Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: cAj9zApNtyzGcBDlsEhCPwdtU3+ahD5ZVGOVFo1z82E=
Subject key identifier: FB:AD:AF:06:60:2B:3D:BE:F1:7E:7B:2F:62:43:BD:FF:2C:DA:C6:29
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019F897C6471A35546801CB9ADCA0594DE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 19C5
Signing time: Wed 22 Jul 2026 11:00:58 +0000
Manifest this update: Wed 22 Jul 2026 11:00:58 +0000
Manifest next update: Thu 23 Jul 2026 11:00:58 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: t6/ygHnb9D7l5v4gpACtVvrRnai5OO2YXfUiZD7ENxM=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:7c:64:71:a3:55:46:80:1c:b9:ad:ca:05:94:de:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jul 22 11:00:58 2026 GMT
Not After : Jul 23 11:00:58 2026 GMT
Subject: CN=fbadaf06602b3dbef17e7b2f6243bdff2cdac629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:1c:ef:3d:ae:ae:a8:c8:79:b9:3c:e1:ea:
13:16:ce:54:6f:bc:48:1a:1b:82:0f:17:44:8b:74:
e4:b4:74:ef:5e:ad:7c:08:ff:f6:0c:7c:57:13:64:
9a:1b:38:00:e2:e3:36:5f:9a:84:c5:3a:b7:e6:95:
69:ec:33:cd:16:35:34:86:f2:dc:36:8f:44:8d:23:
02:d8:2a:bb:e0:7b:3d:08:8a:f1:22:5c:83:e8:b8:
83:b9:e3:e4:f5:3e:65:55:4c:f9:2d:21:4a:fb:73:
e1:53:f4:c6:f9:10:fd:bc:e0:15:c0:36:73:4a:67:
8b:0d:e6:d4:bc:b8:b8:4c:e3:7f:97:99:fe:d5:40:
ca:52:08:d6:f7:54:67:d0:7a:b6:a3:57:57:8a:f4:
db:2e:12:fd:d4:44:0f:20:c2:df:91:26:22:3b:e7:
85:9a:8f:62:4a:85:d3:59:b4:00:e6:0a:be:54:17:
86:5f:5a:b4:5b:1b:4f:35:6b:e5:9b:79:bb:f4:92:
33:d7:73:bc:fe:e3:da:fa:3c:7c:00:69:dd:f5:2f:
96:db:41:5d:3f:be:fc:55:a3:5a:ec:a5:37:e5:50:
e2:18:20:55:01:02:80:71:a9:bf:96:91:32:e5:8d:
2c:de:50:b9:81:aa:c7:8c:80:14:6c:21:09:04:8e:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AD:AF:06:60:2B:3D:BE:F1:7E:7B:2F:62:43:BD:FF:2C:DA:C6:29
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b2:62:02:cd:74:30:30:e9:89:6f:5f:63:e3:ac:64:08:d3:
e0:22:bb:76:6c:80:ff:55:d3:83:67:d6:28:89:91:19:6a:cf:
9b:1c:1d:b3:a4:19:13:75:30:9d:cc:fb:e5:b1:42:3c:d2:ae:
ae:b6:23:ee:4a:28:9e:2f:03:e0:52:6a:36:32:22:49:a7:e5:
38:8a:39:7b:b2:bc:56:8a:45:2f:40:6d:23:d8:2e:8b:c4:32:
61:83:fc:d9:7b:0f:06:79:57:ad:9c:30:c8:a1:ff:5e:16:03:
0a:ff:0f:16:53:11:21:31:27:48:31:3e:ce:f2:a4:a5:4d:34:
0d:35:9a:b6:b2:3f:0b:a7:37:b6:51:a5:8d:12:46:08:5a:39:
c4:5d:c4:dc:cd:8f:85:7e:3e:ac:98:ef:fc:74:7a:34:0f:0a:
04:e2:0c:54:fa:30:c9:23:83:95:50:3a:4b:cf:42:42:b3:db:
f2:70:4e:98:b9:9b:0a:bc:32:cd:d0:79:bd:5d:3b:14:49:d8:
e0:41:43:80:d5:fe:4f:4c:f2:bf:d5:a2:37:cb:0e:0f:1a:5a:
26:fb:30:5d:5a:74:3e:a7:80:59:bc:4b:b5:bb:c0:6c:6d:49:
dc:59:e2:4a:12:2b:2b:25:59:04:c8:15:5a:1a:e1:c5:f2:5b:
03:c7:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 13:40:26 2026 by rpki-client