Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: SkZo+R7Xguq2ced8YX0iq7L31p1L8Edr7Jj6dtGws70=
Subject key identifier: 80:D5:0D:94:FD:E8:5F:8B:2B:A9:D2:EF:5B:C8:AF:9D:03:9B:89:AB
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01A0DF4EA55662406DAB7A69CCC4189101ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 20:01:08 +0000
Manifest this update: Sat 26 Sep 2026 20:01:08 +0000
Manifest next update: Sun 27 Sep 2026 20:01:08 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: hvqp7G2R9Iv7gaH1Z/Sv7ZArzsbupZF454hZxlZgc5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:a5:56:62:40:6d:ab:7a:69:cc:c4:18:91:01:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Sep 26 20:01:08 2026 GMT
Not After : Sep 27 20:01:08 2026 GMT
Subject: CN=80d50d94fde85f8b2ba9d2ef5bc8af9d039b89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:cc:a8:4a:cb:dc:20:38:60:f2:55:7f:e8:
85:81:6a:05:33:6d:d5:81:48:24:23:dc:bd:08:7d:
16:da:30:d4:ee:d4:d8:34:3f:01:7f:b1:b9:94:bf:
2a:1c:2c:84:4f:cd:2b:e8:9a:24:6f:6c:92:ab:78:
a8:f9:5b:53:17:c8:5e:e7:4a:8e:5a:31:23:60:40:
f5:92:e6:5e:13:31:3f:fd:d6:e1:14:0f:13:11:7a:
c6:ab:2a:00:ad:54:2c:dd:e5:a8:c1:bd:39:a4:e5:
d2:2b:6e:39:e5:31:c3:cd:38:89:a8:6d:40:b1:87:
d3:7b:ef:5f:ad:a3:0c:bd:4c:9d:17:d6:2b:a8:17:
24:21:94:a7:6c:47:de:9a:4c:61:75:02:1f:4e:2b:
9e:58:b4:95:99:4a:87:e4:81:9e:fa:3e:be:07:49:
40:7b:fc:ab:10:4c:c8:60:9c:92:6e:0d:e1:c6:79:
03:1f:96:d6:7d:0c:9c:63:43:fa:62:ee:b7:79:3c:
a9:51:f9:c1:b5:d6:69:a8:1b:fa:15:6b:81:8c:62:
b7:9a:31:17:8d:28:f2:52:10:7d:92:f0:b7:ea:bd:
16:b8:d0:f2:11:39:9b:aa:1f:f7:12:7f:b6:bb:0d:
03:53:33:46:60:a7:13:e8:c7:14:89:1b:44:03:f6:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D5:0D:94:FD:E8:5F:8B:2B:A9:D2:EF:5B:C8:AF:9D:03:9B:89:AB
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:c5:7c:72:0d:cd:1e:f0:a1:48:80:1a:a9:f7:b2:61:46:
84:19:7e:f8:76:24:76:16:a8:20:5b:00:2f:2b:3f:57:4b:8e:
1d:38:4b:76:fe:2c:c6:72:dd:75:d6:f2:86:ed:d8:64:63:b4:
74:51:79:34:6e:0f:97:76:d8:3c:ef:2c:ce:39:40:19:9c:c8:
96:3a:17:9d:b8:74:da:ea:b8:0b:8d:a9:ba:5d:c9:65:47:88:
a0:fe:5d:35:8a:7f:c1:cb:9f:3a:7f:db:62:c7:aa:eb:0e:f0:
fc:e8:1b:b1:dd:a6:f8:e1:c4:e3:49:b4:21:b3:6e:07:5f:d1:
71:c5:ad:dd:f4:ed:d7:77:cc:6d:33:9d:32:4f:f8:a5:16:4f:
d2:0c:b8:9f:f3:d8:7d:28:70:19:5d:a9:32:98:a9:59:64:f8:
9e:54:22:ba:02:00:c3:9c:48:bc:84:f5:1c:d9:e3:99:36:6f:
d9:a3:9c:2e:52:9f:7c:b1:b1:8b:e9:2b:4c:da:0a:7f:57:27:
57:43:40:5e:4a:f6:41:8c:d8:62:46:ca:00:97:01:46:78:dc:
32:ba:65:68:6c:cf:8c:d4:f1:b5:8f:9b:3d:a5:42:89:a0:d9:
27:e3:98:6a:cd:c2:54:55:39:a0:1d:12:1c:b8:40:73:75:48:
19:e2:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:18 2026 by rpki-client