Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: aeNXdT7N2F0vPMsplH1nqau1ODpTcqCAS14oFVcN6/M=
Subject key identifier: 52:1D:76:5D:37:60:19:43:16:CE:14:65:B0:12:75:1C:DC:8E:3D:C8
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 01A107014DF82EFE7DACFF93946E7EB1A2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 1073
Signing time: Sun 04 Oct 2026 13:01:28 +0000
Manifest this update: Sun 04 Oct 2026 13:01:28 +0000
Manifest next update: Mon 05 Oct 2026 13:01:28 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: yks78fM1yHsKAoKQ5pUrNzebL0Amk6uozNehPEOqB00=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:4d:f8:2e:fe:7d:ac:ff:93:94:6e:7e:b1:a2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Oct 4 13:01:28 2026 GMT
Not After : Oct 5 13:01:28 2026 GMT
Subject: CN=521d765d3760194316ce1465b012751cdc8e3dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:76:95:cf:d8:ea:a5:8c:58:50:56:7b:32:
73:79:be:e4:78:d9:6c:88:13:24:75:ce:f7:86:5b:
b4:fc:5b:7f:63:05:6a:94:55:54:ba:89:b5:ac:a2:
ee:db:d2:08:a8:6f:25:74:1d:de:c8:8c:14:6b:1c:
1c:9a:c8:af:97:a4:a7:7e:46:c4:ac:67:c2:10:26:
8b:c3:8c:0f:2b:c6:95:96:5a:67:d3:22:7e:50:ad:
62:09:0d:92:2e:f0:a0:f5:18:aa:65:ad:c4:fd:29:
18:1f:89:cf:62:1b:ec:3d:d4:ea:4c:7a:71:01:bb:
41:36:38:73:eb:f1:94:4a:24:02:a9:cc:57:82:dd:
a9:99:84:23:10:da:51:80:28:e4:ea:d0:73:c0:ee:
6e:df:ce:72:ba:d8:0a:c1:7b:9b:73:4b:e7:f9:17:
f8:21:75:f6:f2:54:f4:ad:0f:c0:d2:49:66:19:5d:
30:13:8e:26:6d:f4:94:27:6c:c9:ec:f1:d8:41:19:
ab:aa:55:b8:8d:37:13:d0:ee:64:80:cb:37:11:8c:
54:f5:ec:41:03:33:1b:a3:59:cc:cc:8f:e2:e5:47:
47:fb:f3:4b:a6:c5:bb:ec:a1:e0:6d:56:e6:ad:9f:
8e:73:50:b5:f9:9b:f7:0c:5b:6e:f2:33:28:3f:95:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:76:5D:37:60:19:43:16:CE:14:65:B0:12:75:1C:DC:8E:3D:C8
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ff:2e:f0:f0:d5:ab:d0:c9:29:c7:d8:40:fc:4e:5d:22:d5:
a1:39:cb:f8:55:9f:ba:b3:5e:21:66:00:a6:35:e7:b9:9b:bb:
22:0b:f0:ce:5a:61:ba:6b:fe:05:9e:2b:b0:fb:e8:82:33:a2:
dc:6b:ce:0c:a4:e9:3b:fc:43:23:93:58:c5:49:32:a8:57:74:
c4:d7:f0:5e:00:7f:78:60:af:98:35:7f:b4:f5:a8:61:82:ad:
35:ab:fa:7f:0f:8a:82:a0:07:c0:fe:cd:e6:f1:c5:a6:5e:8e:
77:0c:2e:e5:a5:79:6c:f4:45:fe:93:9a:8e:8b:dd:d5:9a:cc:
84:a0:3a:74:c8:50:f5:7d:4b:d7:d4:93:af:7d:bc:77:60:af:
6d:26:5a:cd:0e:62:6d:8c:65:09:7c:f4:e6:37:dd:f3:f6:ef:
6a:f4:c4:42:f2:d2:5a:06:1e:1b:45:c4:af:d7:34:e3:df:95:
ff:76:a7:91:d0:3b:b1:ab:21:4a:97:bf:b3:b3:0c:90:16:71:
3f:df:83:c0:ce:04:91:58:f2:1d:ee:34:25:6f:29:0c:1e:81:
74:6f:5a:17:8c:1e:ad:e8:8d:2a:45:37:3c:5b:99:57:2f:3e:
08:52:5b:5e:e7:1b:6d:de:3d:b2:5e:a9:69:2e:eb:28:67:fa:
94:0d:77:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHAU34Lv59rP+TlG5+saL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2
MWY2OGIwHhcNMjYxMDA0MTMwMTI4WhcNMjYxMDA1MTMwMTI4WjAzMTEwLwYDVQQD
Eyg1MjFkNzY1ZDM3NjAxOTQzMTZjZTE0NjViMDEyNzUxY2RjOGUzZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvV2lc/Y6qWMWFBWezJzeb7keNls
iBMkdc73hlu0/Ft/YwVqlFVUuom1rKLu29IIqG8ldB3eyIwUaxwcmsivl6SnfkbE
rGfCECaLw4wPK8aVllpn0yJ+UK1iCQ2SLvCg9RiqZa3E/SkYH4nPYhvsPdTqTHpx
AbtBNjhz6/GUSiQCqcxXgt2pmYQjENpRgCjk6tBzwO5u385yutgKwXubc0vn+Rf4
IXX28lT0rQ/A0klmGV0wE44mbfSUJ2zJ7PHYQRmrqlW4jTcT0O5kgMs3EYxU9exB
AzMbo1nMzI/i5UdH+/NLpsW77KHgbVbmrZ+Oc1C1+Zv3DFtu8jMoP5XTnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIddl03YBlDFs4UZbASdRzcjj3IMB8GA1UdIwQY
MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt
NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy
LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev8u8PDV
q9DJKcfYQPxOXSLVoTnL+FWfurNeIWYApjXnuZu7Igvwzlphumv+BZ4rsPvogjOi
3GvODKTpO/xDI5NYxUkyqFd0xNfwXgB/eGCvmDV/tPWoYYKtNav6fw+KgqAHwP7N
5vHFpl6Odwwu5aV5bPRF/pOajovd1ZrMhKA6dMhQ9X1L19STr328d2CvbSZazQ5i
bYxlCXz05jfd8/bvavTEQvLSWgYeG0XEr9c049+V/3ankdA7sashSpe/s7MMkBZx
P9+DwM4EkVjyHe40JW8pDB6BdG9aF4wereiNKkU3PFuZVy8+CFJbXucbbd49sl6p
aS7rKGf6lA139g==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:44 2026 by rpki-client