Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: 8FveeBgqqlhPpDTxYVc76Eo7PWL/iI0+ewthJSGHn/4=
Subject key identifier: 39:F2:65:79:A2:9A:7C:E5:F0:D4:14:5C:1D:89:74:F9:0D:11:74:F4
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01A1A63884FED91DE66377447D2B15C07144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1ADA
Signing time: Wed 04 Nov 2026 11:01:24 +0000
Manifest this update: Wed 04 Nov 2026 11:01:24 +0000
Manifest next update: Thu 05 Nov 2026 11:01:24 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: vYeW61t4OThxmsxz+QHtoMO1rcm/vRASjj8FxEm5KWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:38:84:fe:d9:1d:e6:63:77:44:7d:2b:15:c0:71:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Nov 4 11:01:24 2026 GMT
Not After : Nov 5 11:01:24 2026 GMT
Subject: CN=39f26579a29a7ce5f0d4145c1d8974f90d1174f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:9b:e4:c1:ee:09:21:c1:a5:fa:4b:f0:d9:
e5:10:b8:f7:02:81:86:fc:aa:81:bf:9a:8e:50:10:
6f:c0:85:25:81:5b:89:ca:36:14:8a:e3:3b:d6:67:
63:51:bd:f3:5e:25:2f:f7:3b:e1:cb:e9:9b:e3:6f:
7b:11:7b:8d:36:85:eb:32:bc:e8:08:5d:61:0c:78:
3b:18:c9:53:39:ea:c2:65:30:66:87:52:34:2c:45:
f9:63:d8:49:c5:5a:a7:1d:b7:55:dd:e3:bf:d7:1a:
7e:57:a7:d3:0c:8e:ce:63:83:0e:63:26:1f:c4:75:
02:66:5f:e4:59:48:a6:80:42:88:39:5b:bc:0f:52:
1e:90:75:dc:55:a2:69:5b:27:cf:22:c2:b9:b4:e9:
b3:8e:53:a2:45:a3:05:71:17:46:e8:4c:a9:c1:89:
ce:55:51:33:69:93:b9:cd:29:24:87:df:10:1c:32:
19:10:18:cf:08:ca:36:e9:8d:1d:f6:db:e3:52:bb:
f7:4a:6e:d2:c0:99:ec:81:3f:1d:3e:f3:17:4f:36:
c6:49:2e:b9:46:8c:0b:af:1c:b4:03:a1:ba:46:25:
e1:75:bc:3a:ca:74:58:b1:5f:77:15:ea:a8:5e:36:
a8:d4:0d:dc:68:6c:b5:db:64:a1:ae:52:3e:7e:07:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F2:65:79:A2:9A:7C:E5:F0:D4:14:5C:1D:89:74:F9:0D:11:74:F4
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:86:00:1e:e0:43:17:60:29:a6:61:fe:19:76:5d:69:4d:
d0:a6:23:d5:b3:cf:bb:c7:e0:e5:e8:68:6d:e2:44:9f:5b:ba:
e2:c0:b6:a8:b4:7b:ec:99:0e:80:85:fd:32:9a:4f:0e:61:18:
9a:73:f9:c6:3a:bf:25:aa:e7:76:89:46:8a:32:52:cc:29:09:
1f:19:4d:1c:37:f0:aa:ff:03:fd:d3:8b:1e:82:fd:9b:d0:77:
e1:ca:06:ae:cb:cc:55:6e:6a:ef:cb:80:59:e8:bd:4e:96:d6:
e5:7c:c8:7b:0a:3a:79:38:db:44:68:29:fb:19:b0:1f:8d:a0:
e2:74:cd:9f:8e:94:48:02:9f:e4:37:73:23:ca:48:c4:30:33:
b1:51:e0:3f:f8:22:81:e1:ec:5b:44:3b:8c:07:86:11:9b:74:
51:b2:c8:ec:35:7d:0b:c9:e3:11:2d:5f:45:bb:1a:13:d2:bb:
a3:7c:a4:49:98:4d:95:af:07:c6:a1:f4:8c:59:9b:7a:9a:54:
29:2c:6b:13:59:0c:e3:38:45:31:7f:1e:70:28:67:d0:d6:6a:
7e:b6:90:29:1a:fc:a2:ff:2e:cd:66:86:fa:ed:4d:34:da:8b:
38:36:71:72:4d:b0:97:8a:e7:34:49:c9:f1:ee:e4:e2:74:a2:
98:b2:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:32:51 2026 by rpki-client