Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: C8EKMU6Pkg/yYAw9ScruroT2uncGbZ/Kkt36fkutoeI=
Subject key identifier: AE:75:D5:9B:7A:1E:70:30:30:FC:B2:4F:33:A7:71:72:D5:1E:C4:86
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 01A18F0B1717DEFE6BA28523D172C572D3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1AD1
Signing time: Fri 30 Oct 2026 23:00:30 +0000
Manifest this update: Fri 30 Oct 2026 23:00:30 +0000
Manifest next update: Sat 31 Oct 2026 23:00:30 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: sPKqNMUmFbb9P6AohWCXTaW0khm/jEJIc68HgpO1LnA=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:17:17:de:fe:6b:a2:85:23:d1:72:c5:72:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Oct 30 23:00:30 2026 GMT
Not After : Oct 31 23:00:30 2026 GMT
Subject: CN=ae75d59b7a1e703030fcb24f33a77172d51ec486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:ae:e6:ba:ce:00:31:f7:df:e3:a5:c8:e7:
dd:75:94:87:e3:a4:02:7e:31:e0:49:07:22:8b:c9:
2e:f0:51:5e:d9:40:56:56:c4:17:68:d9:86:0f:b4:
f9:d3:06:98:df:9c:0e:58:fe:3e:25:ca:8b:24:9e:
b9:b2:f2:67:4e:2c:ff:32:85:c9:ce:85:77:69:73:
a1:f1:ed:8d:1a:d3:ea:9a:2f:23:fe:e5:c2:1f:14:
47:36:88:52:e2:03:c1:d8:d5:d1:ee:b5:a6:98:77:
1f:3f:ab:63:bc:97:fe:93:1e:62:8e:7e:6a:6a:3e:
fc:1c:a6:bf:dc:63:19:57:c7:f9:bc:e4:f2:9a:30:
dd:9f:50:57:6d:ad:9b:a6:97:83:97:e4:4e:81:ad:
95:80:e1:6d:3f:36:a1:fd:9c:16:f0:54:be:05:05:
ba:24:fd:49:5a:d6:48:1a:2e:50:1e:c0:18:2d:80:
f9:db:e7:05:c8:39:f5:ba:82:0c:8c:71:2c:57:2e:
d8:f5:1d:c3:d0:90:f1:84:b0:24:cb:97:7b:bd:b1:
2d:06:80:6e:42:8a:f6:d3:23:63:ae:da:c5:4f:44:
99:12:a7:77:f4:2e:18:06:01:9a:64:2c:54:45:83:
42:85:12:05:c8:d4:e1:30:7b:8b:46:6e:a8:20:8a:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:D5:9B:7A:1E:70:30:30:FC:B2:4F:33:A7:71:72:D5:1E:C4:86
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cc:ec:a3:c5:c1:98:8a:99:1d:4c:c4:dd:a4:6b:50:b9:be:
57:e2:5b:d9:25:0b:84:25:96:4e:e7:9a:86:c0:d5:62:2e:1c:
57:ea:d3:b1:a1:40:82:54:d5:8e:94:a2:a5:62:03:68:72:de:
23:db:f5:48:c8:f4:b1:69:b2:99:9c:4f:26:e3:94:47:41:9a:
26:1d:4c:d9:31:bb:e0:10:40:ae:14:8a:e3:97:46:aa:99:ce:
4b:4e:c9:66:62:c1:f4:48:d8:cf:f9:2a:1f:67:30:e5:ca:06:
58:70:42:0c:d7:a9:39:b2:e7:6f:28:55:9a:a2:ea:20:95:27:
f6:80:ba:a2:87:72:80:2e:28:51:c5:40:9a:f9:da:d1:3e:27:
82:f0:4e:4f:cd:13:67:2e:cc:df:3b:a3:ae:22:98:60:60:17:
44:2c:4e:34:e8:ed:3b:8e:05:07:f6:4a:7a:8d:59:de:bd:83:
ec:d7:6e:4f:fa:2a:13:69:6e:8a:ef:a6:aa:70:db:6e:ce:81:
8a:82:92:cd:51:22:98:cc:cb:b1:63:c4:25:fa:1c:49:35:3b:
81:63:75:02:c9:0d:fa:53:77:c3:02:6a:16:3a:54:cd:5f:54:
75:13:e9:38:ca:b2:7d:7d:1a:bb:ee:35:eb:72:3e:bc:d3:71:
12:fb:e8:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPCxcX3v5rooUj0XLFctPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjYxMDMwMjMwMDMwWhcNMjYxMDMxMjMwMDMwWjAzMTEwLwYDVQQD
EyhhZTc1ZDU5YjdhMWU3MDMwMzBmY2IyNGYzM2E3NzE3MmQ1MWVjNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM2u5rrOADH33+OlyOfddZSH46QC
fjHgSQcii8ku8FFe2UBWVsQXaNmGD7T50waY35wOWP4+JcqLJJ65svJnTiz/MoXJ
zoV3aXOh8e2NGtPqmi8j/uXCHxRHNohS4gPB2NXR7rWmmHcfP6tjvJf+kx5ijn5q
aj78HKa/3GMZV8f5vOTymjDdn1BXba2bppeDl+ROga2VgOFtPzah/ZwW8FS+BQW6
JP1JWtZIGi5QHsAYLYD52+cFyDn1uoIMjHEsVy7Y9R3D0JDxhLAky5d7vbEtBoBu
Qor20yNjrtrFT0SZEqd39C4YBgGaZCxURYNChRIFyNThMHuLRm6oIIpKOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK511Zt6HnAwMPyyTzOncXLVHsSGMB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMzso8XB
mIqZHUzE3aRrULm+V+Jb2SULhCWWTueahsDVYi4cV+rTsaFAglTVjpSipWIDaHLe
I9v1SMj0sWmymZxPJuOUR0GaJh1M2TG74BBArhSK45dGqpnOS07JZmLB9EjYz/kq
H2cw5coGWHBCDNepObLnbyhVmqLqIJUn9oC6oodygC4oUcVAmvna0T4ngvBOT80T
Zy7M3zujriKYYGAXRCxONOjtO44FB/ZKeo1Z3r2D7NduT/oqE2luiu+mqnDbbs6B
ioKSzVEimMzLsWPEJfocSTU7gWN1AskN+lN3wwJqFjpUzV9UdRPpOMqyfX0au+41
63I+vNNxEvvomA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:42:32 2026 by rpki-client