Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: JECAHowNX8QoR7qKikc1F6k3pQd4WEjr29Pnyo2Zcuw=
Subject key identifier: 82:9A:64:FD:1F:13:05:DB:11:D3:91:73:38:93:52:75:CD:E2:47:68
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 01A17EBCAB330527EA73EE622A11E72BC0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 10B1
Signing time: Tue 27 Oct 2026 19:00:55 +0000
Manifest this update: Tue 27 Oct 2026 19:00:55 +0000
Manifest next update: Wed 28 Oct 2026 19:00:55 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: 26ZOXPcJYMt7rr5Lnu7bgdaBr38PODqN2VbyVAFAwmw=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:ab:33:05:27:ea:73:ee:62:2a:11:e7:2b:c0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Oct 27 19:00:55 2026 GMT
Not After : Oct 28 19:00:55 2026 GMT
Subject: CN=829a64fd1f1305db11d3917338935275cde24768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:3c:da:28:3c:b6:16:e6:39:6e:f2:1f:56:
a6:2b:e1:15:4f:ae:43:67:49:aa:8b:86:58:1b:8f:
8e:0e:fd:a7:4b:31:5a:13:d7:6d:e9:7d:48:aa:65:
0a:9b:42:17:52:78:10:b4:df:3b:76:53:df:57:22:
36:12:1d:1e:24:fa:1e:a1:48:b9:2f:11:6b:62:bc:
0f:dc:90:52:3c:d8:7d:35:ee:aa:df:1d:06:a1:16:
06:92:e1:13:1f:98:d8:0c:3f:ba:c6:d8:f7:1d:18:
e0:86:ea:62:66:e1:a4:37:1d:28:08:ae:7b:bf:ba:
d5:1d:62:24:40:42:9f:4d:13:23:d2:71:4d:93:20:
f3:c4:77:1c:82:e3:c5:6e:8b:74:81:3c:45:07:3f:
fb:fb:5a:d8:86:6c:97:f6:f4:37:01:91:b3:6a:4e:
a4:ed:86:ce:d5:06:ea:bc:dd:1b:e0:67:6d:32:44:
d6:e7:38:32:30:67:b8:f7:e4:a6:72:99:23:86:fd:
93:74:08:7e:7f:c4:74:34:1c:e0:9d:f0:c8:0d:20:
30:f4:ee:b3:3d:f3:85:95:8c:be:71:7c:63:3e:c8:
7f:61:f7:4a:08:80:05:2c:1b:08:5f:55:9d:81:3a:
8a:cb:e2:76:d8:52:34:c3:f8:fb:e8:1e:99:c1:f7:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:64:FD:1F:13:05:DB:11:D3:91:73:38:93:52:75:CD:E2:47:68
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8a:22:30:49:df:07:03:c9:a1:ff:5d:db:c7:7a:99:03:2a:
f6:01:ef:e5:14:12:bd:1e:ef:68:9a:a6:a6:4d:16:f0:f6:b8:
89:be:89:5e:3d:6c:34:06:07:d6:6c:dd:2f:de:18:dd:24:1a:
ae:06:15:b0:c8:5c:14:b3:82:99:75:27:13:44:6c:3b:aa:93:
99:a9:5d:86:e7:a9:00:c5:e3:20:37:58:45:2d:3e:cc:48:29:
a4:b8:b6:52:49:8f:14:e6:fa:3e:2c:16:a6:e8:2d:ec:f0:39:
dd:49:7c:8e:78:50:a3:eb:b4:0d:2e:ba:20:c8:b0:3c:67:fd:
2c:fc:9e:b9:f9:87:14:e9:cd:13:f8:19:bf:56:03:28:51:3a:
26:96:c5:6b:76:15:e4:72:b8:45:48:cb:99:79:c1:d4:9d:ac:
e0:1e:9e:62:36:6f:b5:bc:5e:ba:f2:42:c8:0e:ee:86:ac:04:
34:7c:b1:c1:f4:1e:67:be:7d:ce:d6:27:90:71:5a:e2:90:7a:
2c:98:1f:4b:86:eb:9f:e9:df:81:63:38:04:4a:18:4f:43:0e:
a8:85:57:51:c1:cf:6a:8b:9d:6d:f0:ec:45:dc:e4:93:a2:48:
49:12:40:a1:fa:e6:1e:a8:bd:69:0c:67:c5:23:c0:86:92:7c:
36:24:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:34:01 2026 by rpki-client