Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: m/szeAXegRdswoenvjPk6MNtm0PpLGBRFYkq3r2XhYQ=
Subject key identifier: EE:F4:A5:16:C5:A1:6F:06:FB:75:41:8C:A0:19:CD:9E:06:AA:13:B0
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019DF9BA99FCCFD7E2D67FF6E07B5D984668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 18F3
Signing time: Tue 05 May 2026 20:00:48 +0000
Manifest this update: Tue 05 May 2026 20:00:48 +0000
Manifest next update: Wed 06 May 2026 20:00:48 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: +xUMOr0/6kmbU178/cDF5PT5LUVTu7smSH80wn5LuIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:ba:99:fc:cf:d7:e2:d6:7f:f6:e0:7b:5d:98:46:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: May 5 20:00:48 2026 GMT
Not After : May 6 20:00:48 2026 GMT
Subject: CN=eef4a516c5a16f06fb75418ca019cd9e06aa13b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:59:12:fb:54:ce:51:14:71:04:2a:34:c7:
f7:15:18:a0:67:d6:98:b9:49:96:6b:27:4f:39:10:
b7:a8:4a:78:8d:8b:57:01:d4:7a:f3:68:81:61:9b:
6e:c1:3d:0a:ca:13:b4:07:4a:50:e2:25:8d:0f:d0:
bc:db:49:74:76:00:98:aa:64:11:43:bb:d9:aa:3a:
e9:73:ed:ab:d3:54:42:3c:49:ba:51:2a:51:89:c0:
eb:92:1a:8e:1f:47:ba:73:16:66:3f:09:e9:9d:83:
56:9f:97:ca:fc:47:f7:51:4c:85:02:21:eb:e5:a1:
eb:79:11:df:34:1c:b1:97:f6:0a:7b:94:3a:f3:b0:
23:18:10:81:19:ec:0e:09:63:90:f9:6e:ae:67:32:
66:aa:97:cd:91:51:93:c7:57:06:50:7b:d4:28:9f:
9d:4f:39:71:6e:71:ee:09:bb:7f:94:53:5e:cd:73:
db:85:53:67:6f:c3:b8:26:f1:2a:2d:59:82:98:29:
ed:5f:03:ea:a0:a7:89:dc:af:c4:2b:f2:50:cc:58:
36:fa:db:75:65:1a:0c:b9:2b:57:8e:35:03:66:a7:
26:1b:df:f1:6e:06:ae:ec:36:08:a3:af:f8:45:84:
67:42:ec:27:01:38:99:c0:32:b6:a7:c3:95:2f:36:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:A5:16:C5:A1:6F:06:FB:75:41:8C:A0:19:CD:9E:06:AA:13:B0
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5f:04:4b:b6:99:95:20:9d:82:50:07:35:a9:9f:37:90:32:
ea:52:9e:0f:c6:c6:4c:a5:d0:8d:0f:ca:8a:a6:96:18:79:c2:
cd:de:76:53:0e:55:8e:38:02:9f:55:2e:7d:95:f4:e0:ae:77:
d1:42:7e:a6:80:af:e9:db:76:c9:11:b6:5d:96:1b:25:82:4e:
95:82:16:74:ed:39:20:a4:de:38:84:90:23:83:ae:06:ae:66:
a0:d4:66:e9:c2:56:c3:72:61:92:94:87:7e:63:e9:a3:c4:23:
6e:42:f5:e9:cd:b4:c7:fa:22:b6:85:8c:03:2d:76:10:09:93:
76:3c:f9:43:32:94:be:5d:df:22:b5:34:2d:0b:f8:c9:2b:f0:
07:74:69:cb:bb:b1:50:68:db:50:04:ba:85:af:62:f8:91:3c:
f5:50:0d:43:d7:8e:59:de:b6:72:cc:d3:b1:bd:6f:bf:00:cb:
3d:5f:21:e4:22:b0:e4:8d:59:fa:63:fe:78:f6:55:67:c4:aa:
d0:ff:8c:9c:6c:4e:76:27:ec:60:2e:2e:73:7e:73:a7:54:39:
25:34:2d:76:c1:f5:bd:e0:f7:a1:b4:ae:21:4d:ab:53:fa:57:
44:22:55:81:92:7f:3e:c9:79:d3:99:c3:a2:d9:90:56:f0:db:
07:7b:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:21:14 2026 by rpki-client