Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: TpMS7v5f0tGlIwUKONDrNeqbRI9ZCClBKk5O0l4f20M=
Subject key identifier: 01:CB:CE:C6:66:E9:AE:95:A1:7A:0D:A3:AA:7C:DF:BB:13:E8:F4:22
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019CAEA36ED27C66B50A54765D3BB141DC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 158A
Signing time: Mon 02 Mar 2026 13:01:12 +0000
Manifest this update: Mon 02 Mar 2026 13:01:12 +0000
Manifest next update: Tue 03 Mar 2026 13:01:12 +0000
Files and hashes: 1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: 88TtSZpnTKgsopObKpLj+2csJ8WnpxfJ1HnnA2PrZ2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:6e:d2:7c:66:b5:0a:54:76:5d:3b:b1:41:dc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Mar 2 13:01:12 2026 GMT
Not After : Mar 3 13:01:12 2026 GMT
Subject: CN=01cbcec666e9ae95a17a0da3aa7cdfbb13e8f422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:3a:0a:54:b2:e0:f8:70:03:7a:f4:5d:05:
7f:ce:5f:3f:4b:90:5f:89:f0:61:b7:a4:ca:47:4e:
ee:ba:09:3c:59:6e:9a:d0:fa:1a:8c:1f:f2:a9:b9:
52:8c:9f:c1:d8:0e:3f:17:fb:b2:6e:94:55:5e:70:
64:81:b8:08:cb:89:e3:14:9d:6f:82:2c:f1:ee:f9:
6d:da:ad:4c:3b:65:7b:71:74:6c:0f:3c:dd:32:f2:
d9:6a:ec:c5:cc:af:9a:f7:38:c4:99:6a:93:32:e0:
e3:aa:e4:71:19:fb:89:b5:81:08:a9:99:fe:16:9b:
8f:b5:32:c4:b9:2a:67:dc:09:2e:e7:3d:08:b2:c5:
b9:c6:56:e0:0b:73:1c:eb:6b:f2:a5:77:ee:a7:c4:
81:0c:73:4e:e9:08:e8:a6:71:62:82:87:f0:3e:66:
aa:a1:03:cf:9b:7b:94:05:b7:b4:04:4f:61:b2:7b:
d8:40:8f:eb:ee:9a:0f:cd:d8:2a:77:5f:2d:4d:c1:
7e:31:02:b4:f5:0d:d1:aa:ae:e1:90:7d:b8:ac:14:
fc:da:82:68:f2:41:28:22:d3:83:a7:93:8a:f1:ed:
07:13:da:12:08:23:1f:87:af:a0:72:bf:54:33:5b:
5e:b6:52:ed:b5:2c:59:57:b5:4c:99:b1:bb:95:67:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CB:CE:C6:66:E9:AE:95:A1:7A:0D:A3:AA:7C:DF:BB:13:E8:F4:22
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:2c:bd:5a:88:7c:a3:fc:37:dd:17:f2:0a:5b:7e:49:ba:1e:
27:f4:5e:27:de:f8:a4:8b:12:5d:91:d3:05:11:1b:ff:1d:e7:
22:e1:e0:75:86:2d:86:9d:e6:c5:73:c7:8c:9d:3b:e0:9d:69:
75:7c:57:68:34:bc:b3:23:63:04:d1:ab:80:24:c0:96:07:7c:
63:3c:f2:82:68:d5:29:0c:5e:27:89:b3:c3:58:16:10:28:1f:
69:02:c1:cd:b0:e4:6c:4b:ce:ed:ca:a1:d0:9e:c6:38:69:7c:
b3:61:7e:0e:68:28:3a:e5:98:7a:45:10:c2:c6:d1:f7:00:09:
fa:30:8d:c1:2f:f4:38:e3:80:f8:59:1f:f2:84:0f:8d:f2:e1:
1b:aa:cd:fb:dd:10:d5:43:9e:5d:dc:2f:11:e6:52:c2:4a:8e:
1d:d1:af:2e:ea:89:0e:27:8f:63:ea:19:24:b3:2a:2f:4a:5d:
a0:94:37:4e:a9:3b:ea:e1:84:ee:ef:af:7f:67:a2:1f:4c:e4:
37:e1:70:e1:a7:41:ae:89:31:e2:f1:af:ce:33:a4:54:63:e6:
88:7c:86:7f:90:43:10:80:31:f4:ce:0d:e3:1f:b0:6d:46:b7:
56:6b:87:26:8e:77:f0:2e:2b:16:48:06:39:44:32:59:ea:3a:
b5:85:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:08 2026 by rpki-client