Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: PiDmL+91hM/0KZCmaNwncQHLKYXYXLYDgMw/vpHgpN4=
Subject key identifier: 2F:13:18:FC:61:92:88:CE:43:87:4B:CC:E9:3F:6C:2C:6D:4D:8E:44
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019E94392878BF2B476590DDB20DA854AE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1946
Signing time: Thu 04 Jun 2026 20:00:34 +0000
Manifest this update: Thu 04 Jun 2026 20:00:34 +0000
Manifest next update: Fri 05 Jun 2026 20:00:34 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: 5mjpEReugW5TamKwAM/aluihFvvizyGeWZDkbK1yKQc=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:94:39:28:78:bf:2b:47:65:90:dd:b2:0d:a8:54:ae:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jun 4 20:00:34 2026 GMT
Not After : Jun 5 20:00:34 2026 GMT
Subject: CN=2f1318fc619288ce43874bcce93f6c2c6d4d8e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:8f:eb:8d:42:ba:c4:ad:9a:fc:e6:0a:eb:
cd:e0:e4:a5:f6:26:01:24:da:c8:a2:01:25:eb:26:
45:ae:3a:ed:39:fb:8c:06:f7:a4:3d:a9:de:0f:05:
fd:ec:d9:e2:03:46:75:30:9f:c8:67:3e:33:47:cc:
3e:02:1a:a7:9a:75:1b:29:28:2f:c7:fd:81:34:38:
90:c7:f7:07:78:e1:d0:29:22:dd:d9:92:53:df:09:
4f:13:99:1e:3d:cc:45:6d:fc:bd:a9:21:9f:0d:bc:
03:ac:4d:bc:54:9e:1a:82:11:e0:04:d6:7e:88:ba:
7a:23:0c:10:2f:0a:01:fa:c7:01:4c:d6:df:48:7b:
ff:7e:70:61:ff:65:3a:fa:4f:b2:49:89:84:ed:30:
77:a7:ff:ea:ae:88:e9:d6:2b:2a:48:aa:b1:1f:ba:
6b:02:75:3b:92:52:8e:ef:4c:4e:18:e1:78:75:df:
e9:70:b7:08:0f:a3:5c:3e:42:43:71:c3:7c:fc:a9:
29:95:9d:9f:81:d2:bc:55:13:d5:d3:d0:db:36:2f:
13:9f:54:71:6c:d2:21:ac:83:d8:8c:b5:19:9e:e2:
fb:9a:94:69:88:bb:19:90:36:21:6b:ce:7c:87:8c:
d0:29:99:78:5e:0c:e3:dd:65:8a:95:ae:f8:e8:59:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:18:FC:61:92:88:CE:43:87:4B:CC:E9:3F:6C:2C:6D:4D:8E:44
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:14:05:fa:ec:49:ce:42:6a:af:d2:d8:c3:e8:73:d0:da:a9:
cb:ee:0d:83:07:4d:19:e3:64:43:d5:e4:06:21:6f:9f:45:b3:
ea:2e:d2:93:68:f0:e8:ae:44:87:8d:50:64:bb:f7:ed:30:c8:
93:1e:9d:0e:ae:f0:5a:aa:88:f4:9e:07:21:a7:15:e5:2e:96:
a5:11:77:58:70:38:36:c4:d7:3d:c3:85:09:ab:79:70:b6:a5:
b0:7e:2f:c9:ac:46:87:5a:e4:78:ca:e5:bd:20:c2:56:e4:5e:
ba:12:7b:0c:82:06:e6:6a:8f:82:3b:70:16:55:b7:01:9b:b0:
e8:72:6c:41:ec:16:d9:4a:31:4c:f1:19:2f:54:0d:f1:06:0f:
9a:76:75:81:76:01:8e:4c:f5:f1:28:84:d1:1b:c8:fe:aa:04:
36:d3:d3:80:99:45:2e:a7:9d:a4:58:52:02:d1:a5:23:eb:f8:
93:60:71:ac:85:92:af:56:76:d6:02:c6:29:a6:9c:bc:9f:36:
2c:42:a6:91:3a:fe:cd:b0:84:5f:43:52:58:40:59:ce:c6:40:
d7:67:b7:4a:f1:8a:10:78:22:44:ac:7e:b2:28:98:3f:8e:1e:
a4:fa:66:05:84:4d:14:9f:06:f3:7e:50:6a:71:fc:4c:57:dd:
c6:fe:c1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 00:05:10 2026 by rpki-client