Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: 4LunNup9gppnspnop0hlX/8mrlFaH+QMV0yLxxyoguw=
Subject key identifier: 42:D2:BE:8E:8F:5E:35:B1:F6:B4:EF:71:49:3E:9A:79:F5:F5:72:E6
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019F913544241CAE8FBBFDF7466DD088D5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 23:00:14 +0000
Manifest this update: Thu 23 Jul 2026 23:00:14 +0000
Manifest next update: Fri 24 Jul 2026 23:00:14 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: oERYWnr5TNDPLtauA4IKKp4TJb3U0384Mlb8Iw8KNX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:44:24:1c:ae:8f:bb:fd:f7:46:6d:d0:88:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jul 23 23:00:14 2026 GMT
Not After : Jul 24 23:00:14 2026 GMT
Subject: CN=42d2be8e8f5e35b1f6b4ef71493e9a79f5f572e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:56:3c:d3:af:f7:8b:0b:97:0a:1a:b7:a8:
55:3a:04:a0:f9:82:e8:da:48:ba:58:9e:60:f7:25:
c0:c2:d1:29:9c:60:b2:6e:b6:51:65:1a:08:e6:9b:
28:3c:d6:de:34:6c:a4:56:fa:13:3a:f0:a8:b7:b0:
0f:c8:7d:e7:f8:2c:97:8d:cc:db:ec:36:d1:e9:82:
15:9d:98:b3:0e:a1:19:b9:d7:b3:e2:73:03:bc:13:
e5:61:a8:d3:02:a1:72:80:f9:62:f5:63:13:f8:43:
5a:4c:e2:16:ab:79:1d:14:3e:91:c7:79:23:c5:4b:
59:0f:65:92:de:9c:e0:40:cc:9a:4a:2c:4f:76:29:
d1:98:7e:f2:1e:cc:69:01:3e:c3:4d:19:45:d6:4a:
69:0a:c4:8c:c4:37:92:13:9b:c1:9c:23:1e:22:d0:
0a:eb:ce:36:71:4d:d5:2c:39:94:0a:94:3f:eb:a0:
5b:57:1a:98:06:9e:b8:d3:4b:7e:87:09:a8:3d:8b:
18:5a:ee:a6:b3:6b:7d:bd:8c:e3:16:06:85:b6:49:
e9:0f:70:63:bb:8e:26:30:48:63:d8:2e:ee:6c:3b:
0d:95:f9:43:ea:11:51:b9:36:c1:67:ee:ba:1f:fd:
a1:06:2d:42:5b:31:5f:f5:92:fa:8f:42:e2:a4:17:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:BE:8E:8F:5E:35:B1:F6:B4:EF:71:49:3E:9A:79:F5:F5:72:E6
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:69:b6:fe:09:d0:25:e1:99:1b:8b:7a:a6:b8:ba:5f:9e:
9f:43:00:53:96:9c:be:ee:b6:5f:ec:04:74:a0:6b:e2:34:07:
0d:95:fa:1f:9e:97:ad:a7:2a:60:36:e9:16:1f:f3:a4:6d:ee:
5f:8d:3e:e2:1b:68:d2:71:d5:8a:05:66:ec:04:4b:83:51:13:
38:f4:8e:8f:53:39:fd:6c:0a:04:6f:e4:f1:be:a1:8b:0c:6c:
e0:6b:c3:86:e8:b1:4a:3b:1b:33:c9:c2:64:4f:0b:06:cb:cc:
bf:1a:9d:0c:f2:29:e0:b2:a0:a9:c0:06:19:d0:3b:b2:2b:f4:
c7:06:3a:a1:e7:88:63:bf:1f:04:b2:3c:50:2d:40:ae:6a:e0:
6f:ad:04:95:05:5e:81:8c:c4:88:46:17:2d:90:10:93:d5:f3:
a7:cf:49:a9:09:12:75:18:96:06:07:8f:17:a7:f1:cb:69:2f:
7e:c7:7d:af:d2:3f:48:da:3c:ba:d2:f8:e9:e6:98:d9:a0:45:
41:a8:d8:39:b1:39:13:d3:65:1d:0c:d9:63:30:c4:b9:6e:e9:
9d:2d:db:88:7b:4a:aa:04:1b:a0:e3:2f:b8:c1:0f:7e:e7:9a:
2b:66:d4:26:fc:6a:c5:6c:c1:ed:ef:f1:54:e7:83:07:9d:ef:
01:fb:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:06 2026 by rpki-client