Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: 0x+X+ObO2P1kIkxrNF4BLuTa07pmkpBJ+41DriPY4K4=
Subject key identifier: 58:F3:50:6C:B0:B0:E7:E8:D0:5A:B3:5A:CB:94:1A:7F:27:A3:D9:2F
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019D992B241894EA8983E3F957705BAF243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: cDfpEkG51wK6jzgucWT6WzdU5BsgeXWbTcxAgq2C4Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:24:18:94:ea:89:83:e3:f9:57:70:5b:af:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=58f3506cb0b0e7e8d05ab35acb941a7f27a3d92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:ab:11:45:9a:04:ba:74:ea:db:f3:d1:3c:
b2:f6:1f:62:ef:a4:68:09:ec:0a:06:70:7c:71:e6:
9d:1e:da:8f:ae:8f:2a:e8:5f:4d:f2:57:7f:ea:7c:
d1:a4:ca:be:af:98:d0:7a:ec:b8:97:f7:fc:d4:a0:
e2:e3:c3:92:99:a9:ab:40:43:88:04:bc:6b:48:38:
84:30:c3:fe:e4:36:57:b9:10:ef:fe:51:e0:1c:7c:
13:89:b3:58:a8:b5:6b:05:09:3a:37:43:36:cd:60:
1c:5e:8c:01:80:87:c1:a5:1a:c3:7e:4c:e6:71:06:
f5:20:84:06:35:16:cd:de:06:c9:d1:fc:da:0e:f6:
0d:0f:49:60:4a:4c:df:09:b5:6d:68:c5:98:82:31:
a0:67:1f:f6:96:7a:5c:1e:08:9c:9c:f0:82:de:fd:
da:23:a4:4b:89:22:c9:f5:33:71:92:04:95:ad:0d:
e2:38:66:62:b0:66:c0:fa:1d:ee:b7:02:51:7b:8b:
55:89:e3:d9:c3:c9:ca:bc:17:ea:48:c6:bd:2f:1a:
bf:b4:30:83:f4:65:c4:2b:30:a5:26:21:3e:a9:4a:
29:33:55:f8:0e:0c:18:f4:13:ea:3c:70:9c:c4:66:
bd:16:84:3a:46:58:d8:b5:be:28:a1:34:35:9b:95:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F3:50:6C:B0:B0:E7:E8:D0:5A:B3:5A:CB:94:1A:7F:27:A3:D9:2F
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:46:55:2a:70:2c:72:91:44:57:b3:c9:dc:1b:38:d6:91:
50:2c:ae:40:ae:fd:f3:14:46:fc:aa:07:9b:6e:20:4a:af:be:
55:1c:2e:7b:ae:da:65:64:ae:9f:69:c2:b9:3b:9e:49:d6:e5:
7b:05:df:2d:68:01:c3:a0:77:1c:cb:57:83:58:c6:43:0a:5d:
49:7e:16:ed:40:34:37:69:64:72:a5:f7:d5:64:e1:a1:67:92:
2d:5a:76:69:cf:fb:c0:f2:b8:b8:0f:d1:61:03:29:7f:08:d5:
d5:03:80:ed:13:6c:a9:d4:b0:e2:62:23:32:ed:c0:4d:6e:86:
12:16:5a:c6:40:63:a3:8c:39:6e:46:0e:67:71:4b:8f:77:27:
fd:d4:cb:0f:cd:8a:c7:1a:82:85:a3:4f:31:50:50:d1:c1:03:
ea:d1:e1:83:7f:c4:b1:82:e4:cb:bf:5b:ab:76:42:85:08:47:
99:41:72:f6:6e:53:ea:20:8a:ab:b2:66:b5:4b:5e:9a:4b:37:
6d:e2:43:b7:74:eb:7e:52:1a:b8:31:6b:a8:0f:40:41:0d:ed:
94:bb:1a:4f:4b:fd:98:73:d0:2c:37:69:e8:04:84:b3:de:ff:
2e:72:a6:44:30:2c:bc:24:3d:46:fe:f8:97:93:42:cb:40:b0:
49:ed:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:19 2026 by rpki-client