Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: 5aFjkyB87jH5VTsVg6Spfy1bXbX9uh8TQpp9IHUVRIA=
Subject key identifier: 21:B6:5C:B0:75:A9:99:B8:37:4A:92:1D:A5:43:04:7E:1D:3C:7D:37
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019D9B19A35F9126629A0590EB9A78E56EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:00:41 +0000
Manifest this update: Fri 17 Apr 2026 11:00:41 +0000
Manifest next update: Sat 18 Apr 2026 11:00:41 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: mq3Hajt89kX33cJkVUtPSrVRw7X/W60o4zwt65cVV5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a3:5f:91:26:62:9a:05:90:eb:9a:78:e5:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Apr 17 11:00:41 2026 GMT
Not After : Apr 18 11:00:41 2026 GMT
Subject: CN=21b65cb075a999b8374a921da543047e1d3c7d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:64:82:95:fa:d0:a1:fe:9c:38:23:d8:a8:
3c:18:b9:9a:00:f6:54:61:2e:f6:a7:58:16:65:19:
07:c7:f9:ec:46:e7:6c:95:48:13:7f:8b:5f:18:95:
8f:56:04:bb:39:28:54:c6:e4:4f:f0:fe:62:29:a0:
35:66:7e:7f:11:40:c1:de:e8:2b:c0:27:25:94:42:
c5:8c:8f:af:18:13:2c:ad:19:f2:bd:bf:23:4b:37:
ef:5c:37:f3:71:0d:ca:5f:a5:c4:5b:49:b8:be:eb:
6e:15:d8:35:fe:fe:58:04:ce:50:3f:b6:7f:10:43:
f2:bf:0e:cd:50:0c:20:8e:36:d6:6f:3a:7a:14:96:
7d:18:a5:6a:0e:29:da:ae:49:d0:d1:00:75:67:b1:
64:fd:d0:c1:2f:14:35:f0:32:3d:83:9c:06:21:2a:
07:7a:fc:19:1f:22:3d:d9:9f:b2:31:df:ea:25:59:
7e:92:39:12:03:10:c8:4e:a1:42:fc:05:e4:32:ac:
5b:9b:2d:02:0f:8a:7c:38:f2:11:97:e1:b8:60:44:
ed:b7:41:9a:c7:65:4f:bf:57:49:f4:c4:11:26:c6:
75:59:49:70:1d:43:35:f7:3e:fc:0b:77:72:ca:a6:
9f:71:e2:47:7a:ed:1b:9f:b1:7a:97:fe:3e:4d:56:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:5C:B0:75:A9:99:B8:37:4A:92:1D:A5:43:04:7E:1D:3C:7D:37
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ef:d9:31:ff:a4:a2:cd:76:3c:50:30:12:28:05:a8:b2:5b:
98:cd:20:7d:fe:4d:fc:f3:5d:e4:4b:a4:93:73:f6:28:ef:31:
3f:99:fb:5d:7f:f0:e4:73:41:ab:d6:1a:b7:85:fe:de:9d:52:
70:5c:bc:3c:04:fb:9d:57:9b:88:55:55:d5:59:78:2f:1a:3b:
f3:e6:a3:6a:3b:c5:e9:77:25:3d:d7:92:35:82:61:e2:c1:ce:
f6:10:98:eb:4f:bf:48:dd:10:96:88:38:b4:18:16:e4:2e:42:
83:0f:eb:99:c5:11:d8:49:06:ce:47:6d:bc:37:1a:f4:db:2c:
b7:4a:92:ec:c4:00:55:8c:3e:59:e2:ba:c3:24:de:fb:db:58:
e9:cd:ef:20:51:e6:f9:38:f1:6e:92:46:08:ae:58:fb:75:95:
9c:4e:9e:20:f0:7f:5e:21:65:65:a7:de:c6:11:e9:03:11:90:
3a:67:95:54:74:c1:f5:30:21:e5:c1:41:37:59:18:20:f2:f2:
17:fa:df:45:bd:80:e4:d5:70:20:8b:9e:7a:f5:2e:13:8b:7c:
ac:d7:75:fe:84:a6:25:81:29:ac:d5:5f:de:ff:58:75:6f:92:
1c:c1:ae:18:14:c9:9c:74:40:d6:cb:3d:4a:e3:f8:55:9b:9e:
d5:fe:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:57:06 2026 by rpki-client