Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: Nw84R9f19o0ZN1PsyaRuBUArG7MQhAL1lukGR6fr4XI=
Subject key identifier: 2F:25:09:EA:41:0F:D5:43:A6:DD:1E:69:BE:24:AF:89:AD:1F:F4:6F
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 01A123F86751BFA2A427AFE46F1A5960CE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 17D9
Signing time: Sat 10 Oct 2026 04:00:44 +0000
Manifest this update: Sat 10 Oct 2026 04:00:44 +0000
Manifest next update: Sun 11 Oct 2026 04:00:44 +0000
Files and hashes: 1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: SpfpjayiK7dFc4ES1FR4QyyxH6KcwxONBC3iUdQPjBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:67:51:bf:a2:a4:27:af:e4:6f:1a:59:60:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Oct 10 04:00:44 2026 GMT
Not After : Oct 11 04:00:44 2026 GMT
Subject: CN=2f2509ea410fd543a6dd1e69be24af89ad1ff46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:c9:e4:cb:3b:2a:7e:31:09:78:28:74:36:
a3:8b:8d:ab:db:b9:ad:19:38:10:7e:1c:2a:fa:79:
bd:0e:1f:41:62:48:2b:78:b7:73:90:1a:24:94:ba:
87:d1:f9:67:dd:6e:18:6a:24:13:b3:c2:b9:2d:66:
b7:da:da:c3:06:21:7e:6d:a5:10:c8:85:1a:dd:84:
11:5f:25:a3:ff:46:64:0f:60:32:51:c1:3f:1e:53:
90:bf:7a:5f:35:02:bb:57:09:db:70:5c:83:65:ee:
25:89:1c:4d:e6:5f:4c:4a:ba:96:ee:12:de:b7:9c:
fc:de:29:d9:cc:17:83:4c:f2:46:fe:6c:83:49:ad:
c1:e9:4a:91:83:37:45:0c:57:11:a5:3e:c7:41:24:
0a:02:33:ee:15:2d:03:fb:06:4a:c7:8a:bf:98:ad:
17:32:95:d3:78:e5:8b:2c:23:3c:8f:3a:17:a4:09:
72:9e:46:27:97:54:6d:8e:d5:c6:f5:26:34:b1:69:
df:2e:8a:df:39:e9:de:b5:fd:1e:bd:ea:a8:2b:f4:
0d:fb:06:22:e4:9b:53:ee:6e:27:c1:05:37:36:3b:
9d:da:c7:c5:16:6b:72:df:50:b0:77:4a:54:3a:e9:
e7:38:d8:b6:2c:b0:a1:9f:60:46:f2:47:f7:ac:8e:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:09:EA:41:0F:D5:43:A6:DD:1E:69:BE:24:AF:89:AD:1F:F4:6F
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0c:2f:d8:6e:32:a3:1c:26:37:4c:f7:ef:6e:07:93:5b:6c:
9d:59:fe:9f:d4:c5:34:de:0d:e2:fa:56:99:4d:c5:72:44:c5:
1b:c6:5b:44:00:07:2e:91:d5:bf:37:df:70:95:08:a4:d9:39:
b0:81:59:0d:25:97:39:2b:97:ff:04:25:fb:39:51:ee:8a:1f:
c9:44:74:39:80:d8:61:7c:d5:d4:18:6c:93:16:47:e9:3f:61:
be:ad:0d:76:73:ff:5d:c5:90:3f:07:cf:44:ca:85:f6:46:ae:
55:79:26:84:0f:5d:73:55:3c:ea:c8:a2:8d:83:a6:d2:05:42:
02:73:a1:99:ae:38:52:99:0b:aa:b0:5c:e5:af:5a:b2:3d:fa:
1e:9d:9a:62:66:e3:54:fa:6f:85:e2:89:71:d9:27:c7:b0:5d:
4d:e0:aa:ff:7a:f5:4a:67:c0:03:96:68:94:55:13:66:8c:ab:
c8:25:d6:31:bb:e6:99:01:67:47:18:83:86:88:0a:ba:05:af:
34:19:6c:e0:5a:e2:70:fb:e7:7e:ff:ea:45:09:32:a9:81:2c:
3a:95:fd:bb:f0:4c:c0:e5:5d:ee:07:76:92:89:86:b6:6e:74:
fb:61:08:5f:d6:dc:e1:1a:6b:ed:81:10:7c:4c:45:03:fd:d2:
ff:3a:c7:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEj+GdRv6KkJ6/kbxpZYM6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz
ZmZmOTYwHhcNMjYxMDEwMDQwMDQ0WhcNMjYxMDExMDQwMDQ0WjAzMTEwLwYDVQQD
EygyZjI1MDllYTQxMGZkNTQzYTZkZDFlNjliZTI0YWY4OWFkMWZmNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHJ5Ms7Kn4xCXgodDaji42r27mt
GTgQfhwq+nm9Dh9BYkgreLdzkBoklLqH0fln3W4YaiQTs8K5LWa32trDBiF+baUQ
yIUa3YQRXyWj/0ZkD2AyUcE/HlOQv3pfNQK7VwnbcFyDZe4liRxN5l9MSrqW7hLe
t5z83inZzBeDTPJG/myDSa3B6UqRgzdFDFcRpT7HQSQKAjPuFS0D+wZKx4q/mK0X
MpXTeOWLLCM8jzoXpAlynkYnl1RtjtXG9SY0sWnfLorfOenetf0eveqoK/QN+wYi
5JtT7m4nwQU3Njud2sfFFmty31Cwd0pUOunnONi2LLChn2BG8kf3rI4KRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8lCepBD9VDpt0eab4kr4mtH/RvMB8GA1UdIwQY
MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt
ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy
LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQwv2G4y
oxwmN0z3724Hk1tsnVn+n9TFNN4N4vpWmU3FckTFG8ZbRAAHLpHVvzffcJUIpNk5
sIFZDSWXOSuX/wQl+zlR7oofyUR0OYDYYXzV1BhskxZH6T9hvq0NdnP/XcWQPwfP
RMqF9kauVXkmhA9dc1U86siijYOm0gVCAnOhma44UpkLqrBc5a9asj36Hp2aYmbj
VPpvheKJcdknx7BdTeCq/3r1SmfAA5ZolFUTZoyryCXWMbvmmQFnRxiDhogKugWv
NBls4FricPvnfv/qRQkyqYEsOpX9u/BMwOVd7gd2komGtm50+2EIX9bc4Rpr7YEQ
fExFA/3S/zrHQA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:20:55 2026 by rpki-client