Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: vLJCfzQei0q2UJ3w1PFEAirdn47dwmDQV1i+0zjFpNY=
Subject key identifier: 6D:9C:EA:51:9D:B5:42:2E:9A:E5:E2:1F:FD:3E:24:C9:A9:A4:77:7E
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019D284D67A1ADD8A5B9D283B25FCF3B9DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 17E3
Signing time: Thu 26 Mar 2026 04:00:54 +0000
Manifest this update: Thu 26 Mar 2026 04:00:54 +0000
Manifest next update: Fri 27 Mar 2026 04:00:54 +0000
Files and hashes: 1: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: NgcXptWZhocFjY8LR8zqsULciyeJgfbaV4cb7btm/Ro=)
2: NBjeVpa5jOcLpNqJCtC8vrZGnW0.roa (hash: prtuEAhteJnyPtEN60rHKuUcM2dOiBz2oKoaK+ZKr2g=)
3: hoPfu4vQl1LbfxuREgOD1eCCNGs.roa (hash: hc7so0LQYU8sxZCxb5wNZJ1X+oWMevqkrEqrG75cW/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:67:a1:ad:d8:a5:b9:d2:83:b2:5f:cf:3b:9d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Mar 26 04:00:54 2026 GMT
Not After : Mar 27 04:00:54 2026 GMT
Subject: CN=6d9cea519db5422e9ae5e21ffd3e24c9a9a4777e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:06:a0:40:05:9f:17:aa:51:d7:3c:8a:3c:
86:bb:e9:0a:9b:c2:a6:58:f2:91:d7:ab:ff:4e:14:
fe:eb:81:b5:3f:52:b6:b9:7e:03:53:bc:a5:8d:5e:
24:da:05:fb:0b:40:cc:94:a4:16:a0:2c:0a:de:a9:
73:32:fa:11:28:66:74:02:2b:f2:8d:54:4f:af:3e:
0c:c2:3b:7c:ba:a7:2b:2c:74:0c:0f:27:15:de:94:
e5:21:b1:5f:e1:c5:52:a1:81:1b:d0:da:d5:f6:34:
cf:7b:4a:01:19:6f:e5:2e:aa:8b:1b:7b:6c:c4:50:
32:ee:02:4f:86:b8:1a:1f:8e:b2:5e:ab:c7:5d:c2:
e8:3d:20:ba:d9:c1:28:6f:e1:c7:2f:2e:ba:0a:0b:
3c:dd:ed:bd:d9:d1:58:41:da:97:db:66:be:a8:1c:
f4:c8:d6:67:d1:fb:56:52:d9:88:8f:61:4a:78:67:
ad:9b:f5:7f:78:06:7e:d9:31:1d:e0:0b:50:75:74:
8d:0f:71:c8:cb:f2:29:6e:6c:9d:fd:d2:ac:2b:31:
78:01:8e:80:99:56:2f:85:b7:74:76:df:ab:89:42:
57:da:05:71:fe:8b:5b:54:ca:73:f1:b1:f1:32:dc:
7e:dd:2a:b5:b0:13:c1:b5:d8:86:5e:65:86:e0:c9:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:EA:51:9D:B5:42:2E:9A:E5:E2:1F:FD:3E:24:C9:A9:A4:77:7E
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:fe:f4:e7:c7:20:9a:92:2e:6e:be:d0:93:c2:3d:b0:43:
79:03:69:65:a4:8e:aa:54:13:1a:f5:5f:f5:11:9f:6a:ce:34:
5f:7a:91:54:6e:c5:75:83:42:18:21:de:c0:65:be:6b:51:aa:
95:a6:15:23:dd:21:72:d2:e4:a6:cb:ef:00:e4:01:46:f9:38:
6d:55:75:c7:07:36:33:85:b9:69:6d:94:4c:0a:84:0a:11:49:
0b:38:11:a6:fa:34:51:53:90:16:1c:66:97:d5:00:d1:29:21:
7a:e8:00:37:72:c6:fd:6a:b7:41:8d:00:5c:18:d5:84:00:d8:
17:d2:f5:32:d5:f6:39:98:d3:66:40:23:5f:f3:bc:e7:34:d3:
68:63:d4:8a:09:e6:c1:4d:23:99:97:f9:e6:74:e0:c1:96:32:
c6:07:d0:d1:9f:23:d4:d9:d5:93:91:06:da:08:5b:09:d4:ca:
9f:50:06:7c:a3:78:8f:43:ec:40:cd:63:44:80:c2:4b:5d:6b:
c6:a2:a2:a4:02:13:40:38:39:02:8f:aa:c3:d3:10:c1:27:2f:
dd:3e:ce:01:63:6c:53:70:96:0a:14:01:c3:5f:d0:64:91:70:
62:5e:b2:c0:8e:29:0f:af:cb:b3:15:93:39:a5:52:98:d6:b1:
06:23:76:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTWehrdiludKDsl/PO52hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw
MzZmZTQwHhcNMjYwMzI2MDQwMDU0WhcNMjYwMzI3MDQwMDU0WjAzMTEwLwYDVQQD
Eyg2ZDljZWE1MTlkYjU0MjJlOWFlNWUyMWZmZDNlMjRjOWE5YTQ3NzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUIGoEAFnxeqUdc8ijyGu+kKm8Km
WPKR16v/ThT+64G1P1K2uX4DU7yljV4k2gX7C0DMlKQWoCwK3qlzMvoRKGZ0Aivy
jVRPrz4Mwjt8uqcrLHQMDycV3pTlIbFf4cVSoYEb0NrV9jTPe0oBGW/lLqqLG3ts
xFAy7gJPhrgaH46yXqvHXcLoPSC62cEob+HHLy66Cgs83e292dFYQdqX22a+qBz0
yNZn0ftWUtmIj2FKeGetm/V/eAZ+2TEd4AtQdXSND3HIy/Ipbmyd/dKsKzF4AY6A
mVYvhbd0dt+riUJX2gVx/otbVMpz8bHxMtx+3Sq1sBPBtdiGXmWG4Mm8vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2c6lGdtUIumuXiH/0+JMmppHd+MB8GA1UdIwQY
MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt
MjY2ZmUyNzM3YjhmLzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm
LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsD+9OfH
IJqSLm6+0JPCPbBDeQNpZaSOqlQTGvVf9RGfas40X3qRVG7FdYNCGCHewGW+a1Gq
laYVI90hctLkpsvvAOQBRvk4bVV1xwc2M4W5aW2UTAqEChFJCzgRpvo0UVOQFhxm
l9UA0SkheugAN3LG/Wq3QY0AXBjVhADYF9L1MtX2OZjTZkAjX/O85zTTaGPUignm
wU0jmZf55nTgwZYyxgfQ0Z8j1NnVk5EG2ghbCdTKn1AGfKN4j0PsQM1jRIDCS11r
xqKipAITQDg5Ao+qw9MQwScv3T7OAWNsU3CWChQBw1/QZJFwYl6ywI4pD6/LsxWT
OaVSmNaxBiN2SA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:05 2026 by rpki-client