Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: XhfKhmi/RiX8l4ItwugL/h3PyvnxCGglYIJ3E1cFbiA=
Subject key identifier: 4B:D6:B2:A9:D2:13:5B:DD:2B:C5:A5:A8:A2:53:DC:55:A4:C4:88:87
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01A1A8272126E674036960DDB76B0FFF90A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1ADB
Signing time: Wed 04 Nov 2026 20:01:38 +0000
Manifest this update: Wed 04 Nov 2026 20:01:38 +0000
Manifest next update: Thu 05 Nov 2026 20:01:38 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: 0e9T0Cmfle7tle6+9n1nokL8O2VXGOii7tfr+z8mjHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:27:21:26:e6:74:03:69:60:dd:b7:6b:0f:ff:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Nov 4 20:01:38 2026 GMT
Not After : Nov 5 20:01:38 2026 GMT
Subject: CN=4bd6b2a9d2135bdd2bc5a5a8a253dc55a4c48887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:48:19:8d:8c:59:89:85:75:28:52:30:8e:
23:ef:ea:43:b3:bb:63:fc:70:16:ac:46:7f:33:a1:
f0:cb:f4:1e:f0:2b:8b:a3:88:08:66:01:f9:f5:17:
07:c4:f4:8b:53:9c:65:b1:ca:5a:b7:b6:01:5f:2b:
d8:64:a3:57:6d:d8:2b:fd:b9:0c:38:e8:2c:85:8f:
7e:b6:e4:13:61:55:a3:74:06:ec:14:a5:40:f1:17:
dc:c5:3f:7c:0f:34:3e:93:e1:dd:2c:5f:03:66:d8:
23:3b:34:a4:14:30:ec:84:6a:8e:82:74:26:bb:49:
41:76:f2:7b:0a:06:00:6a:fc:db:69:02:11:e9:0d:
cc:7b:e9:5c:14:18:be:38:25:3d:8d:3b:e0:31:7f:
a3:64:82:6d:76:66:57:7c:1a:e6:2d:c5:4a:2b:bc:
22:06:04:fd:c0:c5:bf:cd:6f:46:e0:80:a6:75:51:
a7:cb:5d:d4:b7:e2:f7:d2:d1:9b:5d:02:85:3a:04:
c1:91:11:4a:04:f8:29:23:2c:3f:80:94:a8:25:88:
97:f9:0a:ad:36:e2:f7:0b:70:4f:4c:2d:36:41:ff:
35:66:75:92:55:74:61:60:f6:fa:77:d2:9d:8b:f8:
d1:77:28:6c:dd:bb:9d:9c:01:da:1c:f9:c9:47:9c:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D6:B2:A9:D2:13:5B:DD:2B:C5:A5:A8:A2:53:DC:55:A4:C4:88:87
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:58:02:3b:57:0b:c9:77:87:4a:6b:c9:3a:10:31:ef:71:
52:66:d0:1d:11:10:5c:92:bd:93:ed:79:fc:b6:65:f5:f0:31:
23:4d:b2:4c:57:3e:8b:c5:d3:59:28:48:b6:02:f9:b0:4d:ad:
d1:b8:51:79:73:3a:60:2c:a2:1b:fc:b8:ea:e9:22:c5:6c:12:
ad:d5:00:97:2d:a2:08:bf:a0:29:ee:8d:02:df:32:39:f3:0d:
a5:6a:12:39:f4:fc:be:cb:84:f0:23:87:75:44:cf:02:98:4f:
06:1d:26:d8:80:35:04:0f:08:2c:c5:33:7b:6d:2f:57:ff:f9:
d8:98:dd:3b:a9:0d:fa:ba:73:b3:00:f8:6e:68:73:f1:30:7f:
f0:bb:65:36:99:1a:50:63:97:a2:1a:85:5d:81:ec:cb:99:b9:
d3:1c:b5:71:de:7b:16:a4:af:36:fd:e1:89:e8:e7:61:ac:22:
af:83:bd:04:8f:2a:b4:d4:90:a7:26:6e:e9:46:0d:67:1d:53:
7a:e4:17:19:86:20:c2:c3:dd:a1:4d:79:a8:85:88:59:0a:b8:
21:31:a5:d2:a9:4c:36:bb:1d:6e:55:da:35:5b:ad:6f:e7:3b:
23:97:d9:6d:f0:e5:1b:1d:f5:a2:d9:c0:7b:86:5f:8a:03:e0:
16:64:a0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoJyEm5nQDaWDdt2sP/5CiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjYxMTA0MjAwMTM4WhcNMjYxMTA1MjAwMTM4WjAzMTEwLwYDVQQD
Eyg0YmQ2YjJhOWQyMTM1YmRkMmJjNWE1YThhMjUzZGM1NWE0YzQ4ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SdIGY2MWYmFdShSMI4j7+pDs7tj
/HAWrEZ/M6Hwy/Qe8CuLo4gIZgH59RcHxPSLU5xlscpat7YBXyvYZKNXbdgr/bkM
OOgshY9+tuQTYVWjdAbsFKVA8RfcxT98DzQ+k+HdLF8DZtgjOzSkFDDshGqOgnQm
u0lBdvJ7CgYAavzbaQIR6Q3Me+lcFBi+OCU9jTvgMX+jZIJtdmZXfBrmLcVKK7wi
BgT9wMW/zW9G4ICmdVGny13Ut+L30tGbXQKFOgTBkRFKBPgpIyw/gJSoJYiX+Qqt
NuL3C3BPTC02Qf81ZnWSVXRhYPb6d9Kdi/jRdyhs3budnAHaHPnJR5zhsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvWsqnSE1vdK8WlqKJT3FWkxIiHMB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvlYAjtX
C8l3h0pryToQMe9xUmbQHREQXJK9k+15/LZl9fAxI02yTFc+i8XTWShItgL5sE2t
0bhReXM6YCyiG/y46ukixWwSrdUAly2iCL+gKe6NAt8yOfMNpWoSOfT8vsuE8COH
dUTPAphPBh0m2IA1BA8ILMUze20vV//52JjdO6kN+rpzswD4bmhz8TB/8LtlNpka
UGOXohqFXYHsy5m50xy1cd57FqSvNv3hiejnYawir4O9BI8qtNSQpyZu6UYNZx1T
euQXGYYgwsPdoU15qIWIWQq4ITGl0qlMNrsdblXaNVutb+c7I5fZbfDlGx31otnA
e4ZfigPgFmSg5Q==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:06:44 2026 by rpki-client