Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: zVAwX5hIpEKRh5aNbSf9x51nHkdoQjTUajYjNZQlhoQ=
Subject key identifier: 57:40:2A:6B:2F:73:09:34:64:1D:CB:04:A4:0B:3A:BE:DC:87:C6:16
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019FA8620B4CF6742B83CCACAAA4011C6B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 11:00:25 +0000
Manifest this update: Tue 28 Jul 2026 11:00:25 +0000
Manifest next update: Wed 29 Jul 2026 11:00:25 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: Ks/aliiWpm+augXz3cCEMR37De0bp+5sgF8+O/iPVPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:0b:4c:f6:74:2b:83:cc:ac:aa:a4:01:1c:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jul 28 11:00:25 2026 GMT
Not After : Jul 29 11:00:25 2026 GMT
Subject: CN=57402a6b2f730934641dcb04a40b3abedc87c616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:21:18:b8:a3:fc:ac:1a:27:d7:7a:36:e3:
e0:ac:5f:aa:32:47:96:ea:28:55:de:af:5a:06:4d:
42:3d:a7:13:fb:9b:df:de:bd:28:7a:50:94:74:0a:
fc:9c:34:dd:7a:8c:61:13:45:93:3d:80:de:93:5e:
f8:d5:cc:54:c5:7b:7c:cf:27:2b:a1:03:41:0d:66:
76:5a:b9:6d:c2:1b:5e:63:f1:47:09:ca:c4:49:80:
ae:70:a3:1d:5a:37:53:27:aa:96:14:5c:fa:22:ed:
b3:3a:db:49:39:f0:e2:62:0c:53:2d:9d:10:5a:e5:
83:5c:a7:e6:8b:d7:92:c5:98:b7:02:b6:c6:18:a0:
77:83:b6:33:6a:2f:78:2d:8e:44:5d:30:7e:e9:92:
4f:ef:a8:b1:82:b4:24:f5:e4:f4:1b:bf:92:0f:91:
0a:d9:88:54:88:4c:27:93:00:f1:2f:f1:6c:13:e1:
a6:71:00:05:4d:35:a9:1c:d8:40:de:ba:48:05:cc:
bb:73:14:e2:46:df:ef:04:f0:38:37:da:fa:d0:03:
39:3d:84:0b:34:7a:78:45:b7:7f:81:38:44:dc:5c:
42:4d:e8:18:4c:10:d9:2f:85:93:da:65:c5:dd:54:
48:fe:3f:7a:e1:58:48:bc:91:08:ff:bb:5c:c4:ab:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:40:2A:6B:2F:73:09:34:64:1D:CB:04:A4:0B:3A:BE:DC:87:C6:16
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:43:10:66:16:49:25:2b:aa:e9:af:13:ce:93:d2:be:c2:
20:cc:25:03:77:59:37:08:8e:86:6b:d6:54:f5:33:8e:6f:53:
80:b3:ad:5b:8d:36:14:2f:4c:3f:6d:44:e2:d2:cc:98:fc:27:
38:bb:8c:85:e8:dc:16:a4:75:5d:f9:4d:3e:78:6f:5e:2a:bc:
76:22:0f:df:82:62:5e:8d:7c:91:6e:f3:1f:59:3d:85:99:35:
a1:cc:f0:fe:0b:20:44:80:df:3b:c2:22:b2:c9:f7:c1:2d:2b:
34:e1:b9:cd:02:6d:e4:25:bf:47:c8:ae:be:fb:ab:24:e7:ed:
52:1f:5c:32:8b:ad:35:83:7b:87:26:81:02:e6:8b:ed:e4:c4:
fe:78:25:09:1b:95:de:c0:78:64:d5:9b:29:89:f9:ce:e6:e8:
b7:1b:ee:37:1b:3d:4c:74:9e:c0:9b:50:3a:9e:0a:c5:9e:0e:
7d:8a:90:3c:38:d7:c6:f9:2b:3d:ee:a5:a6:22:b2:f2:84:83:
ed:19:b1:6c:a3:86:18:31:60:dd:0d:5a:68:25:a0:97:cb:2d:
60:f3:f9:3d:24:a3:0e:25:30:15:71:bd:9f:0c:09:87:cb:98:
5d:cc:82:16:b6:a9:7d:cb:fa:e5:04:53:c3:21:29:15:82:15:
12:c7:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:56 2026 by rpki-client