Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: Ux6FP6xEu6ZSDsSNdZW/mjWianTj+GN3iZQqhAerdNY=
Subject key identifier: 23:48:2E:AD:3C:9A:64:C5:FA:3A:9C:16:43:8A:58:49:8B:30:8A:DD
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019D37C00DCB972F49DBD0606DB226C82C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0E7A
Signing time: Sun 29 Mar 2026 04:00:26 +0000
Manifest this update: Sun 29 Mar 2026 04:00:26 +0000
Manifest next update: Mon 30 Mar 2026 04:00:26 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: Mb4NCsZ/bvvEJv37kMO5s/r1Xj5eE3ZsWSY1ZhkpJwI=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0d:cb:97:2f:49:db:d0:60:6d:b2:26:c8:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Mar 29 04:00:26 2026 GMT
Not After : Mar 30 04:00:26 2026 GMT
Subject: CN=23482ead3c9a64c5fa3a9c16438a58498b308add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:62:4c:82:6e:0e:67:56:24:b6:a8:64:6c:
d3:dc:1d:48:d5:49:b0:db:b5:4d:43:bf:39:64:9f:
41:7d:49:3c:94:67:74:6a:6e:2d:fe:60:50:06:59:
82:65:c8:d3:3f:57:f5:3b:f2:c0:3a:8b:d2:b0:0f:
5c:72:d9:a3:de:9e:95:a6:4b:a6:18:6b:5c:20:07:
75:c6:3f:b4:2d:90:13:0c:46:d0:8a:17:80:32:15:
96:6d:a9:64:fd:2a:52:21:7e:c2:fe:f8:67:68:6e:
89:6c:fd:ab:6c:e6:30:e5:67:d3:e4:cf:fb:9e:0d:
dc:a1:b4:25:c4:01:23:24:22:fb:4d:9d:35:9d:19:
f1:7b:c1:1f:9a:f1:e2:a0:34:d0:99:5d:c7:b7:bc:
3a:49:e4:06:07:86:3b:eb:83:58:80:99:1d:04:fa:
f6:15:96:b6:af:fb:d1:ea:2a:14:2e:e1:8e:61:8b:
d2:af:6f:77:52:d7:bc:dc:20:54:44:19:76:49:01:
fd:31:d5:0f:19:b7:c7:29:78:55:0f:4d:e8:44:6d:
b9:d6:49:f5:9d:5f:ed:8d:3c:6a:da:0c:af:ca:20:
53:93:ce:1f:c5:a8:99:6e:0b:a4:03:e9:8b:49:47:
8a:d8:98:f3:6a:b4:fd:75:8d:39:66:a9:4f:2f:88:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:2E:AD:3C:9A:64:C5:FA:3A:9C:16:43:8A:58:49:8B:30:8A:DD
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ae:26:1e:4b:21:07:d7:eb:86:9e:05:fc:27:52:66:94:b7:
74:93:5b:15:b1:e4:fb:86:c4:9c:09:03:46:47:e1:f6:f3:ce:
4f:fb:49:14:61:47:7e:93:99:8b:e1:d0:2d:45:ba:55:fe:aa:
f4:db:4d:d8:95:1f:46:fc:64:8b:30:23:7e:13:5d:79:9d:34:
b5:28:38:0f:f4:35:bd:bb:31:71:2b:e3:39:4e:17:40:d8:52:
a2:41:a1:a1:5e:6f:31:df:c9:99:e4:69:23:8c:ce:c4:e4:30:
7c:9c:5e:ba:fb:05:79:3b:bf:db:d3:30:cf:dc:29:3f:d2:5f:
e8:94:fa:42:60:09:44:18:55:73:15:67:f6:c9:45:e0:03:6e:
30:58:dd:a0:bf:e0:b0:a6:a4:62:0c:9a:16:2b:a5:9d:2b:bd:
83:67:af:34:ee:90:85:c9:ee:f3:31:95:82:82:de:9d:ca:c1:
19:4a:73:55:27:53:a8:90:b2:5b:87:b4:53:96:06:41:ae:bd:
3f:53:17:62:33:59:24:f6:6b:78:86:d7:82:39:95:67:b6:b7:
99:1b:d8:88:5f:c3:c2:fe:91:76:de:eb:e3:19:27:5b:88:0d:
a6:c4:41:3e:8e:dd:cc:2b:ac:cd:5f:f6:0a:0e:73:ca:91:4e:
b3:c1:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client