Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: dLTZYOVQFaQ/C1ZakkAMwSqQmbloEKe7ngQq7GWiBsY=
Subject key identifier: A4:97:5F:41:EA:2C:A9:E4:B5:B8:3F:92:D6:11:4A:60:7C:2E:6D:8B
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019CACB4C1F42DF7EF40661DD604864E0567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 1589
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: 0B7667UZVQK8iVL+5HyjXQc6qJD6MMrmtTORCDSwSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c1:f4:2d:f7:ef:40:66:1d:d6:04:86:4e:05:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=a4975f41ea2ca9e4b5b83f92d6114a607c2e6d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:48:83:77:9d:54:c2:d6:e6:19:6f:3f:08:
7e:7c:b9:8f:72:c9:36:22:22:49:61:d0:84:5c:41:
e2:04:2f:76:c9:99:36:40:7a:0b:71:42:f7:51:90:
49:49:71:75:57:4d:2a:62:bf:0c:8f:bb:99:1a:02:
f5:25:eb:d6:32:cc:2b:29:e1:bd:90:96:00:b8:76:
a5:65:b2:5c:e1:f7:38:f5:bd:b6:bd:10:ce:52:fd:
f7:90:7f:7a:91:23:9a:29:ee:cd:4b:3d:0e:be:0a:
63:83:b0:f1:a8:c4:7b:13:e5:f9:c0:1e:e1:74:73:
61:8a:b7:97:1b:7a:45:01:67:1d:7c:09:f9:d3:50:
db:44:8a:b2:f6:11:fe:22:f5:07:e1:ed:5f:cb:81:
b2:4a:c3:c2:76:c0:51:ee:5c:1e:2c:1a:9a:79:57:
60:e6:a0:a3:65:b9:d9:4d:15:5b:ee:41:d2:d7:39:
fe:d4:2b:44:7f:69:36:8a:8e:63:d1:d5:28:27:0e:
95:9f:28:cf:38:3c:67:1e:a9:67:3c:c1:2d:ad:72:
ab:ae:ae:da:40:84:5a:f9:d6:a9:0d:dd:e0:36:f0:
05:4f:2b:fb:9e:54:64:24:94:b2:64:66:11:e4:c3:
d0:fe:e1:57:53:2b:72:14:a5:5e:bd:5c:c0:50:ba:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:97:5F:41:EA:2C:A9:E4:B5:B8:3F:92:D6:11:4A:60:7C:2E:6D:8B
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:83:82:cb:8e:f2:62:1c:ea:22:6c:7f:b3:70:ae:92:28:
ff:26:84:31:6b:02:70:7d:89:d6:ea:23:7f:41:d2:21:fd:d2:
d8:d2:1e:0c:87:2f:26:8b:0c:10:95:9e:64:46:cd:79:a5:01:
52:e4:e3:2b:b5:be:39:45:81:3c:0e:83:eb:11:0e:35:09:27:
52:4e:3e:bc:bc:da:6e:db:19:6b:cd:29:0c:5d:e5:16:43:0d:
c3:81:19:9b:90:ee:e5:e4:6f:79:4d:b3:9d:12:80:f0:2c:8b:
fd:7c:ce:06:10:f1:1f:f1:1a:1a:28:34:a7:f5:37:02:79:d2:
b7:27:92:03:8f:f8:41:02:e6:1e:33:73:3f:bd:26:c5:96:65:
62:d2:fc:ed:70:f3:a0:c4:b7:18:25:4c:62:ec:84:26:38:63:
05:c8:ac:87:34:69:5f:a9:7f:dc:46:ee:13:97:eb:82:31:76:
df:04:22:90:3e:32:91:f0:1e:d0:45:2e:17:71:ee:04:94:26:
ae:0f:ac:b4:f8:5b:7c:69:78:9d:d1:9a:b4:e2:59:54:24:26:
2d:08:45:9d:c8:8a:c3:8a:94:98:64:95:5f:c1:67:aa:68:a7:
aa:12:5f:0f:0f:e7:da:da:06:d7:c8:a3:ee:6a:09:2c:44:77:
77:fa:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:33 2026 by rpki-client