Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: zJeMRj/u4RLS+Ne0cmPvDALL97e0kw85LSfE9hwOQ3Q=
Subject key identifier: 1D:0C:24:A9:82:4D:7C:37:25:C4:B3:7B:C0:2C:AB:C4:56:38:76:FD
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01A0B4D192E5CFE3193AF6071FC4B730DF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1A5D
Signing time: Fri 18 Sep 2026 14:00:28 +0000
Manifest this update: Fri 18 Sep 2026 14:00:28 +0000
Manifest next update: Sat 19 Sep 2026 14:00:28 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: GrRcOMDqlY+4AlZjhYkFAddAaNaahW+RFNLTemwoE/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:92:e5:cf:e3:19:3a:f6:07:1f:c4:b7:30:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Sep 18 14:00:28 2026 GMT
Not After : Sep 19 14:00:28 2026 GMT
Subject: CN=1d0c24a9824d7c3725c4b37bc02cabc4563876fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:57:07:30:50:8e:bb:5a:51:63:a9:53:1a:
10:f6:ba:3a:d5:f0:e8:df:0b:2d:82:92:d9:e8:e3:
8d:8d:04:f8:84:af:3e:ac:cd:c7:d4:19:ef:6e:db:
e8:b5:f9:59:d2:70:99:a8:11:39:e3:7a:b7:e1:cc:
3a:1b:3e:ab:96:1c:53:31:41:9d:01:67:ff:72:bc:
14:f1:5f:39:ad:be:c4:f8:98:3a:49:57:3c:1c:5a:
b3:7d:f6:df:09:35:c9:6e:07:07:f9:81:e2:36:42:
b1:4d:2c:31:a8:e6:17:e3:a1:7f:99:2d:ba:0d:d6:
1b:1b:77:d2:28:a0:90:6c:2a:eb:5d:fd:26:3a:8f:
10:48:6b:8f:a3:32:cf:4a:50:1f:df:e8:5f:53:7f:
b7:60:c5:e4:22:a5:87:53:c4:d6:db:18:34:5d:bc:
9c:0a:82:6a:a6:c3:38:b4:1e:6b:ed:c9:bd:98:93:
36:97:5b:d7:eb:d0:37:dc:44:69:c9:44:83:e1:94:
8a:a3:45:3f:da:aa:73:cb:58:51:88:3a:e9:ad:cd:
a3:a2:6a:ae:d4:c3:08:20:42:83:ea:75:19:79:3f:
ea:d8:b9:fd:58:31:ee:12:4b:df:1a:8e:b9:7d:81:
b7:8f:2e:be:24:29:eb:1d:56:e3:51:9c:30:61:f4:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:24:A9:82:4D:7C:37:25:C4:B3:7B:C0:2C:AB:C4:56:38:76:FD
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b0:2d:0f:8c:2b:c5:16:81:ab:a9:78:02:73:4f:dd:91:b7:
fb:65:86:d2:23:8f:c3:ac:9b:c5:93:ef:6f:8c:b5:a6:18:d3:
97:3e:f2:6d:de:3a:ae:ac:3a:84:74:91:87:0d:71:f5:57:e6:
32:3c:2d:42:d5:86:cc:4c:62:f7:c6:b5:55:4c:d4:50:d9:25:
1f:88:89:86:85:d6:09:f7:46:ef:78:de:6a:ef:9c:8c:db:6a:
32:36:a1:ec:6d:b1:d2:85:ba:c7:e1:ca:7d:bb:8d:d1:35:df:
83:35:9b:cc:6a:18:4a:4d:eb:5a:e1:bb:2e:f0:99:37:7d:0f:
c3:2f:83:de:30:3e:f6:b9:49:0c:33:61:7d:53:9e:25:f4:1f:
55:e8:68:8d:a7:12:6a:09:9f:22:51:ae:69:a0:ab:74:d5:ac:
7f:68:b2:36:51:ac:71:a0:ea:b4:e3:32:49:27:00:f1:6e:45:
4d:27:97:6c:73:ab:8b:92:30:fc:e8:57:72:2c:7e:8e:a3:f9:
67:25:de:9d:50:f2:ba:ae:99:45:f0:81:83:30:33:d9:c5:8e:
83:00:58:45:09:6c:15:7b:dc:5f:c1:cf:18:be:b3:97:a2:36:
50:42:3f:89:d0:76:f2:33:5c:c9:3e:66:84:57:04:0d:0e:49:
4c:c9:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:11:29 2026 by rpki-client