Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: qg6GGvWnP8UYLg6nAc5vFwNFTYveKUEbruhCawGTGJM=
Subject key identifier: C2:28:BB:8B:7B:94:39:D4:4F:71:37:57:D2:B0:C5:E6:18:A7:23:E9
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019F9059D033D573AF470795209497E6E8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 1708
Signing time: Thu 23 Jul 2026 19:00:32 +0000
Manifest this update: Thu 23 Jul 2026 19:00:32 +0000
Manifest next update: Fri 24 Jul 2026 19:00:32 +0000
Files and hashes: 1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: sNGLkKaNFREQ0dVeJrJIWcX0hkapaQYU0weIDETseX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d0:33:d5:73:af:47:07:95:20:94:97:e6:e8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Jul 23 19:00:32 2026 GMT
Not After : Jul 24 19:00:32 2026 GMT
Subject: CN=c228bb8b7b9439d44f713757d2b0c5e618a723e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:01:5d:5f:ba:51:0a:82:02:36:1d:7b:d8:
17:4a:b9:e9:71:4c:df:11:be:22:62:58:ad:6c:73:
7a:ac:e6:0c:eb:9f:5e:51:ea:a2:8a:98:39:d8:ef:
29:3a:fc:49:ac:5f:57:85:20:01:ca:8d:8e:fc:f2:
e6:fa:df:91:46:74:26:dd:b9:9c:ab:f2:94:cd:60:
fd:5a:e0:b3:b5:69:a9:74:62:c4:4f:74:45:7f:6c:
e2:74:26:b9:a8:23:10:b6:22:a5:19:cd:84:4b:16:
39:7a:82:2d:a4:4b:b5:41:62:53:a4:cd:b3:6c:13:
55:e4:ee:80:de:37:32:f0:ff:fb:84:e3:dd:b9:d8:
9f:18:df:6f:bf:d6:f7:8d:96:ae:42:b9:6b:6f:a5:
c9:04:76:40:68:e4:70:0b:be:f7:ce:bb:b0:5c:b3:
44:8e:9e:3f:11:ea:3e:05:d7:ca:db:28:47:1f:bb:
5d:4f:12:e7:6e:5d:21:bd:11:16:84:59:7e:4d:19:
af:b6:12:49:e3:49:65:66:6b:a1:17:fe:7a:eb:c3:
41:27:25:78:13:79:91:7b:0b:2d:03:c5:dc:bb:72:
b3:08:16:3a:33:d8:16:c4:4e:c9:35:27:15:9c:d3:
a0:64:d2:e4:0c:53:4b:5b:85:e3:81:3d:28:3a:09:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:28:BB:8B:7B:94:39:D4:4F:71:37:57:D2:B0:C5:E6:18:A7:23:E9
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:7d:fd:87:a4:2e:bf:c9:d7:fe:3d:08:72:92:21:bb:2e:
1a:1b:2e:2d:75:a3:8e:12:25:08:eb:71:49:ed:1c:aa:52:70:
17:fd:07:d6:54:49:2b:79:c0:04:36:55:27:09:a8:d2:5b:5c:
4e:7d:ca:8c:e6:bc:b4:99:cf:11:ed:1e:35:f7:10:68:ab:47:
55:1d:f1:32:ce:5a:11:4e:0d:60:fc:09:25:be:f0:b0:08:ff:
8a:42:b8:a6:c2:3d:04:02:54:e7:84:b1:ac:5f:a0:af:e6:63:
30:2b:f4:e1:d0:b2:15:dc:2d:2f:75:7e:1e:7a:12:78:ad:b1:
9c:ca:fa:fb:4a:8a:80:8a:12:6d:c0:31:8c:89:cb:4c:3d:cd:
01:98:67:9a:50:3e:a2:0b:9a:dc:5f:c9:73:aa:e1:0b:07:f6:
fe:22:9b:b0:73:a0:f1:86:8a:70:aa:5c:47:bd:de:d6:70:23:
88:60:4d:7e:24:14:49:2a:ec:13:23:b2:5a:e1:3a:60:06:34:
7e:a0:03:b2:ac:8f:8f:96:7f:f8:be:4a:e1:05:11:c5:af:e0:
85:5c:4b:4e:8c:b5:f7:61:da:c5:70:4d:53:33:c5:e9:f8:72:
0c:54:ce:9c:c9:ee:1d:78:fa:b4:cc:e9:e2:01:3c:1e:cf:d6:
07:8b:83:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWdAz1XOvRweVIJSX5uj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz
ZmZmOTYwHhcNMjYwNzIzMTkwMDMyWhcNMjYwNzI0MTkwMDMyWjAzMTEwLwYDVQQD
EyhjMjI4YmI4YjdiOTQzOWQ0NGY3MTM3NTdkMmIwYzVlNjE4YTcyM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ABXV+6UQqCAjYde9gXSrnpcUzf
Eb4iYlitbHN6rOYM659eUeqiipg52O8pOvxJrF9XhSAByo2O/PLm+t+RRnQm3bmc
q/KUzWD9WuCztWmpdGLET3RFf2zidCa5qCMQtiKlGc2ESxY5eoItpEu1QWJTpM2z
bBNV5O6A3jcy8P/7hOPdudifGN9vv9b3jZauQrlrb6XJBHZAaORwC773zruwXLNE
jp4/Eeo+BdfK2yhHH7tdTxLnbl0hvREWhFl+TRmvthJJ40llZmuhF/5668NBJyV4
E3mRewstA8Xcu3KzCBY6M9gWxE7JNScVnNOgZNLkDFNLW4XjgT0oOgm76QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIou4t7lDnUT3E3V9KwxeYYpyPpMB8GA1UdIwQY
MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt
ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy
LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGal9/Yek
Lr/J1/49CHKSIbsuGhsuLXWjjhIlCOtxSe0cqlJwF/0H1lRJK3nABDZVJwmo0ltc
Tn3KjOa8tJnPEe0eNfcQaKtHVR3xMs5aEU4NYPwJJb7wsAj/ikK4psI9BAJU54Sx
rF+gr+ZjMCv04dCyFdwtL3V+HnoSeK2xnMr6+0qKgIoSbcAxjInLTD3NAZhnmlA+
ogua3F/Jc6rhCwf2/iKbsHOg8YaKcKpcR73e1nAjiGBNfiQUSSrsEyOyWuE6YAY0
fqADsqyPj5Z/+L5K4QURxa/ghVxLToy192HaxXBNUzPF6fhyDFTOnMnuHXj6tMzp
4gE8Hs/WB4uDmA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:07 2026 by rpki-client