c6:dc:0f:27:85:89:ad:e0:c0:cc:a3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: May 12 14:01:00 2026 GMT
Not After : May 13 14:01:00 2026 GMT
Subject: CN=1fca51b06a1cbccbc9c2ba11679b00280c226bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:0f:8e:58:84:19:d5:b8:da:bc:b2:ed:be:
94:ed:7c:15:d5:09:ac:16:c3:d2:21:1e:6f:9d:66:
3b:9a:6d:21:8a:9c:83:db:17:4a:9d:c0:c3:60:aa:
01:0f:e6:bd:fd:78:ea:9e:a8:72:37:cd:08:5a:d2:
b9:41:f1:35:47:3d:0b:a2:38:f0:9f:6b:41:1c:e6:
c4:8b:3a:64:24:34:39:09:b1:7e:b5:6a:53:77:d4:
1d:62:90:85:ed:52:64:44:d5:64:89:cc:10:02:f7:
1e:a7:a6:0f:88:d8:d3:29:c9:d7:35:21:86:a5:85:
8f:d7:68:01:67:59:63:1f:b7:c1:04:74:e2:b6:0d:
97:36:c9:1e:86:f7:51:9d:1b:04:31:e3:1c:a3:b0:
6b:7a:a8:fd:e4:0e:de:87:0b:44:30:f8:a1:6c:89:
31:9c:e3:5a:81:5c:e8:80:11:a6:bf:b0:50:b9:ac:
4f:18:30:30:19:8a:11:38:64:ee:c8:6f:57:3d:5b:
02:1a:13:a3:79:53:d3:6b:1d:50:43:0e:02:ed:38:
3b:4c:c0:ae:39:c3:4e:5d:2f:6e:09:bb:21:fa:2b:
7b:64:25:7c:c5:87:fb:dc:e3:26:18:fa:b6:6d:a5:
00:cb:74:11:d7:a4:11:15:10:fa:b9:f8:fa:2e:a3:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:51:B0:6A:1C:BC:CB:C9:C2:BA:11:67:9B:00:28:0C:22:6B:D1
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:fb:31:bd:ba:0e:a8:89:a0:28:17:58:e1:ef:c9:c5:5b:
82:56:e4:f4:78:59:a0:2d:cc:f3:60:14:f1:63:19:ca:36:55:
ef:17:ef:3e:53:7e:59:ed:d7:05:f0:89:23:3a:e4:a5:20:35:
dd:7d:85:e9:6d:e8:cd:29:0d:32:05:66:59:42:52:70:44:d9:
35:87:1f:9a:e2:27:ea:e3:83:95:04:48:f1:91:05:ac:66:3a:
aa:75:2d:59:76:20:db:aa:e0:75:5e:a2:d8:ea:ea:da:f1:a1:
9b:a4:c3:96:f4:3a:80:f5:16:db:ca:a9:8f:cf:01:f7:b4:6d:
5d:1c:d5:24:a9:36:87:36:b0:92:77:10:fa:fd:e9:7a:c9:1b:
5b:34:6d:86:83:58:71:f9:6b:7e:b4:b7:f2:0c:53:6c:65:8b:
78:f9:02:ab:00:a5:22:db:af:86:fa:2d:c4:0f:aa:7e:91:c1:
13:53:55:7b:fd:3e:0d:28:fb:75:b1:84:2b:fe:cd:86:3a:a0:
e9:31:e9:4d:ae:41:48:bd:3d:c5:6c:a3:fa:ae:1c:c6:c9:b1:
30:da:a9:64:c7:69:40:4e:06:6d:f6:f0:94:7c:0b:21:f2:f2:
a5:8e:91:f1:47:67:3b:2c:f8:02:b3:91:5d:d1:a6:ae:1b:c4:
25:01:8d:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfbRMxtwPJ4WJreDAzKOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw
MzZmZTQwHhcNMjYwNTEyMTQwMTAwWhcNMjYwNTEzMTQwMTAwWjAzMTEwLwYDVQQD
EygxZmNhNTFiMDZhMWNiY2NiYzljMmJhMTE2NzliMDAyODBjMjI2YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UgPjliEGdW42ryy7b6U7XwV1Qms
FsPSIR5vnWY7mm0hipyD2xdKncDDYKoBD+a9/XjqnqhyN80IWtK5QfE1Rz0Lojjw
n2tBHObEizpkJDQ5CbF+tWpTd9QdYpCF7VJkRNVkicwQAvcep6YPiNjTKcnXNSGG
pYWP12gBZ1ljH7fBBHTitg2XNskehvdRnRsEMeMco7Breqj95A7ehwtEMPihbIkx
nONagVzogBGmv7BQuaxPGDAwGYoROGTuyG9XPVsCGhOjeVPTax1QQw4C7Tg7TMCu
OcNOXS9uCbsh+it7ZCV8xYf73OMmGPq2baUAy3QR16QRFRD6ufj6LqPz5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/KUbBqHLzLycK6EWebACgMImvRMB8GA1UdIwQY
MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt
MjY2ZmUyNzM3YjhmLzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm
LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv/7Mb26
DqiJoCgXWOHvycVbglbk9HhZoC3M82AU8WMZyjZV7xfvPlN+We3XBfCJIzrkpSA1
3X2F6W3ozSkNMgVmWUJScETZNYcfmuIn6uODlQRI8ZEFrGY6qnUtWXYg26rgdV6i
2Orq2vGhm6TDlvQ6gPUW28qpj88B97RtXRzVJKk2hzawkncQ+v3peskbWzRthoNY
cflrfrS38gxTbGWLePkCqwClItuvhvotxA+qfpHBE1NVe/0+DSj7dbGEK/7Nhjqg
6THpTa5BSL09xWyj+q4cxsmxMNqpZMdpQE4GbfbwlHwLIfLypY6R8UdnOyz4ArOR
XdGmrhvEJQGNzA==
-----END CERTIFICATE-----
Generated at Tue May 12 23:04:53 2026 by rpki-client