Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: Xi3RucAuni4c2g7mQ6s0gLvYq2NDb8AECK1BlyXBjTo=
Subject key identifier: F0:57:40:B0:45:99:9D:AA:B4:F4:46:14:69:86:26:60:E0:75:92:D8
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019F878DFD3E9F094CA2751CE3729151F19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 19C4
Signing time: Wed 22 Jul 2026 02:00:56 +0000
Manifest this update: Wed 22 Jul 2026 02:00:56 +0000
Manifest next update: Thu 23 Jul 2026 02:00:56 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: MoWS9Y5ubCNhhkz6WMyCOO4Eaw+4FTx4sUhlde+vHXU=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:8d:fd:3e:9f:09:4c:a2:75:1c:e3:72:91:51:f1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jul 22 02:00:56 2026 GMT
Not After : Jul 23 02:00:56 2026 GMT
Subject: CN=f05740b045999daab4f4461469862660e07592d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b1:d2:bc:2f:e8:51:21:a1:4a:6b:65:2a:9b:
ff:bf:0a:93:7d:b2:b2:df:54:d2:f8:7d:05:59:df:
9c:41:aa:84:be:69:4a:76:4c:c1:ed:7d:0e:cd:83:
d3:b4:b5:56:01:c9:8a:b6:ce:0b:f8:eb:4c:88:9b:
26:cd:ba:4b:66:41:94:38:a8:65:f4:a1:66:50:b7:
33:f0:b4:d5:c9:f7:6c:f4:85:5e:e5:85:20:f6:35:
26:40:dd:ea:07:fd:ae:e6:5e:01:11:85:bf:6e:1a:
f3:e5:43:df:12:92:23:f4:29:6d:d8:04:4a:dc:a9:
9c:54:6f:3e:2d:2e:ba:a3:6c:0c:43:f7:b3:3f:fd:
f8:8e:ff:5e:17:47:bc:83:b7:d8:b6:ec:44:7b:31:
a1:49:df:1f:4f:aa:9f:17:dc:59:c5:8b:d4:63:33:
9f:11:b8:e1:78:40:4d:5a:ca:7c:87:6c:0d:e7:97:
2b:84:a7:35:e1:f1:7a:92:42:01:8c:07:1c:5b:e9:
4b:08:cc:31:b4:08:3f:02:53:0f:47:51:2d:88:87:
98:3f:51:3d:35:45:83:94:9a:60:8a:02:a8:6c:0b:
8c:12:e4:e6:ad:f2:a1:7a:e4:68:fe:89:4f:f3:03:
1a:8c:28:8a:67:79:18:47:bc:ef:47:67:23:84:97:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:40:B0:45:99:9D:AA:B4:F4:46:14:69:86:26:60:E0:75:92:D8
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:49:87:c1:f5:9e:d3:86:7c:53:67:ce:7c:09:d3:22:96:9a:
99:65:e0:14:5e:d5:52:b5:fa:6c:48:43:12:f7:4b:df:5c:7f:
cb:f5:c7:df:b0:4b:14:26:4a:53:6c:c6:f8:7b:07:33:ed:f5:
77:d5:91:18:38:2b:eb:91:31:02:e6:45:5d:4a:d7:2b:4e:95:
ce:75:c0:f8:04:a2:6a:ca:05:c3:81:09:f4:52:61:f8:da:90:
9d:c4:df:72:70:f0:b1:a4:87:b4:cb:f5:d4:03:7f:fa:ae:75:
65:38:a2:06:77:80:07:56:39:af:11:0d:6a:e2:eb:96:31:9c:
5e:04:56:b6:7a:7a:07:aa:78:10:b5:ae:89:e9:55:82:e7:91:
e9:41:55:92:0c:13:f3:db:c9:af:32:c1:d9:65:94:9c:c3:7a:
52:28:3a:c7:44:2d:bf:ae:17:7a:fc:1d:c7:54:2c:fe:13:b7:
13:fd:d3:2b:1f:1a:98:68:bc:a8:46:71:6e:00:a5:3e:05:54:
95:e9:60:e9:0c:36:e8:ab:50:eb:31:2d:8e:96:21:35:f7:3c:
46:6c:e8:f6:8d:a3:17:74:f6:b2:c1:28:f9:5d:fd:07:6b:9f:
3a:0d:04:b7:68:b9:63:87:0f:d5:1f:61:a9:8e:6b:95:fb:33:
87:31:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 12:41:39 2026 by rpki-client