Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: l/mmjsZGRdRSjknP8p5tgxPHfhdLw4wOJg3cTpEZS8Y=
Subject key identifier: D3:B6:E9:EC:78:93:C0:3E:BA:F4:09:4A:13:B5:B7:87:AF:BF:38:1E
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019D37C0875445C5C4958998ED3EFE98D5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 15D1
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: 7ai8WBdV93oSYOF6/bn+SPLAwAN0zoh25uA7Xn3wJqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:87:54:45:c5:c4:95:89:98:ed:3e:fe:98:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=d3b6e9ec7893c03ebaf4094a13b5b787afbf381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:b4:6b:12:86:48:04:0e:c0:d9:8d:44:5d:
cf:eb:ae:62:5a:54:48:0d:1a:5d:c3:c5:97:00:a1:
a4:42:2a:00:51:24:bb:f9:6d:0d:32:54:e0:61:5a:
0a:bd:7e:0f:8d:72:84:41:bf:60:b4:cc:a7:fd:1e:
18:73:0c:8f:c2:b4:bd:74:5c:1d:35:21:13:ca:62:
6d:03:2e:32:e4:b4:78:29:d8:ef:3c:43:9a:41:9f:
2a:a6:fe:11:7e:48:2b:a3:dd:81:71:c6:c3:eb:d1:
c0:cc:83:19:4e:00:c3:86:a8:ef:67:c5:01:9e:40:
96:e6:2a:40:ce:20:fe:4e:de:e0:4f:d9:a6:c7:0a:
52:00:8e:2d:e5:bc:ba:2f:bd:a7:98:e1:5d:d1:db:
77:02:55:64:28:30:fc:5b:ad:79:dd:22:cf:6f:5f:
36:1a:b7:18:8e:bc:b7:0b:43:fc:b5:eb:eb:cb:da:
1e:7f:64:75:3a:31:0a:65:f1:d6:1a:94:e6:76:7c:
95:92:58:bf:41:b7:97:71:cd:bf:de:d4:b4:9a:8d:
e2:fb:c8:41:aa:95:89:3a:3e:5d:9a:3a:0d:41:fd:
cf:7f:e9:e6:2d:e8:56:17:fb:be:9c:bb:0f:19:00:
4d:c3:2d:1b:a2:4c:46:20:d1:13:0b:1b:e1:fc:83:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:E9:EC:78:93:C0:3E:BA:F4:09:4A:13:B5:B7:87:AF:BF:38:1E
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9a:f2:81:24:37:27:bc:26:5f:9f:7b:09:75:9c:3c:da:0b:
6b:55:cf:99:15:b3:dc:f9:04:ab:7c:3f:0b:2d:15:5c:cd:61:
f1:e8:c3:f7:84:e3:ab:d2:60:0e:bf:b9:24:83:39:7b:0b:37:
8a:25:15:b5:8b:f4:e1:10:da:c5:a9:6f:a0:c4:30:7d:10:ec:
1b:2e:be:9d:da:c6:e4:30:7b:ae:23:06:9f:34:0a:bd:7c:66:
57:91:59:5e:a9:8e:0d:f7:00:9d:63:9f:83:1c:c3:4d:28:e3:
11:5f:d0:4d:fa:f0:55:8c:08:46:76:20:b9:31:55:77:36:02:
f9:70:8e:b7:3d:7b:54:7f:0c:43:a4:3e:27:d9:55:7e:e3:e5:
28:82:38:10:9b:17:fe:df:7d:da:08:d9:75:0a:66:e9:c9:79:
85:29:79:2d:45:3c:9b:f0:2c:08:67:ea:14:5c:e7:c0:bd:bf:
bb:42:c8:70:e6:fb:33:98:49:af:11:bf:07:b6:13:58:66:1a:
33:18:0d:59:55:c5:29:4d:d7:7d:91:d8:ba:b8:f1:ee:38:62:
a5:dd:63:2c:bf:7e:63:c0:6d:8e:84:56:a9:48:b5:0c:a1:74:
85:93:ba:36:bd:2d:7e:42:f1:7e:0c:0d:de:3c:26:6a:74:e3:
76:40:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:52 2026 by rpki-client