Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: aKBmgxSxthRHydXSJbDIw6CIuXP4Z1KZ7T49jY32CRI=
Subject key identifier: 42:FB:CF:7E:C8:F2:0B:50:55:46:81:CE:59:4C:27:9A:FB:89:6D:EF
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019EE857DCB44DA65FB7C6B2D13BBCF29AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0F5A
Signing time: Sun 21 Jun 2026 04:02:12 +0000
Manifest this update: Sun 21 Jun 2026 04:02:12 +0000
Manifest next update: Mon 22 Jun 2026 04:02:12 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: DZkIcOYd6bF2gyekuvaFhsz5ycsOaZnGtuOGqbUMu6I=)
2: MDbmuyuCNpEGg70tUNib047bzYM.roa (hash: aRny3LR/3U87kr9DfyYwPngDlU1/98VG3ukh37CaHsI=)
3: vLaBL3FQDXYxCxa5QCEYQSKizbk.roa (hash: bow5STBCMw0saR4ctONz11ABlaiag4hx4EvsTW2vQ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:57:dc:b4:4d:a6:5f:b7:c6:b2:d1:3b:bc:f2:9a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Jun 21 04:02:12 2026 GMT
Not After : Jun 22 04:02:12 2026 GMT
Subject: CN=42fbcf7ec8f20b50554681ce594c279afb896def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:44:3d:84:c3:5b:7e:78:ea:c3:3a:aa:c1:
d6:cb:10:93:f9:70:34:43:f9:ab:a3:c4:1e:ea:58:
d0:33:23:34:da:c6:1a:80:79:d7:5d:03:4e:34:7b:
dd:ba:60:00:61:9a:c9:19:27:86:aa:ca:f2:a8:e9:
f3:f4:54:f0:f5:54:94:b5:da:7f:1b:1b:a5:ab:2e:
4a:f7:73:d0:3f:75:20:d0:e2:39:7e:af:0d:4d:8f:
ba:cc:95:79:8f:14:68:c1:90:0c:6d:a4:8a:1a:b9:
ef:4d:3a:22:3a:f3:81:dd:07:e3:1f:ce:0f:0d:ca:
51:c4:02:c8:9f:91:88:f9:b0:29:3e:43:e4:fd:fd:
cf:54:69:79:6b:78:8f:42:e9:03:a0:70:72:8a:8c:
53:af:31:ab:04:2c:75:b4:f8:4c:38:4e:83:21:ec:
66:a8:68:1c:f4:48:45:40:79:5b:61:96:25:44:51:
92:e9:53:28:08:f5:36:eb:d0:c7:b9:b3:a4:91:05:
d8:3c:a4:7c:0a:90:df:9d:5f:7b:b6:dd:dc:a1:d8:
26:3a:c1:84:a9:e2:ee:3a:ec:0b:70:8b:4f:17:b1:
02:2e:ce:e6:c1:e4:b6:23:52:ce:8e:ce:e6:ef:17:
ac:9a:85:f2:81:1f:7c:b0:d3:ff:ae:8e:c4:8f:8c:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:CF:7E:C8:F2:0B:50:55:46:81:CE:59:4C:27:9A:FB:89:6D:EF
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f7:38:16:ac:32:4b:b0:e4:a2:d3:2a:25:06:2d:24:63:26:
33:67:c5:3a:2a:92:37:79:1d:7b:a6:4a:ae:8e:4f:f5:f4:6b:
fe:3d:dd:66:cd:c7:b8:eb:4f:0e:33:58:e9:31:e4:ee:56:0f:
72:90:68:40:76:f0:b6:14:26:b1:dc:79:a9:1f:09:9b:7e:31:
ba:98:08:cd:da:e7:67:ee:4b:7b:c4:35:d4:66:a0:fe:a6:55:
e3:82:91:d4:76:f2:ba:b1:f5:21:43:c7:78:e8:1e:38:ae:a3:
4f:45:1b:c0:68:15:07:b9:56:c8:0f:16:81:56:7d:2c:93:0c:
e6:38:1f:b2:ee:90:02:52:6f:83:32:53:a8:c3:a6:4d:fb:61:
e4:1a:9f:2b:98:76:d9:28:10:ad:ce:18:eb:1e:f2:bd:52:0c:
cf:77:24:69:f3:f2:70:a6:ec:dd:31:60:f9:3c:e3:7a:54:fc:
a4:cf:e4:c9:9c:8a:07:7c:33:d9:67:da:e4:3f:5d:78:9b:bf:
ef:50:34:1d:74:52:4c:c7:db:e9:1e:4b:dc:3e:51:db:a3:cc:
56:18:1c:72:ef:cd:c4:18:1b:fd:88:a6:82:4a:9a:a0:89:55:
53:d1:74:de:2f:93:85:9b:8e:9c:95:48:c1:0a:4f:76:29:20:
e3:f2:8f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7oV9y0TaZft8ay0Tu88prEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2
MWY2OGIwHhcNMjYwNjIxMDQwMjEyWhcNMjYwNjIyMDQwMjEyWjAzMTEwLwYDVQQD
Eyg0MmZiY2Y3ZWM4ZjIwYjUwNTU0NjgxY2U1OTRjMjc5YWZiODk2ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1FEPYTDW3546sM6qsHWyxCT+XA0
Q/mro8Qe6ljQMyM02sYagHnXXQNONHvdumAAYZrJGSeGqsryqOnz9FTw9VSUtdp/
Gxulqy5K93PQP3Ug0OI5fq8NTY+6zJV5jxRowZAMbaSKGrnvTToiOvOB3QfjH84P
DcpRxALIn5GI+bApPkPk/f3PVGl5a3iPQukDoHByioxTrzGrBCx1tPhMOE6DIexm
qGgc9EhFQHlbYZYlRFGS6VMoCPU269DHubOkkQXYPKR8CpDfnV97tt3codgmOsGE
qeLuOuwLcItPF7ECLs7mweS2I1LOjs7m7xesmoXygR98sNP/ro7Ej4z2lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL7z37I8gtQVUaBzllMJ5r7iW3vMB8GA1UdIwQY
MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt
NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy
LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPc4Fqwy
S7DkotMqJQYtJGMmM2fFOiqSN3kde6ZKro5P9fRr/j3dZs3HuOtPDjNY6THk7lYP
cpBoQHbwthQmsdx5qR8Jm34xupgIzdrnZ+5Le8Q11Gag/qZV44KR1HbyurH1IUPH
eOgeOK6jT0UbwGgVB7lWyA8WgVZ9LJMM5jgfsu6QAlJvgzJTqMOmTfth5BqfK5h2
2SgQrc4Y6x7yvVIMz3ckafPycKbs3TFg+TzjelT8pM/kyZyKB3wz2Wfa5D9deJu/
71A0HXRSTMfb6R5L3D5R26PMVhgccu/NxBgb/YimgkqaoIlVU9F03i+ThZuOnJVI
wQpPdikg4/KPLg==
-----END CERTIFICATE-----
Generated at Sun Jun 21 11:27:39 2026 by rpki-client