Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: v36X+VxTyd6RAUODNy/4ksYkxXs2yOr9m3X4mbfds3M=
Subject key identifier: 20:95:DA:01:C7:7C:77:15:49:EE:63:95:96:A2:6C:9D:63:6B:B4:63
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019E1E6C37EBB9B713779AFA5A92775BD3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 23:01:09 +0000
Manifest this update: Tue 12 May 2026 23:01:09 +0000
Manifest next update: Wed 13 May 2026 23:01:09 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: 2j5J1L5TxOiXyFqWYz+nZ58ghf+Mwi75Y4UqhiPCkw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:37:eb:b9:b7:13:77:9a:fa:5a:92:77:5b:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: May 12 23:01:09 2026 GMT
Not After : May 13 23:01:09 2026 GMT
Subject: CN=2095da01c77c771549ee639596a26c9d636bb463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:36:70:69:cc:06:91:bf:9d:ed:63:b9:c6:
10:23:40:7f:c8:3f:ea:7c:b7:15:ed:45:ea:b0:4c:
c9:3d:6b:c1:86:7d:21:ad:4c:89:82:4d:fd:2f:1c:
a2:30:72:57:0e:5c:be:57:cd:1a:d0:09:9a:85:06:
00:bf:fa:7a:a0:23:18:2f:1d:a9:7b:04:a2:e3:c1:
e2:57:3b:0f:85:0c:70:d6:d5:04:66:c1:51:b4:6f:
e7:94:33:ee:83:31:eb:e0:71:21:1a:5a:37:0f:8f:
d4:77:84:37:c9:4b:71:72:6d:79:d8:bd:3b:ba:79:
45:55:8a:1a:e3:1b:9a:e7:49:d4:e0:aa:7f:2a:b2:
95:ae:7e:43:53:73:c2:36:43:43:b5:e0:6b:cc:81:
88:85:04:f3:8c:ce:e1:4f:0e:7b:fb:78:8a:3a:50:
8e:1f:6b:fc:51:dd:17:aa:09:17:f8:f3:4e:52:48:
a4:d8:96:1b:c1:35:6a:90:a0:89:88:00:bb:9c:b6:
84:6f:40:07:8a:d0:ed:a0:99:a9:2f:46:bc:b7:90:
a7:6e:b0:2f:83:4e:d6:f2:20:4a:18:38:d3:cc:e3:
99:49:33:09:c6:7a:c7:5f:7e:d5:97:81:e9:da:0c:
e2:33:b3:8b:8c:63:ae:c4:fd:f4:ec:a2:6a:68:12:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:DA:01:C7:7C:77:15:49:EE:63:95:96:A2:6C:9D:63:6B:B4:63
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:74:ef:6e:2c:48:36:78:5f:7c:6d:4d:21:c9:83:7b:78:30:
26:1b:d5:62:c9:29:e4:cd:2c:e0:92:20:5e:c6:68:c3:aa:7d:
02:3c:d6:80:00:87:f1:d7:f6:45:57:40:df:ac:7c:e8:6e:3d:
54:23:cd:5c:46:b6:cb:b6:5e:bf:e9:b8:0c:ec:7e:86:e9:5d:
5f:9b:1c:64:83:c6:bc:e5:58:29:e4:83:a3:7e:49:22:ed:2c:
65:19:66:b6:db:a7:da:fe:e4:b0:f3:78:0c:58:06:52:d4:5a:
ca:74:8c:7a:7e:ec:09:86:0b:75:64:78:34:1e:1e:1c:22:c9:
8c:38:96:91:d4:00:34:26:20:a7:2b:62:69:88:e8:a5:f2:be:
02:f2:48:49:a5:94:c5:67:06:75:bd:94:16:7d:a0:f4:ef:89:
0c:47:57:1c:e5:a3:e7:15:70:95:60:e3:cf:ca:80:9e:f6:50:
4d:d3:a6:4f:32:17:4b:42:bf:63:b8:ae:f5:fd:d7:f8:b1:bf:
f1:b8:f3:b0:7f:a4:ed:96:c2:fb:89:25:90:f0:0a:cb:97:63:
a1:3e:96:24:26:c8:f8:c1:36:75:76:e9:73:61:b3:dd:97:cc:
96:fe:e4:2d:8c:e2:5f:f8:1d:01:37:cd:ca:9e:32:5c:02:d8:
87:b5:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:00 2026 by rpki-client