Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: sbjLWXxH3KKQP8FaoJCR1hBlSNGoMz3rWXK8e3M5PFo=
Subject key identifier: 76:C0:A6:9A:89:90:33:27:0E:9A:94:39:75:EE:9D:8C:E0:CB:C7:B5
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 01A0713AE07E76840B34456E886FAAA73350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1A3D
Signing time: Sat 05 Sep 2026 11:01:19 +0000
Manifest this update: Sat 05 Sep 2026 11:01:19 +0000
Manifest next update: Sun 06 Sep 2026 11:01:19 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: LXEPmnyEfqTG0PpuQ8qzVz1hf/QxZIBy9mHK799gvnU=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:3a:e0:7e:76:84:0b:34:45:6e:88:6f:aa:a7:33:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Sep 5 11:01:19 2026 GMT
Not After : Sep 6 11:01:19 2026 GMT
Subject: CN=76c0a69a899033270e9a943975ee9d8ce0cbc7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:2f:c7:cb:6d:28:e1:ee:8b:7d:e4:77:61:
19:82:24:22:ff:f4:eb:78:95:bb:6a:6f:ff:31:49:
b3:e9:48:30:3d:27:d0:19:93:30:ad:a0:54:aa:95:
16:04:21:e6:5d:4b:67:d7:7b:23:34:07:ea:32:9e:
91:21:e2:dc:7c:ae:50:7d:d6:90:4e:0e:b2:40:8f:
85:ab:1c:5f:0c:17:c5:ab:15:33:cc:18:28:36:49:
9e:1d:34:b9:09:ab:00:b9:44:b2:45:ce:f1:73:94:
ca:49:6c:66:c5:e1:ce:c7:b3:7e:14:c8:35:79:59:
a5:00:17:df:5a:04:3c:29:da:e2:33:17:cc:c9:e7:
a7:51:7e:ef:34:e6:d5:cb:87:26:da:69:dd:f6:1c:
f0:94:36:6c:b2:45:ef:af:49:cc:2d:5e:85:d8:64:
a9:dc:04:2a:24:92:4b:05:c3:cd:74:c4:8f:7a:17:
2e:7f:12:f0:a4:04:30:ea:62:fe:d4:8e:d3:24:8f:
1a:7b:ea:5d:62:df:d6:da:44:f7:a3:26:87:d1:91:
03:da:05:2d:3f:76:f5:1d:a4:77:8e:8e:de:33:75:
0d:91:49:b3:c8:f4:3c:4e:76:d3:c2:c4:37:dd:f3:
1a:65:c7:de:51:b2:9b:0a:d1:4e:80:3d:f0:db:68:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:A6:9A:89:90:33:27:0E:9A:94:39:75:EE:9D:8C:E0:CB:C7:B5
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:05:2d:c6:3f:c6:a8:7f:2f:44:86:38:7e:1a:8f:40:1c:40:
29:30:99:09:ba:e6:b1:aa:b3:ee:c7:15:61:7a:dc:98:9c:98:
85:72:d4:36:59:15:d2:42:16:0a:dd:16:ec:e7:cf:e7:d1:8d:
f8:04:0b:e4:5e:e4:4d:d7:4b:a9:2f:c2:9d:6f:4e:a5:bb:d1:
5d:82:0f:ac:d8:f2:26:b9:aa:26:c4:a0:d5:a5:1e:2f:3a:af:
9c:e6:5a:ce:8d:0b:c2:a4:a5:b1:d6:f1:0d:71:a3:99:3f:54:
27:31:58:ae:1b:1e:62:e1:eb:62:63:7b:6c:95:94:2c:93:96:
3c:fd:25:d7:c1:ac:a5:2c:70:02:fe:4d:8b:3f:05:d1:d5:ef:
8b:3a:34:42:68:6b:03:23:bd:bb:0b:3c:9a:92:47:d1:6a:26:
a2:47:15:cd:8e:d3:b7:0f:f1:f9:10:c7:29:a5:c9:2c:f4:88:
06:a2:55:39:d7:b7:ae:95:02:4a:81:20:50:d3:fe:4a:a9:20:
ee:b0:3f:be:4a:f2:0e:61:96:77:a8:2c:24:ec:a3:68:c5:6a:
4b:6d:a6:a6:8d:ee:35:2d:ae:46:64:f7:6e:ae:ca:cf:fc:75:
21:ed:53:f5:76:e3:57:bd:42:9f:66:80:d4:a3:21:1a:c1:a0:
f6:3b:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 18:33:35 2026 by rpki-client