Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: QuLOXReNP3pZZ4rlWxnxXKDK+k0Kp2ZBAiJ0cKpOdzM=
Subject key identifier: 23:3C:17:85:07:B9:7B:DC:04:19:D1:DB:48:B1:F7:78:69:74:3C:B6
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019CABA1C657D43D0C07A65268D51DEF0634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: FQX8W6iD9DoiShzCKW9C2HmGZ2U.roa (hash: UfYxk6hDu8dTwH7ejfJQD2c6gNzMV9u2bWb8a8AYgkE=)
2: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (hash: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0=)
3: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: qkPZuwEPTkqEL0VB/wpF3Ub7vNnwoWE6TzPb+8IVF0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c6:57:d4:3d:0c:07:a6:52:68:d5:1d:ef:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=233c178507b97bdc0419d1db48b1f77869743cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:fd:e8:24:e2:14:0f:11:9e:c5:07:01:8b:
d0:75:6d:df:46:ad:e5:6f:45:bf:fe:85:75:df:78:
26:0c:bb:cc:a0:63:a0:1b:1b:11:25:e6:02:7a:ce:
02:eb:37:19:44:82:9d:fe:5a:63:b2:98:ef:8d:1c:
bd:f6:9f:4a:0f:ab:cf:ed:a1:20:ba:b5:df:c0:e2:
55:7e:25:1c:a0:ec:7c:25:23:3c:4e:06:08:16:33:
19:95:77:1c:13:8b:fc:22:fa:42:17:65:59:73:54:
3f:5c:84:eb:20:1b:23:0a:5a:9c:79:c8:02:a1:b2:
9c:c2:4c:0a:fb:73:26:58:52:36:d3:c6:5b:96:c5:
de:f3:5e:45:fc:d8:56:ec:14:07:95:db:2b:a3:bc:
10:35:ae:18:1a:86:00:99:1a:9e:71:a0:4d:1d:6b:
c8:ec:9d:9b:82:99:d4:48:b1:3a:29:80:b0:98:f3:
8b:40:3b:68:b3:3b:62:15:b8:1d:a6:24:6e:d1:5e:
17:4e:2d:59:9c:62:25:eb:4d:8e:45:6f:c8:6c:f2:
82:cc:4c:bc:1f:31:27:49:df:79:00:e8:df:e5:93:
fe:d9:b4:fb:36:bb:f8:a3:3c:46:0d:ea:a9:67:43:
f3:8e:1a:97:9b:a6:bd:e4:b7:02:0d:29:0a:38:bd:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:17:85:07:B9:7B:DC:04:19:D1:DB:48:B1:F7:78:69:74:3C:B6
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:40:ed:67:6a:46:1b:75:4a:b0:2d:37:9a:aa:2d:65:7e:db:
91:57:2f:45:e4:77:8c:2f:c4:c0:88:4b:e6:a0:6c:b8:86:a1:
0f:96:da:6a:46:06:c1:97:98:9d:40:83:e3:2b:82:7c:6b:94:
33:df:1a:c4:6b:c8:87:10:fb:19:04:89:2b:64:10:1f:d8:fb:
85:1d:1b:4d:f3:85:f3:a6:0b:ae:40:a8:5d:96:80:2f:7c:d0:
4a:c2:ad:a2:ab:00:db:c3:ef:03:a4:eb:83:b6:a8:cb:f5:63:
82:e0:40:c5:12:1c:1d:42:16:17:83:6c:72:b0:39:4a:fd:25:
01:81:a3:f6:c7:9f:85:1e:f6:bb:40:f1:09:af:d9:39:cf:4a:
02:85:14:b8:30:88:a7:8c:41:36:f1:12:02:80:fc:7b:c5:82:
ad:29:c7:8c:1b:66:e7:73:7e:75:b7:dc:2e:98:d6:6c:65:6e:
cb:29:83:9b:e8:48:57:51:8f:a9:73:d7:7b:0d:62:b8:8d:26:
6e:53:7f:5d:62:01:50:27:22:01:16:29:da:02:1e:4e:73:93:
43:8f:3f:ed:f4:eb:ed:16:3b:ef:2e:81:61:b9:3b:03:f9:d3:
71:f1:9b:5d:b5:9b:55:1e:6f:ae:63:ec:c2:7e:32:6e:ba:a8:
be:da:74:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocZX1D0MB6ZSaNUd7wY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjYwMzAxMjMwMDMxWhcNMjYwMzAyMjMwMDMxWjAzMTEwLwYDVQQD
EygyMzNjMTc4NTA3Yjk3YmRjMDQxOWQxZGI0OGIxZjc3ODY5NzQzY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEf96CTiFA8RnsUHAYvQdW3fRq3l
b0W//oV133gmDLvMoGOgGxsRJeYCes4C6zcZRIKd/lpjspjvjRy99p9KD6vP7aEg
urXfwOJVfiUcoOx8JSM8TgYIFjMZlXccE4v8IvpCF2VZc1Q/XITrIBsjClqcecgC
obKcwkwK+3MmWFI208ZblsXe815F/NhW7BQHldsro7wQNa4YGoYAmRqecaBNHWvI
7J2bgpnUSLE6KYCwmPOLQDtosztiFbgdpiRu0V4XTi1ZnGIl602ORW/IbPKCzEy8
HzEnSd95AOjf5ZP+2bT7Nrv4ozxGDeqpZ0PzjhqXm6a95LcCDSkKOL38HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM8F4UHuXvcBBnR20ix93hpdDy2MB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikDtZ2pG
G3VKsC03mqotZX7bkVcvReR3jC/EwIhL5qBsuIahD5baakYGwZeYnUCD4yuCfGuU
M98axGvIhxD7GQSJK2QQH9j7hR0bTfOF86YLrkCoXZaAL3zQSsKtoqsA28PvA6Tr
g7aoy/VjguBAxRIcHUIWF4NscrA5Sv0lAYGj9sefhR72u0DxCa/ZOc9KAoUUuDCI
p4xBNvESAoD8e8WCrSnHjBtm53N+dbfcLpjWbGVuyymDm+hIV1GPqXPXew1iuI0m
blN/XWIBUCciARYp2gIeTnOTQ48/7fTr7RY77y6BYbk7A/nTcfGbXbWbVR5vrmPs
wn4ybrqovtp0Bg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:52 2026 by rpki-client