Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: LKqHbEGz7w7IQFxMCra4DqgmQZ1hYVFf8b8kBlKhxWI=
Subject key identifier: B5:FE:65:66:43:3A:9F:D9:29:58:65:1C:9A:41:D8:B2:DF:D7:E4:39
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019EE17904A2F3EE4FF2E9ECBC496C3D3563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 196B
Signing time: Fri 19 Jun 2026 20:01:05 +0000
Manifest this update: Fri 19 Jun 2026 20:01:05 +0000
Manifest next update: Sat 20 Jun 2026 20:01:05 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: fMkrlB58RUhiAw4nJQomaTDFjFDkFEaGTlEUv7oB8wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:79:04:a2:f3:ee:4f:f2:e9:ec:bc:49:6c:3d:35:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jun 19 20:01:05 2026 GMT
Not After : Jun 20 20:01:05 2026 GMT
Subject: CN=b5fe6566433a9fd92958651c9a41d8b2dfd7e439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:7f:69:cb:6b:fb:ff:c9:05:7e:5a:9d:4c:
32:5c:ba:c5:89:0d:3c:2d:57:d6:87:c2:1f:37:07:
fe:20:94:b8:f1:d3:6b:99:75:b1:65:27:5c:72:47:
17:ea:a2:01:5a:e6:1e:de:8a:b6:28:79:f6:c6:f1:
c1:ec:24:f3:ec:5e:89:d6:8f:c7:52:af:8e:51:cf:
1c:ed:83:75:29:2b:47:97:c3:04:86:c6:c2:44:f9:
46:99:da:4c:6a:41:1e:1c:12:e7:5d:9d:7a:f0:04:
c3:8a:03:a4:a2:7f:66:ff:a5:b0:a8:d7:09:de:14:
df:09:da:79:1b:f2:5e:94:13:b5:c1:28:3a:ec:7c:
1d:52:ae:24:9b:dc:16:59:e5:49:46:cd:db:01:73:
00:c7:b6:7f:17:96:e2:3b:fb:fe:5f:8f:d7:93:f6:
eb:ec:e7:48:4f:0f:a3:c8:89:09:81:46:dd:3a:4a:
7a:41:f4:bd:99:93:b0:9a:4e:d5:d4:8a:7c:a4:46:
58:21:f9:fa:0b:4f:95:4b:06:9f:ee:c7:ec:b3:fc:
92:01:c3:8c:41:01:09:dc:6a:0d:b3:a3:76:9e:ef:
cc:87:6a:85:3d:b7:d3:eb:17:67:ec:b1:2f:3d:73:
48:f7:b7:c6:b7:83:f4:c4:f3:f4:95:5c:a9:6d:ee:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:65:66:43:3A:9F:D9:29:58:65:1C:9A:41:D8:B2:DF:D7:E4:39
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:93:53:5b:c4:df:fb:c6:38:18:3f:d5:3f:db:9a:d1:96:
e2:b4:d1:fe:31:f2:09:40:af:05:03:99:b8:fc:2e:0e:af:ea:
fb:a2:df:ac:11:5a:b6:98:52:df:fb:6d:49:55:17:00:9d:1c:
79:5f:9f:a0:93:68:a9:4f:2f:0c:1e:99:ef:ff:f5:17:00:c4:
98:dc:79:5a:f0:94:b1:b8:b0:74:db:ff:af:3c:d8:95:d3:8f:
eb:cb:51:fd:bf:c6:50:6f:75:3e:9e:25:eb:52:19:7b:fc:7c:
ce:1f:90:84:5f:52:bd:0c:2f:36:0a:91:b7:fe:30:71:15:cf:
47:8c:43:8a:32:9d:9b:27:b5:21:a5:ff:f2:1f:83:0d:ef:72:
54:0a:8b:9e:33:19:df:38:68:17:93:ac:0b:cb:e4:fb:5c:0b:
2f:f5:5d:90:47:0a:26:62:8c:6d:de:a3:25:7f:d3:6e:ff:28:
b4:a4:b4:f7:e4:eb:a8:91:f6:c1:e8:3f:7f:61:e9:76:68:43:
fe:11:44:ba:7c:5f:15:0d:2f:81:82:92:6f:1d:f7:b0:98:47:
a3:c2:9f:0c:8a:fa:fb:7c:a4:c0:e2:5f:e3:13:e7:4c:63:ec:
9b:12:c4:62:a7:04:3b:de:e9:78:33:fa:87:0c:32:44:f6:0e:
6f:e1:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:14:03 2026 by rpki-client