Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: pDEUeVCuZe12MPaTsQ9q0OJ9UA70KcuIiJvr5Y5OQG0=
Subject key identifier: D7:27:1A:60:62:2E:63:34:F9:FF:FD:D6:FE:D9:29:DC:8A:4F:18:B9
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019D265F30D6259343EE208CDEF10A57D6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0E71
Signing time: Wed 25 Mar 2026 19:01:05 +0000
Manifest this update: Wed 25 Mar 2026 19:01:05 +0000
Manifest next update: Thu 26 Mar 2026 19:01:05 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: 1bchQmVY56SybRB9dsXZehIIfImT7KsFWfGY+LQvOnA=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:30:d6:25:93:43:ee:20:8c:de:f1:0a:57:d6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Mar 25 19:01:05 2026 GMT
Not After : Mar 26 19:01:05 2026 GMT
Subject: CN=d7271a60622e6334f9fffdd6fed929dc8a4f18b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:f2:5b:02:7a:9d:cd:a8:06:9e:90:5c:b8:
da:4b:cb:6b:51:c8:cc:82:11:75:1e:94:4b:63:15:
9e:08:81:1e:b1:56:2e:7a:b7:ca:3b:13:64:19:11:
d3:07:f6:d0:48:2d:fd:b9:00:d5:f1:88:74:c0:52:
6d:ee:65:f9:ed:37:4b:a6:05:09:38:8b:17:f1:ae:
21:6e:00:cd:98:77:76:0b:28:40:6d:64:b4:fc:21:
3e:3c:c6:0a:9a:04:6f:a4:a3:96:36:f0:52:99:58:
93:8f:e2:25:90:e0:76:ff:06:33:e7:cf:e9:55:92:
b1:03:e3:ed:b8:2e:a7:d9:e8:75:f8:27:1b:3d:48:
68:c2:50:20:9c:e1:d2:40:27:dc:2b:6b:54:e6:5d:
ef:b9:e0:52:c2:39:63:36:ac:83:cf:7b:e1:e7:aa:
18:17:10:70:0f:4f:7c:1e:e0:41:bc:f3:1b:c7:64:
ab:85:50:8f:ff:af:db:9f:94:76:86:7a:6c:d2:f2:
3a:5c:8c:52:c9:07:b6:c0:af:d1:16:95:df:40:cf:
50:54:5d:11:3f:64:71:bd:7c:2b:8d:90:a7:da:d9:
71:80:98:00:3f:1c:85:24:97:85:18:82:c2:83:17:
13:63:f5:23:51:00:f3:51:80:c5:9a:57:b5:ca:57:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:1A:60:62:2E:63:34:F9:FF:FD:D6:FE:D9:29:DC:8A:4F:18:B9
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b9:62:99:f5:b1:b5:df:72:f1:37:1d:11:f1:9c:c6:65:4e:
df:9d:a4:a3:f5:ac:6f:44:a7:53:3b:24:6f:79:d3:dd:82:e3:
49:fe:f5:71:61:f4:b7:15:55:e2:b7:9c:e1:c2:8d:33:a3:9a:
ee:a5:89:9d:4f:e5:8e:ca:75:bb:ca:8a:e4:67:4b:b6:7e:49:
ab:25:03:2e:08:93:e4:8c:59:7b:cb:9b:e1:cf:d8:31:4a:f2:
5f:d8:25:79:5a:d7:e1:44:f7:84:37:42:ea:4b:d2:65:0e:65:
ce:c3:60:e8:55:5e:15:cb:7e:32:8b:8a:8e:88:1a:c8:a8:7c:
b4:ab:13:9d:30:59:ae:c9:d6:25:7b:20:e1:ba:69:e2:b7:a0:
a2:26:42:3c:27:cd:a7:1f:5d:81:03:11:68:f4:e0:14:c7:e2:
9e:2c:59:a4:40:11:b4:18:54:bf:bd:e6:3f:b1:81:75:43:6f:
4b:47:f5:c4:57:65:0c:1b:24:47:ac:91:a8:ea:65:67:6d:b2:
1f:5c:f3:34:66:1d:f1:be:e5:18:8c:e8:04:75:77:d7:f4:9c:
5c:30:df:0d:6a:3f:d1:4e:f7:07:22:9b:53:c4:03:aa:04:80:
7f:c0:28:a7:16:c7:21:82:87:61:5c:19:56:64:de:e4:d3:10:
2a:15:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:38 2026 by rpki-client