Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: Gp2b6T/90aOs1tqlLJysnJ2K9U/uirogC8XgFQi6K4M=
Subject key identifier: 27:9C:D8:02:1F:99:CE:7D:78:FF:AD:10:6F:5C:C7:82:3E:92:A9:2E
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019F92483361995230A0498A553446E10834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0FB2
Signing time: Fri 24 Jul 2026 04:00:32 +0000
Manifest this update: Fri 24 Jul 2026 04:00:32 +0000
Manifest next update: Sat 25 Jul 2026 04:00:32 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: rgDsDG+Nu3Tz23Poh7MIPimcSPh8nDe9FZ0FrbDX2wg=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:33:61:99:52:30:a0:49:8a:55:34:46:e1:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Jul 24 04:00:32 2026 GMT
Not After : Jul 25 04:00:32 2026 GMT
Subject: CN=279cd8021f99ce7d78ffad106f5cc7823e92a92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:a1:16:ad:7b:61:7d:60:9d:60:3f:87:7b:
4d:3a:3d:24:70:98:14:f2:fe:ac:15:ac:38:42:cc:
02:8d:be:0f:f2:ce:3b:e7:d8:5a:2a:d9:e6:bc:c3:
8d:15:a7:e4:f7:8e:ef:08:1c:70:a1:35:08:07:41:
23:ff:35:d6:39:2c:a5:d7:44:0f:bb:96:18:9a:0b:
50:e1:66:c2:fc:08:0d:14:07:4e:fe:e3:39:a8:87:
f3:6b:7c:bc:e7:ad:15:63:fa:17:31:27:47:48:9f:
6e:40:8c:61:4a:69:83:1e:e8:16:6b:a9:8b:c5:9d:
62:b3:c7:b0:d9:49:32:c2:a9:f0:a2:9e:1a:7c:56:
09:86:a8:50:f6:06:09:44:91:6c:21:4b:40:54:3e:
78:d6:36:e3:d2:7c:37:3a:8c:ba:65:25:c3:e6:31:
ea:ff:d5:10:45:ed:8d:44:02:f8:54:fd:1c:08:50:
9c:d0:2b:77:82:f0:e2:fe:cc:7a:26:d5:ec:d9:2f:
a4:44:a8:a2:67:16:a5:49:a5:ce:60:33:b7:3b:fc:
d3:3e:03:07:46:5c:b0:62:d9:e3:d7:66:c4:4c:6b:
8d:4b:89:dc:32:7c:dc:46:a8:ad:87:99:ed:a1:fc:
00:8f:81:a8:d2:8f:79:0b:2c:e5:38:c9:67:8b:34:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:D8:02:1F:99:CE:7D:78:FF:AD:10:6F:5C:C7:82:3E:92:A9:2E
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:12:8f:59:a0:a4:00:a2:ba:dd:7a:ab:46:74:88:e2:b8:
ad:d1:8c:65:a0:8f:b4:d5:95:6b:fe:ba:df:d1:81:d8:12:81:
29:f5:99:6b:18:27:84:75:41:14:82:ac:9f:5f:6f:1a:72:0b:
87:7a:30:ec:0b:ae:49:4e:b5:16:69:07:06:b9:37:21:d1:9a:
97:34:16:e2:4c:c4:ca:f6:ef:ed:bb:66:34:d0:58:31:06:11:
e2:d1:2c:02:f2:b2:ff:96:f4:29:55:8b:a9:1d:14:b1:b6:e7:
6c:a0:8c:2f:2a:d0:2f:e5:46:4b:24:ff:f1:44:9c:d8:cf:8a:
2b:37:8b:83:4c:ad:db:62:c2:d1:c6:44:3f:d5:77:25:37:19:
c7:40:11:f0:49:ca:34:9e:16:e6:b1:10:6c:7b:7b:be:f2:28:
15:96:35:8c:50:08:e7:75:b4:bc:1d:b5:22:0d:5f:a8:06:eb:
dd:39:32:4b:47:f9:e1:50:c9:41:be:2e:aa:94:a7:8b:c5:05:
fb:0c:0f:1f:4d:a3:82:62:a4:cb:81:46:36:61:af:af:1f:67:
d3:c9:44:3d:2c:97:eb:0f:3f:46:a2:ff:e0:37:f8:eb:dc:65:
82:09:2b:87:20:0e:4a:ca:65:52:3b:65:3d:f7:fc:f3:5a:6e:
52:92:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:35:14 2026 by rpki-client