
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: 3UDo59tJYOxAtz4AnjiKOy8GY/0Mi0IyAZfyoYK/9YE=
Subject key identifier: 7A:B8:0C:B5:1C:55:5C:7F:FE:FB:0D:AB:E9:65:FA:1A:94:BE:51:81
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019EB80EBE4192A5DC5BA61CC40F5A6B3A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0F41
Signing time: Thu 11 Jun 2026 19:00:34 +0000
Manifest this update: Thu 11 Jun 2026 19:00:34 +0000
Manifest next update: Fri 12 Jun 2026 19:00:34 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: 5TUCtMZcC8f0xnvFWZh4Q2KijAzGQv44NusQOsjE/oA=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:be:41:92:a5:dc:5b:a6:1c:c4:0f:5a:6b:3a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Jun 11 19:00:34 2026 GMT
Not After : Jun 12 19:00:34 2026 GMT
Subject: CN=7ab80cb51c555c7ffefb0dabe965fa1a94be5181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:50:16:90:2a:55:7b:f4:d9:79:80:35:83:
c9:d3:88:47:87:0f:f3:26:e6:a1:2b:22:72:e0:6d:
8a:e3:fb:f6:84:c2:64:5e:2d:a3:51:07:fd:0a:eb:
c4:d2:70:57:33:d1:e6:b2:02:a8:57:6c:2b:e7:8c:
e1:4b:4a:c4:8b:19:dd:eb:4b:17:1e:27:09:93:f7:
c1:b1:59:2e:2e:34:06:f1:1e:d4:54:9e:b1:38:b4:
ee:d7:82:91:8a:06:84:50:12:12:47:7f:d2:1b:3f:
1a:c5:d7:07:26:10:28:41:89:4f:15:c6:f3:96:cb:
da:a0:37:d1:23:bc:f3:2e:15:ef:9d:fb:e4:8a:31:
66:8a:32:37:4f:da:14:f2:6a:87:ce:4e:3f:26:9d:
be:d6:9b:39:b5:4b:33:9b:dd:49:cb:b6:eb:ea:a5:
55:72:e6:a6:79:e5:54:cd:61:bb:a9:db:35:14:19:
a5:33:39:5c:02:6a:88:e8:19:61:37:fa:d0:68:06:
8b:69:bf:89:46:93:2d:da:75:ff:42:57:86:12:cd:
01:3f:2a:a1:f6:23:49:8e:13:a4:12:59:be:9c:41:
ec:2f:2b:4b:c4:f6:99:60:37:22:26:02:3d:fc:0b:
a5:fc:43:21:a6:a9:fe:eb:0a:97:d4:b9:4a:9c:fe:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:0C:B5:1C:55:5C:7F:FE:FB:0D:AB:E9:65:FA:1A:94:BE:51:81
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:35:70:74:64:93:02:79:67:dc:f5:84:0c:28:be:92:e0:1e:
08:d4:0c:d6:b5:4e:42:63:2c:4d:03:fa:b7:3a:7a:d5:2d:23:
f6:b3:89:0c:3f:25:3c:d0:18:8c:b1:cd:53:89:68:57:23:15:
ce:7b:8d:5c:5b:c4:93:47:95:7f:6d:6f:c3:b6:33:82:85:9a:
91:46:96:35:e5:36:d4:98:10:2d:f8:d9:10:97:78:63:b4:20:
bf:68:b7:94:57:76:ee:91:ea:cd:e2:98:b0:3c:2d:5a:45:c6:
f5:f6:15:f1:64:de:ab:34:20:94:64:5f:74:70:ad:ea:78:29:
f6:f3:7d:aa:42:46:bc:a0:cf:b2:09:e7:96:1d:4d:cc:54:9a:
c7:eb:73:e3:dc:fe:44:a7:61:f6:05:38:3f:b5:a4:af:c8:6c:
b6:e1:15:3a:f0:6e:3a:26:e1:af:f4:25:1d:cd:86:97:a7:60:
c1:ab:ea:b1:92:29:84:de:c8:93:6b:d4:64:02:ea:28:8f:79:
13:71:d4:91:0f:50:14:b6:34:9e:b3:46:d5:15:3d:42:2a:b8:
69:5b:89:14:7a:4b:e7:64:bc:a8:c4:d1:55:12:4d:6f:16:c0:
3f:6e:3d:62:63:ce:f4:57:7c:4f:c1:b8:7b:ef:ea:21:62:eb:
90:3d:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:24:13 2026 by rpki-client