Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: VDqsmgBT0htne7E64nmCq0wQRkp5FDZlgsRPyVL9ev8=
Subject key identifier: EB:CE:3D:82:B9:59:A0:97:61:73:55:75:4B:94:B6:D4:62:4E:0B:3E
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019CACB5468B462ADDC020D3B949F3EDDECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0E32
Signing time: Mon 02 Mar 2026 04:01:27 +0000
Manifest this update: Mon 02 Mar 2026 04:01:27 +0000
Manifest next update: Tue 03 Mar 2026 04:01:27 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: BLYnm6M9I91Lt+q6z2H5uEy5vXBwfIkUmqwlvvS7s88=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:46:8b:46:2a:dd:c0:20:d3:b9:49:f3:ed:de:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Mar 2 04:01:27 2026 GMT
Not After : Mar 3 04:01:27 2026 GMT
Subject: CN=ebce3d82b959a097617355754b94b6d4624e0b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:41:55:3a:ed:aa:a8:6d:f7:0e:e2:a0:21:
92:32:b2:06:f5:d7:6c:69:cf:12:b3:87:a9:66:3a:
33:bb:7a:f2:4a:b8:19:e8:ed:48:ed:2b:02:b3:ca:
f5:d6:b2:52:fd:c9:9b:6c:e5:cd:e0:aa:a2:db:23:
c6:46:cb:a9:f1:5c:32:fd:86:88:55:43:eb:cc:d3:
c8:b1:ec:2e:11:12:53:ef:1f:85:70:ee:a7:7e:3b:
3a:da:6a:af:46:95:00:a6:32:f6:6d:dc:73:da:aa:
64:2a:ae:b2:5f:60:44:83:6d:04:f9:ba:11:f7:ec:
dc:30:19:83:eb:04:68:6b:9d:20:06:67:ec:75:32:
8e:3f:54:c7:bc:58:da:01:6c:3e:93:e9:61:33:db:
cd:f0:13:2c:5d:9d:e4:a6:d1:03:2b:aa:9a:01:14:
cb:fe:b8:44:f8:34:f0:50:e2:ca:78:e9:16:24:e1:
2c:df:04:d8:9d:3f:1f:df:55:42:14:22:56:35:50:
1e:30:8c:ff:ae:20:e3:fe:95:2f:72:4a:7c:b6:67:
1e:cc:38:b9:79:24:50:3f:ce:eb:2d:52:a9:1f:7b:
dd:60:29:b4:1e:f6:94:c3:0c:27:da:6b:cc:da:3c:
5b:18:8b:21:1b:09:23:2f:3d:91:a7:75:cd:83:02:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CE:3D:82:B9:59:A0:97:61:73:55:75:4B:94:B6:D4:62:4E:0B:3E
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7d:b4:17:ea:f2:55:c7:04:b9:bf:6a:63:04:e2:f6:c6:87:
60:ba:7d:3a:1b:43:2d:a6:2c:bc:54:48:69:8d:bc:93:88:93:
f2:75:c3:8c:76:24:1d:c8:03:76:f9:e3:95:bc:c3:2f:57:3a:
fd:0a:bc:c0:6e:e3:a3:d1:60:79:4e:a8:6c:c9:ef:df:e2:bd:
1c:87:63:9f:bb:f3:85:96:cc:a1:b9:18:1b:32:f9:55:dc:ab:
81:6a:a6:57:43:09:cc:d9:b6:ba:9a:99:b4:b7:73:4d:a4:07:
fd:c8:bd:e9:c2:cc:7e:16:bc:7a:f2:86:60:2a:01:9a:5f:df:
c6:7a:d8:25:3e:99:5b:a2:bb:51:44:70:c3:66:de:08:86:61:
56:ff:f0:ab:1d:5d:49:b9:36:99:32:91:05:cd:aa:24:8d:8d:
7b:53:90:72:ed:74:88:2c:da:7f:c4:e5:cd:08:08:a5:33:55:
71:67:06:6d:0c:01:cb:11:6f:28:8b:63:db:b4:cb:a1:28:1f:
54:11:b8:2a:6c:10:83:51:54:23:4d:df:e0:47:65:c7:a1:99:
0d:e1:ce:0f:f6:9e:a2:0f:be:01:0b:84:dc:2c:a8:a1:6f:2f:
90:ca:72:36:67:c3:49:ab:58:1d:94:e6:1b:2d:de:ed:a4:06:
f7:70:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:57 2026 by rpki-client