Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: IgABN/59tFrlb00v8xVf9Wl40HdjY+mYgsDdeeVTCWk=
Subject key identifier: 4E:11:5A:27:9B:7F:AE:0E:16:6F:B6:74:A5:14:54:0D:4A:75:66:79
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019D0E201717B0FAC5E002F71B6F69846C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1879
Signing time: Sat 21 Mar 2026 02:01:16 +0000
Manifest this update: Sat 21 Mar 2026 02:01:16 +0000
Manifest next update: Sun 22 Mar 2026 02:01:16 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: fCAIDBZe5cj7pCAoiqe9RLasBkcT4exIil9XAroX4II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:20:17:17:b0:fa:c5:e0:02:f7:1b:6f:69:84:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Mar 21 02:01:16 2026 GMT
Not After : Mar 22 02:01:16 2026 GMT
Subject: CN=4e115a279b7fae0e166fb674a514540d4a756679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:df:87:ce:a4:01:16:ee:1d:41:05:e9:f4:
7c:ab:fc:12:e3:35:fe:42:9d:b2:64:b0:ad:38:f1:
60:8e:51:15:b9:7a:9c:c9:70:1e:3b:50:ff:4a:1c:
a3:16:bb:b8:b4:79:a0:d5:72:d6:6f:8c:c4:60:62:
25:c3:96:e5:52:37:8c:c9:68:61:5b:f9:09:22:90:
dc:25:03:9a:d4:f3:e7:32:85:f2:d4:42:1b:c1:e8:
a7:a6:d6:4f:b2:52:50:37:44:59:51:23:46:38:55:
ad:1b:e1:a4:16:ed:fe:05:22:40:63:5c:d2:b9:31:
e9:5f:7c:a5:5c:2a:36:82:47:a1:e7:3d:7e:c3:1e:
80:fc:5f:5e:30:d0:c4:31:0d:5a:3b:8a:b6:ac:9e:
93:ed:e3:65:ea:88:32:71:14:1b:6e:94:99:6f:1d:
94:95:dc:0c:9b:9a:be:75:a2:f9:c7:8b:f9:fb:52:
dd:b8:1c:01:18:1d:24:93:83:b1:a6:2a:c3:0a:9d:
43:0b:f4:1f:e4:bc:54:27:e0:eb:5f:f8:9b:cd:9a:
f5:50:f7:be:b1:06:e4:1b:3e:73:ea:aa:14:d7:58:
18:21:46:bc:f3:44:ab:ef:88:e2:d4:59:14:97:db:
0b:c2:da:88:86:91:9d:51:33:af:88:4b:50:c6:57:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:5A:27:9B:7F:AE:0E:16:6F:B6:74:A5:14:54:0D:4A:75:66:79
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:7e:78:d6:a9:7f:e3:0e:95:87:a2:86:91:f6:7b:01:c6:
2a:39:e2:14:4b:d7:97:8e:4d:14:f7:bb:e9:25:61:77:e1:e9:
24:a9:4d:37:48:a0:d4:9b:84:4e:f7:7b:77:80:08:60:7a:41:
00:f7:7b:4d:a3:51:a2:b6:a2:e0:19:e5:40:b3:9c:1a:8f:2a:
47:cb:98:c0:24:98:1c:82:65:5d:48:92:a1:ce:89:da:98:ab:
a6:60:7f:08:92:9e:a3:8f:34:f4:7c:0c:66:75:c0:74:f1:de:
60:8d:42:64:a3:36:e2:26:62:e6:8f:9a:43:d8:4a:35:cb:52:
e1:be:b7:21:2a:b4:26:63:dd:3c:fc:18:38:5b:c0:e3:bd:4b:
2b:33:48:2f:e1:29:46:15:76:41:7b:3f:2e:5b:52:1c:09:59:
5e:c2:ff:16:8b:c3:ea:0e:3c:db:bf:01:52:34:78:80:c3:46:
8c:3c:83:de:dc:c9:9d:ec:65:df:61:80:03:ef:74:e2:97:45:
0e:12:37:f9:30:20:20:4c:86:bb:7f:6c:c5:5f:33:41:28:51:
3d:59:f8:72:3d:9d:2e:cf:5a:1b:8f:d5:f1:fe:72:82:67:54:
82:22:b6:56:15:1b:34:19:0e:fd:63:9c:b7:61:d5:36:20:1c:
c0:78:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:13:33 2026 by rpki-client