Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: FzN0FeCiTQDwly8bhKtABzbgTrI7ReuCU/xXn3Zlw7A=
Subject key identifier: ED:E1:29:83:05:20:D9:5C:A3:C6:72:6E:A8:6A:A5:B1:87:E4:88:79
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019FCB2605680B0B33A238C02A05F8D541C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 19E4
Signing time: Tue 04 Aug 2026 05:01:34 +0000
Manifest this update: Tue 04 Aug 2026 05:01:34 +0000
Manifest next update: Wed 05 Aug 2026 05:01:34 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: AEwzLSqiPq1Y7oNIix3fXmzv9jx8ordoi+lSdpa+apA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:26:05:68:0b:0b:33:a2:38:c0:2a:05:f8:d5:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Aug 4 05:01:34 2026 GMT
Not After : Aug 5 05:01:34 2026 GMT
Subject: CN=ede129830520d95ca3c6726ea86aa5b187e48879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:49:91:7e:ea:83:42:d2:38:ab:9a:8c:cd:
ce:5a:13:98:cd:ac:99:62:13:1d:b2:fa:1d:3a:bf:
a1:d5:4a:60:c3:a4:bd:f6:98:5d:c5:af:cc:9b:6f:
18:32:1c:3a:6a:ee:c2:cc:8f:26:a5:bc:c6:67:5a:
34:cf:46:2e:07:f6:ab:ba:75:4b:f0:77:02:ce:73:
af:59:58:9b:2c:f4:96:d1:3e:d3:7d:a5:95:01:b8:
da:0a:57:13:8c:c9:ae:63:a4:4e:e3:c3:f5:0f:d5:
97:b4:d5:06:07:03:23:33:d9:53:2e:8f:b2:54:d7:
4f:2d:ef:5b:c2:23:1e:75:7a:cc:2a:36:52:31:fb:
fb:8f:9f:3f:cc:7c:45:a9:c1:8e:51:9e:f0:54:b9:
86:9f:2e:ce:84:d8:93:8d:28:f2:40:48:e0:e5:3a:
ca:e2:02:f6:a5:23:be:9a:28:91:15:60:62:9a:1a:
9f:6a:9c:34:d6:32:c7:6a:4d:3b:45:96:5c:bc:db:
16:44:c9:9d:e2:95:97:60:da:68:5b:a7:2a:2d:a9:
8c:56:e8:a8:44:08:1c:a7:f7:af:04:bd:72:72:4e:
19:e8:ff:6b:21:fa:0b:17:6f:62:ce:47:2b:47:34:
e3:f0:bc:6a:2b:19:f4:72:49:c2:f1:99:63:14:7c:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:29:83:05:20:D9:5C:A3:C6:72:6E:A8:6A:A5:B1:87:E4:88:79
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:69:a1:ad:ae:7b:e0:f8:fa:e2:d2:f3:43:f7:8e:8d:04:
2d:78:ba:c0:8c:1d:43:2e:3b:71:5b:b3:ad:44:e7:49:6c:1c:
67:cc:fa:d4:f0:2b:30:89:af:6a:24:6b:5d:7b:e4:36:ad:c7:
8f:a3:a6:13:12:e2:ae:0d:b3:db:c0:a9:13:c9:45:64:cc:c4:
25:99:15:58:79:0f:6c:18:53:06:88:3d:eb:5f:76:26:83:f6:
5f:7f:7a:af:14:2d:bf:b2:a1:a7:0e:77:71:0e:29:8e:83:55:
d9:fd:b0:e9:bd:b0:05:91:87:c5:23:6d:da:9d:d8:5a:bb:3d:
21:ae:63:29:31:53:c2:3c:b5:25:c8:49:95:ad:78:9e:0e:26:
44:c8:d2:3a:76:ae:be:e1:2e:05:2a:c8:c4:40:ee:06:d9:c3:
a3:0b:6e:fe:23:34:0e:ac:6e:55:30:4a:f6:5c:c9:c2:d2:a5:
af:2a:3e:ad:19:b6:fd:cb:aa:61:d0:b8:a0:d9:1b:13:8d:05:
cf:f1:7e:90:bc:16:13:f7:a4:e3:a7:c6:81:25:94:c6:7b:e1:
23:87:f5:cc:35:25:f4:7d:6d:21:f1:89:18:3c:80:0e:65:5a:
65:92:17:03:0b:38:d6:f1:c7:07:50:9c:1d:80:08:b4:a5:6f:
36:89:6a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LJgVoCwszojjAKgX41UHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjYwODA0MDUwMTM0WhcNMjYwODA1MDUwMTM0WjAzMTEwLwYDVQQD
EyhlZGUxMjk4MzA1MjBkOTVjYTNjNjcyNmVhODZhYTViMTg3ZTQ4ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQhJkX7qg0LSOKuajM3OWhOYzayZ
YhMdsvodOr+h1Upgw6S99phdxa/Mm28YMhw6au7CzI8mpbzGZ1o0z0YuB/arunVL
8HcCznOvWVibLPSW0T7TfaWVAbjaClcTjMmuY6RO48P1D9WXtNUGBwMjM9lTLo+y
VNdPLe9bwiMedXrMKjZSMfv7j58/zHxFqcGOUZ7wVLmGny7OhNiTjSjyQEjg5TrK
4gL2pSO+miiRFWBimhqfapw01jLHak07RZZcvNsWRMmd4pWXYNpoW6cqLamMVuio
RAgcp/evBL1yck4Z6P9rIfoLF29izkcrRzTj8LxqKxn0cknC8ZljFHyXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3hKYMFINlco8ZybqhqpbGH5Ih5MB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmNpoa2u
e+D4+uLS80P3jo0ELXi6wIwdQy47cVuzrUTnSWwcZ8z61PArMImvaiRrXXvkNq3H
j6OmExLirg2z28CpE8lFZMzEJZkVWHkPbBhTBog96192JoP2X396rxQtv7Khpw53
cQ4pjoNV2f2w6b2wBZGHxSNt2p3YWrs9Ia5jKTFTwjy1JchJla14ng4mRMjSOnau
vuEuBSrIxEDuBtnDowtu/iM0DqxuVTBK9lzJwtKlryo+rRm2/cuqYdC4oNkbE40F
z/F+kLwWE/ek46fGgSWUxnvhI4f1zDUl9H1tIfGJGDyADmVaZZIXAws41vHHB1Cc
HYAItKVvNolqog==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:49:05 2026 by rpki-client