Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: Hqfyb6gaicbH1ExHVmKjhlD5zMjaAxdOm6bG1EhWZgY=
Subject key identifier: 8F:A1:46:CA:47:3F:A9:0D:C7:51:1A:76:63:74:05:1E:8E:1E:17:5F
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019FA1BB2A1404A831085E6C8CF15A97CA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0FBA
Signing time: Mon 27 Jul 2026 04:00:25 +0000
Manifest this update: Mon 27 Jul 2026 04:00:25 +0000
Manifest next update: Tue 28 Jul 2026 04:00:25 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: 61soLyfbwJ8ggxoLB9JsONyvWuzyGrmh+c4Ut7SdXAQ=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:2a:14:04:a8:31:08:5e:6c:8c:f1:5a:97:ca:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Jul 27 04:00:25 2026 GMT
Not After : Jul 28 04:00:25 2026 GMT
Subject: CN=8fa146ca473fa90dc7511a766374051e8e1e175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:b4:89:35:35:ea:59:1c:fc:42:7f:2c:4e:
77:32:91:fc:0a:90:6a:d6:fe:e3:0a:a4:50:4f:97:
f9:5f:3b:df:20:e0:86:d4:1f:ad:f5:33:26:b5:cc:
a6:35:96:86:dc:00:53:5e:9c:7c:a0:89:d6:f4:6b:
4b:7f:21:9b:45:56:ed:e4:4d:57:09:15:eb:a2:c7:
ab:58:d8:5f:13:b7:32:44:cc:2f:67:8b:4c:0d:a5:
8a:5d:ab:56:95:5c:b6:7c:1e:56:d0:d1:20:69:ab:
8c:89:84:31:a3:a1:18:6b:5f:29:22:10:1e:9b:98:
f8:ec:03:63:35:6a:0f:b4:5a:a1:4e:db:be:66:31:
28:7e:bf:57:f2:1e:ba:55:cb:21:fe:32:61:72:de:
26:4a:53:c9:88:14:5d:53:1d:f3:8a:8a:5e:83:86:
88:41:2b:93:1a:f5:4d:a0:45:73:dd:90:e4:71:da:
ed:0e:61:97:47:26:f3:8b:60:32:e6:67:5f:de:62:
16:a4:ec:29:72:fa:cd:9d:1a:5e:de:25:74:ea:ee:
51:f1:40:65:0a:a0:33:f9:51:f3:01:12:56:54:71:
e6:ea:dc:d8:b3:93:9c:8d:60:b8:58:58:8b:d5:2a:
3a:72:b2:d3:37:10:89:5e:b4:84:6b:fd:a0:0b:e7:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:46:CA:47:3F:A9:0D:C7:51:1A:76:63:74:05:1E:8E:1E:17:5F
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e6:e0:3e:f2:e7:25:b0:4b:b0:5d:77:7c:46:61:5f:11:3c:
ee:20:6c:7c:07:f0:1f:95:2d:fd:30:19:7f:f7:2b:ae:26:a9:
bb:56:23:98:c2:36:ca:4f:90:16:3a:75:ad:75:f2:62:46:29:
f7:05:32:90:17:08:8e:15:b4:be:5d:ac:80:f2:94:7e:cf:3c:
5a:31:52:55:ee:75:9a:87:0f:e4:4b:41:66:43:63:a0:02:36:
b6:37:a9:00:02:c7:50:c4:2c:9b:4c:32:2a:9f:15:00:70:b6:
62:0e:b7:59:5b:8c:49:6b:64:c0:c3:37:97:25:0b:bc:b9:e5:
0e:b5:c2:52:d3:0c:74:ba:25:ba:04:0a:9c:0f:49:f7:e1:dd:
b7:f2:27:83:27:99:02:e8:00:95:0a:49:01:48:79:3f:20:21:
23:fc:10:0f:ad:88:70:5c:d7:0d:71:a6:fd:28:7c:06:6b:7b:
b7:28:cb:cb:f8:83:4a:55:12:f0:4d:f1:a6:8c:04:7c:fb:56:
05:ec:1e:9f:e8:e5:72:c4:23:ad:03:df:be:fa:2a:96:6b:de:
3f:30:08:42:ab:04:63:3b:08:06:b2:d0:93:45:b6:3e:f2:0f:
4a:96:4e:97:bc:33:b9:63:32:33:20:8e:33:b0:7a:fd:de:fb:
79:2c:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:15:09 2026 by rpki-client