Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: mpOgAV8tjDg/mGCFUg/Hv6Rk3mPvyp46abwz5Jvra4I=
Subject key identifier: 42:4E:A6:CB:61:52:29:AC:EB:E4:CE:06:31:DB:BD:05:B3:39:34:E6
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019D9D0860D52165272CDF776BF62E7A0BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 20:01:05 +0000
Manifest this update: Fri 17 Apr 2026 20:01:05 +0000
Manifest next update: Sat 18 Apr 2026 20:01:05 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: YIuzWIV8ARHrjFtUY98ch+nFhW9l0CKQWCh7aq98+3g=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:60:d5:21:65:27:2c:df:77:6b:f6:2e:7a:0b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Apr 17 20:01:05 2026 GMT
Not After : Apr 18 20:01:05 2026 GMT
Subject: CN=424ea6cb615229acebe4ce0631dbbd05b33934e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:b8:4a:b0:9b:65:13:cc:9d:3c:40:9f:0c:
b0:f0:5b:6f:35:bd:ed:47:d9:1b:8c:5d:a3:88:11:
2a:3f:3b:d5:01:77:40:5a:26:3e:66:bb:4a:3e:6b:
52:06:fa:1b:c2:48:9e:cf:d5:cd:c2:5c:95:86:a3:
4e:a9:50:62:86:99:88:96:6c:8c:34:02:10:94:ed:
25:20:62:75:51:cf:c3:0a:75:5e:ab:83:71:a8:b6:
1e:3f:8e:a8:25:6d:8e:4b:2b:f2:d3:11:89:ac:55:
f8:f8:cf:27:34:f2:b3:f9:fa:8d:f9:71:6f:b9:e5:
22:83:30:ab:59:9d:99:33:63:5d:7b:08:ab:93:d9:
5f:60:f9:9a:7a:c8:5d:e7:b2:31:8a:43:56:71:7c:
30:e7:8b:ca:1f:aa:7d:db:86:1a:ae:57:c3:b5:47:
fd:39:8b:3d:54:32:47:12:56:88:e3:38:64:e1:fd:
1a:61:9f:d4:4d:1e:29:b1:8a:50:03:85:75:b3:0e:
13:66:b8:b8:75:0e:6c:46:84:b8:03:20:36:96:ba:
12:bb:a2:30:e5:23:65:44:9a:18:3c:34:21:7e:ed:
d4:d6:a7:fc:dc:86:30:5f:f0:85:cd:4b:57:63:f8:
42:2b:df:dd:a6:bc:58:6c:c4:8a:b1:f5:3d:bb:49:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4E:A6:CB:61:52:29:AC:EB:E4:CE:06:31:DB:BD:05:B3:39:34:E6
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:21:e5:ca:44:57:a6:79:c2:3e:01:02:da:a0:ed:75:2e:f1:
fa:36:d1:82:6d:99:cf:8b:5b:91:1c:c0:f6:50:b0:75:f0:fc:
a5:ea:35:4f:34:5d:84:22:85:47:3d:af:9d:f8:7f:4a:f4:8c:
9b:a3:60:50:d6:76:bd:34:7d:64:b4:b8:13:2a:2c:dc:0d:d5:
c3:26:4c:37:3d:37:bb:19:3e:da:db:b7:74:d9:96:0a:2e:08:
a5:ff:87:c7:92:2f:cd:d7:04:93:de:62:81:5c:5b:ee:44:9f:
67:d6:81:ee:f2:61:5a:27:03:01:a8:19:8f:86:cd:0a:48:1f:
8f:e4:8a:3e:e7:08:ef:37:ea:75:f1:3c:89:a9:b9:89:9a:14:
88:b7:bf:66:58:17:da:14:ef:04:5f:d9:90:b7:f6:c3:ec:36:
2c:0b:a9:bb:5c:f3:e6:2f:04:b9:a5:6a:51:e2:f4:d5:30:29:
40:9b:1a:73:62:d0:af:c6:5d:a9:96:18:8d:eb:20:f7:f3:02:
94:35:0b:22:9b:4e:07:04:7d:ab:58:a3:75:d8:5a:e5:5d:61:
77:f4:35:ff:b6:f3:c6:b4:da:b6:33:20:cf:bd:f8:60:d9:af:
08:69:54:2c:f2:0f:19:23:78:0d:d4:8b:f5:ed:26:6b:65:99:
b4:df:42:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCGDVIWUnLN93a/YuegvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjYwNDE3MjAwMTA1WhcNMjYwNDE4MjAwMTA1WjAzMTEwLwYDVQQD
Eyg0MjRlYTZjYjYxNTIyOWFjZWJlNGNlMDYzMWRiYmQwNWIzMzkzNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoW4SrCbZRPMnTxAnwyw8FtvNb3t
R9kbjF2jiBEqPzvVAXdAWiY+ZrtKPmtSBvobwkiez9XNwlyVhqNOqVBihpmIlmyM
NAIQlO0lIGJ1Uc/DCnVeq4NxqLYeP46oJW2OSyvy0xGJrFX4+M8nNPKz+fqN+XFv
ueUigzCrWZ2ZM2Ndewirk9lfYPmaeshd57IxikNWcXww54vKH6p924YarlfDtUf9
OYs9VDJHElaI4zhk4f0aYZ/UTR4psYpQA4V1sw4TZri4dQ5sRoS4AyA2lroSu6Iw
5SNlRJoYPDQhfu3U1qf83IYwX/CFzUtXY/hCK9/dprxYbMSKsfU9u0lLSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJOpsthUims6+TOBjHbvQWzOTTmMB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyHlykRX
pnnCPgEC2qDtdS7x+jbRgm2Zz4tbkRzA9lCwdfD8peo1TzRdhCKFRz2vnfh/SvSM
m6NgUNZ2vTR9ZLS4Eyos3A3VwyZMNz03uxk+2tu3dNmWCi4Ipf+Hx5IvzdcEk95i
gVxb7kSfZ9aB7vJhWicDAagZj4bNCkgfj+SKPucI7zfqdfE8iam5iZoUiLe/ZlgX
2hTvBF/ZkLf2w+w2LAupu1zz5i8EuaVqUeL01TApQJsac2LQr8ZdqZYYjesg9/MC
lDULIptOBwR9q1ijddha5V1hd/Q1/7bzxrTatjMgz734YNmvCGlULPIPGSN4DdSL
9e0ma2WZtN9C2A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:35:50 2026 by rpki-client