Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier: 8fh3ynaKM0MYHmJVgLeYQ/syrO+7Qy363TQ1buDqYLs=
Subject key identifier: 0C:B2:63:B8:FE:66:53:37:8F:F9:CF:49:79:88:1A:83:89:91:20:59
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial: 019DD1641745187110FB74453E59E6305DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number: 0951
Signing time: Tue 28 Apr 2026 00:01:30 +0000
Manifest this update: Tue 28 Apr 2026 00:01:30 +0000
Manifest next update: Wed 29 Apr 2026 00:01:30 +0000
Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: iT7p1eqOvPjIwtTlujNP2BSsKLtAD93daLAdGysuOH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:64:17:45:18:71:10:fb:74:45:3e:59:e6:30:5d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Validity
Not Before: Apr 28 00:01:30 2026 GMT
Not After : Apr 29 00:01:30 2026 GMT
Subject: CN=0cb263b8fe6653378ff9cf4979881a8389912059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:d9:ad:32:6d:b7:5a:49:16:89:21:fa:85:
b9:b3:b0:6a:d3:7d:9e:82:47:83:0e:a7:d4:0a:d9:
e7:ab:3d:cf:eb:f3:98:3d:8d:6a:fb:47:94:7c:4b:
0a:87:c2:7b:52:7b:a5:2d:19:15:21:d4:59:d1:2b:
54:ef:0e:53:55:cf:30:4e:57:c4:71:37:0e:2c:3c:
2a:d2:04:a5:58:33:69:fc:01:de:8f:83:0d:cc:f4:
8c:e3:51:59:e4:49:44:5e:70:e6:d1:c2:70:07:86:
ff:28:a8:4b:60:5d:2f:ca:a0:74:13:9b:ac:65:64:
42:8a:8b:b3:a9:c6:03:1d:92:82:94:32:4b:77:56:
50:9a:9e:6f:be:4a:65:80:36:b8:88:60:dc:30:8e:
44:49:e3:59:d9:67:9f:0c:2b:7b:35:c6:69:b8:f5:
36:0c:33:22:af:52:0e:4f:e5:96:4b:87:50:64:e6:
b7:17:d0:b8:a8:5d:d5:c1:2d:4f:0b:23:37:c6:3f:
f0:b1:dd:b8:8b:09:1f:19:6f:af:7d:cf:f3:da:ba:
2b:2e:f5:ed:c0:b0:ce:64:ed:3c:72:fe:bc:90:52:
7e:c7:ca:4c:5e:31:c8:77:9f:5e:57:a3:d7:d3:ee:
b1:07:83:8a:90:91:7a:ce:d3:b8:36:02:20:1f:3b:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:63:B8:FE:66:53:37:8F:F9:CF:49:79:88:1A:83:89:91:20:59
X509v3 Authority Key Identifier:
keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:04:d2:cc:33:ad:8a:eb:71:34:a3:9f:a5:78:ae:7b:67:2c:
66:b1:97:93:82:e1:c4:f4:31:98:93:45:cf:c2:2d:01:80:ff:
f1:83:c0:eb:93:a7:51:9c:ed:f5:d3:0d:78:25:ff:55:ab:0a:
5d:51:54:16:ff:10:02:b9:a1:b2:e0:38:ce:a8:41:8b:86:e7:
32:30:c8:4e:16:01:96:45:54:5f:38:6c:e6:e6:f1:97:c9:8a:
13:c7:64:e5:27:31:cf:95:93:ec:3e:65:31:a3:dc:8e:47:80:
56:d9:fd:e9:5c:88:24:58:72:8e:7c:31:33:48:20:be:c1:cc:
a0:62:51:c5:f1:0f:d9:90:27:3e:92:64:cb:77:a1:38:32:77:
08:6d:bc:5a:54:6f:d6:d7:d8:02:3a:55:fe:8b:d5:6d:3a:5c:
e2:70:3c:35:49:ce:ca:3a:ca:fe:d5:28:6d:69:9f:fe:07:6d:
09:6c:7a:0a:6b:21:4e:45:5d:e2:54:1f:5a:34:ee:d6:0a:16:
e1:ec:28:8a:2c:49:72:6e:47:20:78:a2:ab:98:c4:aa:a2:c5:
1e:18:b9:87:20:17:00:cc:7c:27:83:81:b3:34:b2:96:98:b9:
a7:54:50:12:68:b2:72:25:7c:b4:ea:34:0f:27:cc:99:52:fb:
5b:e8:12:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RZBdFGHEQ+3RFPlnmMF3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDUyNDY2Yzk1ODVmNmY1YTljYzFjMzBlOGQ3YjE2ZWQ0
NzRhNDgwHhcNMjYwNDI4MDAwMTMwWhcNMjYwNDI5MDAwMTMwWjAzMTEwLwYDVQQD
EygwY2IyNjNiOGZlNjY1MzM3OGZmOWNmNDk3OTg4MWE4Mzg5OTEyMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLnZrTJtt1pJFokh+oW5s7Bq032e
gkeDDqfUCtnnqz3P6/OYPY1q+0eUfEsKh8J7UnulLRkVIdRZ0StU7w5TVc8wTlfE
cTcOLDwq0gSlWDNp/AHej4MNzPSM41FZ5ElEXnDm0cJwB4b/KKhLYF0vyqB0E5us
ZWRCiouzqcYDHZKClDJLd1ZQmp5vvkplgDa4iGDcMI5ESeNZ2WefDCt7NcZpuPU2
DDMir1IOT+WWS4dQZOa3F9C4qF3VwS1PCyM3xj/wsd24iwkfGW+vfc/z2rorLvXt
wLDOZO08cv68kFJ+x8pMXjHId59eV6PX0+6xB4OKkJF6ztO4NgIgHzuJTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyyY7j+ZlM3j/nPSXmIGoOJkSBZMB8GA1UdIwQY
MBaAFC1FJGbJWF9vWpzBww6NexbtR0pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUt
MjNlOWFhNWM4YWExLzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUtMjNlOWFhNWM4YWEx
LzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigTSzDOt
iutxNKOfpXiue2csZrGXk4LhxPQxmJNFz8ItAYD/8YPA65OnUZzt9dMNeCX/VasK
XVFUFv8QArmhsuA4zqhBi4bnMjDIThYBlkVUXzhs5ubxl8mKE8dk5Scxz5WT7D5l
MaPcjkeAVtn96VyIJFhyjnwxM0ggvsHMoGJRxfEP2ZAnPpJky3ehODJ3CG28WlRv
1tfYAjpV/ovVbTpc4nA8NUnOyjrK/tUobWmf/gdtCWx6CmshTkVd4lQfWjTu1goW
4ewoiixJcm5HIHiiq5jEqqLFHhi5hyAXAMx8J4OBszSylpi5p1RQEmiyciV8tOo0
DyfMmVL7W+gSAg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:51:20 2026 by rpki-client