Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: /w8BfZvl+vHVYgDzeGtT1O8b6I2xbsvqdXnDnnKzmms=
Subject key identifier: 5C:D7:AB:45:05:33:E5:AC:21:E6:AB:14:81:63:8E:70:8B:91:7D:AE
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019D9850BBADB94CF711BE93BC84683943D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 1603
Signing time: Thu 16 Apr 2026 22:02:00 +0000
Manifest this update: Thu 16 Apr 2026 22:02:00 +0000
Manifest next update: Fri 17 Apr 2026 22:02:00 +0000
Files and hashes: 1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: 8RO3DRV7nSC+mZM1IUCx6hsTIjrH7srvHd0jYCkftUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:bb:ad:b9:4c:f7:11:be:93:bc:84:68:39:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Apr 16 22:02:00 2026 GMT
Not After : Apr 17 22:02:00 2026 GMT
Subject: CN=5cd7ab450533e5ac21e6ab1481638e708b917dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:3a:60:b9:9c:82:0c:5c:9b:11:20:46:8b:
b1:14:24:54:ca:a1:36:73:11:74:11:33:50:61:c4:
62:f4:ae:b8:42:06:6f:40:47:3b:04:1e:02:18:1e:
91:65:0b:26:7d:df:84:60:81:c3:99:98:48:22:4d:
c0:35:e1:ec:8a:b9:9d:55:53:3d:78:49:b6:83:91:
c4:d4:11:22:aa:35:57:c2:10:2d:32:d8:6a:2e:39:
7a:01:80:9d:51:68:bd:95:81:64:4d:39:66:5b:8a:
01:bc:5b:c5:cf:68:8b:58:77:46:94:55:f8:3a:28:
9c:1b:05:dc:dc:0c:a5:ed:e1:55:42:02:ad:de:ab:
a5:d3:f4:f2:a3:e0:e4:60:b1:e6:ac:2e:da:72:56:
8a:e0:44:63:99:06:59:78:2a:a8:42:f5:5c:f6:0c:
5b:92:11:d4:4f:23:4c:ec:2d:79:a7:84:1f:38:12:
a0:ed:e4:6b:51:17:9c:58:72:ad:ff:23:30:20:9e:
38:9f:f0:ee:05:13:e2:5d:c8:03:3b:0b:e8:2f:47:
02:df:43:aa:a1:6b:d1:d3:da:97:ad:f7:b9:83:cb:
bd:77:e4:6b:de:9d:f0:0e:bf:dd:cb:d9:93:3c:71:
21:74:1e:e5:2c:4b:c3:53:e5:e5:04:33:9d:cb:01:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D7:AB:45:05:33:E5:AC:21:E6:AB:14:81:63:8E:70:8B:91:7D:AE
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:6a:08:9b:ef:53:e6:55:52:30:af:f2:c1:bf:87:2c:03:
3b:67:e9:b1:04:d9:49:44:a7:02:d8:98:60:c1:ac:15:53:42:
42:ff:0d:89:c0:4f:7f:24:07:ae:10:ac:7c:e3:ed:56:3b:5c:
c7:7f:49:3b:33:87:af:01:e9:98:dd:fa:a3:c0:92:8b:86:5a:
89:7e:49:11:ea:bb:f1:8d:f5:fa:78:47:71:fe:6d:be:8a:49:
19:3e:2d:06:55:a3:fe:02:5d:11:77:b5:a5:b9:ae:76:8d:ec:
e1:9f:a0:1a:23:bc:df:10:bd:2b:bb:81:ca:df:06:ca:e0:09:
dd:d8:d2:bb:71:88:09:fe:38:c1:11:7d:21:80:79:bd:c8:e0:
93:65:0e:a4:7d:a6:31:d7:9e:3a:77:72:9d:d0:86:6d:c9:08:
77:a5:d1:9f:cd:21:d5:91:cf:a0:41:2f:c1:8f:66:bf:8f:ee:
8e:38:a4:d6:43:88:8e:f4:73:89:dc:e8:8a:c2:92:08:f1:f6:
37:47:6a:e8:67:d2:2e:ee:42:ca:4a:ab:f7:5c:48:c1:df:77:
7a:22:42:6e:d4:21:26:ee:4a:1b:83:63:94:36:08:d9:97:2f:
0c:08:90:89:fa:1a:98:c4:45:d0:27:f9:15:66:86:54:a7:bd:
cb:27:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:17:35 2026 by rpki-client