Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: hzWqeTj7avNcpeg7VrZbFksRd2zywcvQRQcyBiH5ZCg=
Subject key identifier: 94:B3:AC:F7:A0:BA:37:1C:AC:31:9C:05:BF:64:51:7A:65:C3:BD:6C
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019CABA26043AFF8D04D2DC4A8B5F9B9E80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: DBQMDXBG7S/Wz6iSwJxq73MAopCXKKc4wqFZ7CLFICY=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:60:43:af:f8:d0:4d:2d:c4:a8:b5:f9:b9:e8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=94b3acf7a0ba371cac319c05bf64517a65c3bd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:b4:76:7b:bb:fe:a1:96:31:27:1e:55:5a:
bd:4b:d0:fc:e7:dc:14:95:a1:2a:31:04:a2:b1:e4:
81:27:fb:9e:7c:dc:99:5a:5d:40:61:be:a1:b5:0e:
26:2d:26:cf:d4:89:bf:1f:28:3d:69:4a:04:73:6a:
47:27:37:75:9b:e2:de:63:19:7a:74:3a:5e:4c:ec:
3d:f5:27:36:d2:54:f4:1d:f2:bd:98:78:b9:fc:a8:
43:8d:63:d7:4d:a5:b5:ab:7d:de:74:9f:e2:af:57:
7f:cd:00:63:a8:8f:83:38:3b:94:b8:c0:5f:0f:9d:
d3:c5:1d:3a:a0:23:5f:7e:90:cc:6c:9e:c2:ab:0a:
09:82:a8:7f:92:93:bb:55:96:0e:ec:ad:fb:3e:15:
25:7f:8e:b6:b8:93:14:4e:b9:56:19:7b:db:19:7d:
94:1c:7c:5c:f2:06:49:5f:68:ea:fe:d9:ca:5f:31:
87:d0:3a:e6:6b:5b:79:f6:45:fa:54:29:81:26:00:
ac:3a:b0:23:bf:6e:c2:b8:fa:31:e5:9e:1b:45:88:
69:02:dc:2c:5f:c4:aa:2b:5a:df:79:9a:bc:e8:56:
70:21:f9:eb:05:0b:33:46:6b:69:f5:e7:dd:e9:0f:
c9:6b:21:e8:4f:9e:17:33:51:9e:f6:88:54:1f:5f:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:AC:F7:A0:BA:37:1C:AC:31:9C:05:BF:64:51:7A:65:C3:BD:6C
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ef:b7:1d:ac:dd:53:fd:c2:da:6e:79:d7:1d:bb:97:cb:2e:
28:5f:5e:6b:d2:d1:e7:86:a7:72:84:11:fc:3c:48:4c:2e:2f:
04:20:20:06:db:c9:48:8f:a6:e4:4c:4a:3a:43:e3:cd:e3:55:
8e:2d:c0:03:39:5b:e7:c3:27:e0:ef:e4:3f:de:88:54:b8:f0:
33:d3:8b:17:f8:ed:d6:57:d0:ed:ff:ed:70:e3:a3:a3:02:53:
02:56:57:65:14:d0:4e:e8:34:30:4b:17:50:84:17:0d:6c:d8:
5c:b0:2e:60:b0:6d:a9:b3:01:f3:10:77:21:a3:7d:63:9e:12:
0c:7d:a8:03:a7:c3:01:bd:02:66:39:dd:da:53:92:b5:bc:1d:
72:73:d2:d2:d3:7d:f4:9a:1a:8e:49:04:5f:85:13:1e:57:6b:
df:cd:54:00:29:4b:a7:8a:34:52:4f:d8:c0:82:ba:46:4f:0a:
c8:22:c8:36:2e:27:68:e2:07:ad:c8:74:d2:4f:ad:e5:c6:67:
0d:ae:2c:c1:94:08:72:63:2d:93:a7:90:eb:88:b3:7a:b5:46:
59:05:cb:ea:91:04:82:06:a2:42:be:85:45:23:cf:04:9b:aa:
a2:de:cc:bc:5e:8c:ce:bc:77:61:74:05:4d:ca:02:10:8c:f8:
15:27:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:20 2026 by rpki-client