Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: cNJ/yugIaCRVgniJZCUFHkl9OkfQn4xoZCRiDpWOYAk=
Subject key identifier: CE:4B:9D:34:FC:89:8E:C4:BB:EF:3E:3D:B6:18:DE:FD:57:20:78:6E
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019E1F7F3238204A8A8087132335AD6542AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0EF2
Signing time: Wed 13 May 2026 04:01:30 +0000
Manifest this update: Wed 13 May 2026 04:01:30 +0000
Manifest next update: Thu 14 May 2026 04:01:30 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: mOhvmQ23HS2EohMle5PNxMo6IRmtI3Ic/YIbdNGsURU=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:32:38:20:4a:8a:80:87:13:23:35:ad:65:42:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: May 13 04:01:30 2026 GMT
Not After : May 14 04:01:30 2026 GMT
Subject: CN=ce4b9d34fc898ec4bbef3e3db618defd5720786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:21:86:10:ff:6a:bd:10:1b:09:51:d1:58:
7c:af:41:cb:45:de:df:0d:ea:53:10:2a:36:cd:50:
e3:e1:58:e6:3a:7a:52:c9:1c:e2:f4:b7:74:d3:d7:
f9:e3:77:a4:34:2f:0f:af:e3:32:b7:ff:60:9c:89:
c7:9c:a2:24:2c:c4:d7:87:e2:e0:f9:a4:71:95:e4:
64:2e:af:50:c6:08:c4:52:fb:04:32:73:2e:d8:07:
b5:9e:17:68:27:f1:fd:17:68:4b:75:50:3f:e8:c4:
fa:a3:1b:06:31:72:6a:fe:d9:a5:f4:1a:56:83:91:
71:9c:6e:3c:7a:c6:60:2d:18:5a:02:f0:53:dd:42:
7f:06:0e:59:3b:1c:9b:a1:dc:1c:5e:49:7f:ad:24:
41:fe:e2:60:19:b0:2f:0f:59:ff:c9:4b:fc:3c:d6:
cb:69:d9:ff:c8:f0:cb:14:d8:dc:33:58:c8:8b:45:
d1:12:a2:05:7c:7d:27:7a:eb:0d:7b:3b:ee:24:0e:
84:fc:c1:ef:36:d7:07:1e:36:fd:8f:b2:5e:8d:0a:
6d:cd:b8:a9:4c:d4:41:83:61:1e:71:10:3e:83:e3:
49:5a:5f:fb:d0:d0:bb:93:ce:d2:73:bf:2e:99:c7:
1d:51:0f:bd:bc:21:6d:c1:26:2e:92:16:98:36:7c:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:9D:34:FC:89:8E:C4:BB:EF:3E:3D:B6:18:DE:FD:57:20:78:6E
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f1:35:e1:1c:25:ee:a0:43:4e:81:3c:db:dc:7b:45:a5:04:
12:7c:e4:5b:2f:19:80:d7:7b:12:60:2a:e2:fc:34:bd:f4:36:
e9:1e:72:9c:04:c7:cc:a7:54:3f:11:98:06:28:e3:77:26:95:
cd:a8:be:92:5c:39:56:82:9f:9a:84:a4:d8:d5:0a:23:9e:d6:
67:17:52:b4:7c:31:a0:c9:6e:06:cd:d2:5c:dd:98:50:1e:d0:
b1:cf:4a:37:7b:2c:f2:aa:da:6b:1a:56:78:5a:1b:b0:d4:9f:
a2:10:c2:e4:1a:f3:f6:e7:69:60:ff:bf:e8:f3:c1:04:73:0b:
5d:77:fb:c8:87:d7:ec:1c:c5:bb:5e:7b:be:39:a7:17:ca:9a:
ce:22:c8:d8:60:c1:fa:25:95:3e:ea:e7:de:ac:5d:0f:de:9c:
e4:0e:8b:51:2f:ff:6b:ea:1c:76:60:b1:42:0e:8c:72:68:27:
6b:ab:d2:86:33:65:a3:95:55:cd:96:01:32:08:ef:46:14:20:
2c:92:8f:a4:73:91:5d:95:97:5c:75:23:1f:24:f0:6e:a2:ff:
7b:e2:c1:cf:86:fe:0c:02:58:69:35:25:ff:90:04:f8:ec:fd:
d0:3a:e6:54:71:cb:4c:d4:23:35:df:da:2b:b1:36:71:b3:53:
64:9a:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:19 2026 by rpki-client