Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: UNE1VV+1BZHjQYgaGgO6fKUcHcxiHdibFJacwhJxqHE=
Subject key identifier: 35:06:6F:06:CF:25:6F:62:70:F7:17:05:4B:66:95:A1:47:7A:DC:95
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019D9C2D1C1549BB6C699919D5487423A00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0EAE
Signing time: Fri 17 Apr 2026 16:01:35 +0000
Manifest this update: Fri 17 Apr 2026 16:01:35 +0000
Manifest next update: Sat 18 Apr 2026 16:01:35 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: Ccmb5HeuK/7P8odlQwlLjDW9BkUQ+Vvr2RGqmmaur6k=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:1c:15:49:bb:6c:69:99:19:d5:48:74:23:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Apr 17 16:01:35 2026 GMT
Not After : Apr 18 16:01:35 2026 GMT
Subject: CN=35066f06cf256f6270f717054b6695a1477adc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:b8:2c:11:a5:6c:6f:d7:47:4f:70:aa:d9:
cd:e2:05:13:46:87:fb:f8:66:9a:a4:0f:7b:5a:aa:
f5:91:c7:ca:c7:a9:d4:58:b5:0c:a4:55:a3:cc:5a:
97:80:72:13:a9:05:8b:96:87:29:8d:26:1e:9c:3a:
e5:12:c2:c4:62:7f:9f:3b:ec:37:f7:d3:c0:56:42:
94:0d:aa:db:e1:c5:b5:d0:5e:49:c0:d5:2d:74:af:
8f:93:8d:56:66:cd:f2:89:0e:fb:b0:d5:b1:4f:0a:
a1:53:ca:a2:98:84:80:20:1c:9a:02:a8:75:68:c1:
67:f3:c3:ab:62:81:0f:06:1a:af:0b:27:f4:b9:dd:
9c:69:d8:2c:9f:b9:a8:a1:2b:f0:54:28:cd:94:58:
87:7e:81:4d:4a:8b:99:b4:ca:1b:7c:4d:9e:15:38:
49:94:25:34:17:75:8c:21:00:fa:c0:05:0d:52:47:
45:fd:73:7e:66:f3:34:51:ac:41:48:e8:8b:89:14:
26:96:7a:f2:ae:97:07:9d:98:7d:83:a8:35:7f:47:
3d:4e:be:07:6a:ff:cb:47:25:0a:5f:47:75:8a:67:
32:ce:4c:b4:ce:c7:39:65:90:8b:2c:93:18:47:7a:
05:02:04:0a:64:be:34:b5:2c:28:8e:2c:2c:87:72:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:6F:06:CF:25:6F:62:70:F7:17:05:4B:66:95:A1:47:7A:DC:95
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:75:56:2a:20:e0:ad:78:18:9e:b3:32:59:d0:71:e6:b5:6c:
ce:c1:5c:45:5f:76:06:7a:8f:2b:83:46:de:9f:88:fd:a5:e5:
9d:c9:1f:ab:4c:08:d4:42:9a:59:46:5f:a6:34:09:4c:13:48:
56:42:70:55:f3:87:b4:09:0e:bf:c4:e5:c8:13:34:ff:6d:5a:
58:97:b6:b3:b6:6d:3c:b3:3d:ba:5a:0b:d8:c3:b4:29:bd:ee:
1c:8f:22:a3:cd:2e:c6:b2:a2:d0:82:a4:a1:e3:f7:28:3c:ad:
e5:a0:33:23:5b:66:19:6d:58:3b:e4:60:48:36:d8:38:21:59:
fa:ad:bc:29:21:bd:c7:77:c5:11:44:bf:61:9b:ed:49:0c:ee:
d1:9f:4b:6c:b0:6d:b8:92:42:e5:61:ae:8a:c6:90:6f:f6:37:
63:4d:a3:66:77:39:d5:f8:59:40:f3:05:6d:12:db:cd:30:15:
af:35:3c:49:d3:39:9b:0f:08:a8:d7:5e:b4:44:92:84:95:09:
f7:3f:bf:9c:5a:b2:d0:b0:d2:88:a7:6a:8f:62:6b:e0:4c:6f:
2a:31:b9:51:68:a3:f7:36:a3:b2:40:1c:aa:b8:db:5f:22:56:
0d:71:c3:48:06:ef:ea:d0:6e:0a:ad:83:76:fd:1d:1f:7c:1f:
0d:9c:bd:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLRwVSbtsaZkZ1Uh0I6ANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2
MWY2OGIwHhcNMjYwNDE3MTYwMTM1WhcNMjYwNDE4MTYwMTM1WjAzMTEwLwYDVQQD
EygzNTA2NmYwNmNmMjU2ZjYyNzBmNzE3MDU0YjY2OTVhMTQ3N2FkYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwge4LBGlbG/XR09wqtnN4gUTRof7
+GaapA97Wqr1kcfKx6nUWLUMpFWjzFqXgHITqQWLlocpjSYenDrlEsLEYn+fO+w3
99PAVkKUDarb4cW10F5JwNUtdK+Pk41WZs3yiQ77sNWxTwqhU8qimISAIByaAqh1
aMFn88OrYoEPBhqvCyf0ud2cadgsn7mooSvwVCjNlFiHfoFNSouZtMobfE2eFThJ
lCU0F3WMIQD6wAUNUkdF/XN+ZvM0UaxBSOiLiRQmlnryrpcHnZh9g6g1f0c9Tr4H
av/LRyUKX0d1imcyzky0zsc5ZZCLLJMYR3oFAgQKZL40tSwojiwsh3KtXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUGbwbPJW9icPcXBUtmlaFHetyVMB8GA1UdIwQY
MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt
NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy
LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHVWKiDg
rXgYnrMyWdBx5rVszsFcRV92BnqPK4NG3p+I/aXlnckfq0wI1EKaWUZfpjQJTBNI
VkJwVfOHtAkOv8TlyBM0/21aWJe2s7ZtPLM9uloL2MO0Kb3uHI8io80uxrKi0IKk
oeP3KDyt5aAzI1tmGW1YO+RgSDbYOCFZ+q28KSG9x3fFEUS/YZvtSQzu0Z9LbLBt
uJJC5WGuisaQb/Y3Y02jZnc51fhZQPMFbRLbzTAVrzU8SdM5mw8IqNdetESShJUJ
9z+/nFqy0LDSiKdqj2Jr4ExvKjG5UWij9zajskAcqrjbXyJWDXHDSAbv6tBuCq2D
dv0dH3wfDZy9Bg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:38 2026 by rpki-client