Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: Ju1Ps72CpSJPVpYC9UPWMXWL7HZTXm6/EjOFsbvFCTQ=
Subject key identifier: DF:58:5A:F7:93:67:85:7F:FE:F6:B1:45:68:9D:6F:96:66:A3:00:82
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019D273ADE01E00F06B02EB0601A845C6CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: XkBXT10fZq+KU0Mj4Ka/yFEU3TOdU2hDa5g1rNMevdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:de:01:e0:0f:06:b0:2e:b0:60:1a:84:5c:6c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=df585af79367857ffef6b145689d6f9666a30082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:28:51:45:af:af:41:f5:33:e6:4b:e3:0c:
b9:b6:11:52:cc:3f:84:6c:f9:ca:89:86:1a:3a:32:
83:0e:03:14:bb:a4:30:77:ce:9c:44:20:9e:1a:3e:
02:28:35:12:0e:03:99:b5:49:32:a9:06:87:39:b3:
6b:12:07:c1:d5:6d:00:f2:27:d5:90:78:bf:d5:67:
28:69:64:07:4d:3f:d3:0c:8a:1f:01:44:d7:2e:aa:
e0:c8:08:ad:1d:b2:8c:be:68:88:f6:44:a2:d4:59:
43:63:37:18:cc:27:67:ca:e5:c3:14:f2:63:89:e7:
cf:fd:63:ec:96:95:ca:d7:8e:78:c8:fb:c8:87:02:
19:0e:47:db:95:d7:93:4d:34:bc:d6:38:d9:fc:49:
61:15:d9:f6:b7:e5:a8:8b:52:cf:7f:cc:15:f3:63:
d9:c0:cc:b8:94:7b:0f:f4:ef:d4:a3:03:13:71:cc:
ea:6b:7a:62:a5:cf:92:68:4a:19:17:b9:62:9a:20:
32:fb:2a:d4:77:67:8f:0c:30:7a:95:72:c2:9c:e9:
d0:f6:26:8b:fd:2e:a7:db:a8:1a:e6:06:64:ce:7c:
27:8b:d9:a6:41:82:fb:90:63:be:33:f7:f1:12:76:
10:05:5e:c6:d1:b5:71:d4:ee:d7:b0:64:69:f3:d5:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:58:5A:F7:93:67:85:7F:FE:F6:B1:45:68:9D:6F:96:66:A3:00:82
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:32:5c:cf:fd:8b:e0:91:bd:6a:ff:34:32:ed:eb:af:75:
bb:00:8a:cf:90:17:15:54:eb:9e:a3:f7:e9:25:97:31:f8:03:
65:62:4b:ef:99:75:a3:ed:0b:a3:ff:10:08:93:b1:4f:64:78:
56:23:e6:3d:be:a1:f4:7c:20:60:47:be:8e:81:68:8e:88:21:
3d:6a:80:c8:24:92:76:f4:1b:cc:38:48:10:29:39:ef:1f:72:
b3:e0:1a:b7:4f:79:c7:71:0f:b4:4d:2c:8a:dc:05:6f:08:da:
ce:af:d7:47:15:75:22:69:1b:23:ae:4c:d2:a0:0d:29:ec:9d:
fd:59:73:0c:bb:0b:ce:d3:6d:3b:04:93:a0:a0:8d:03:9a:6a:
e1:b1:59:7f:c4:b9:27:01:30:71:e1:27:ea:46:2f:c1:0b:56:
79:9d:d6:83:76:ff:6f:36:02:59:1a:d4:f8:15:5e:94:cc:c3:
5d:a1:04:ca:1a:f0:57:a3:88:82:dc:f1:3f:61:ab:1e:4f:bb:
b6:6b:13:f9:94:91:82:ae:08:34:cc:a6:78:0c:c1:32:9a:00:
48:d5:f9:2b:bd:2e:11:a7:ba:5e:11:e5:78:a2:fd:bd:d1:56:
8a:4d:30:83:83:9c:8b:a9:30:ac:28:5b:91:d6:0c:fd:e3:9e:
34:20:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:21 2026 by rpki-client