Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: wRDEuVqBVrktAORwvFPGufz9o93zALMzpmLu29ZkA9s=
Subject key identifier: 9E:02:9E:A2:D5:68:15:A2:A8:A1:9E:08:86:08:10:C9:10:08:F8:45
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019CB549C6021C22A2F126F2FAF6B3E9C8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 184E
Signing time: Tue 03 Mar 2026 20:00:36 +0000
Manifest this update: Tue 03 Mar 2026 20:00:36 +0000
Manifest next update: Wed 04 Mar 2026 20:00:36 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: kNKUTA+DuSmUqRg9Kt01TggevvYu+TMorG3hkv8CgYE=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:49:c6:02:1c:22:a2:f1:26:f2:fa:f6:b3:e9:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Mar 3 20:00:36 2026 GMT
Not After : Mar 4 20:00:36 2026 GMT
Subject: CN=9e029ea2d56815a2a8a19e08860810c91008f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:38:c7:d8:64:db:2c:c5:c1:7a:ca:bc:be:
c5:b6:5e:1f:91:92:16:50:f5:af:3f:12:7b:cb:46:
cc:5c:31:8b:05:bc:23:68:22:87:4d:23:ae:20:f1:
8a:36:58:53:dd:07:d3:8c:06:ab:ed:ec:29:68:15:
1d:96:50:bf:81:56:8a:28:be:95:da:28:37:ff:6d:
b1:87:18:f9:ba:99:42:e6:01:8c:cc:6a:76:59:c5:
ef:dd:2a:50:77:6f:71:d4:36:1f:9a:3b:18:cd:57:
2f:c8:17:c9:4c:e4:0d:f5:34:ee:81:56:7a:90:be:
62:99:ff:20:2f:d7:55:3b:02:e4:22:94:df:6b:9a:
41:0f:d7:86:62:70:5b:30:0a:81:cd:52:58:ca:cf:
91:b4:6e:b8:2a:90:c1:3b:df:d1:6d:a2:0c:82:fc:
83:b9:19:cc:38:6a:54:88:b3:7e:bf:94:56:c5:a6:
61:80:30:04:1b:d8:cb:2b:de:36:03:8f:f0:4b:28:
6f:23:b8:9b:db:79:89:87:6f:53:19:5f:21:67:1a:
35:29:50:51:78:4a:13:d9:e1:fd:c7:1e:7f:b5:b6:
ec:23:d2:00:21:67:a9:f4:a7:87:4e:77:c4:04:ba:
dd:7d:21:09:ed:d0:56:9e:c2:c1:df:b8:be:56:20:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:02:9E:A2:D5:68:15:A2:A8:A1:9E:08:86:08:10:C9:10:08:F8:45
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:03:3b:d9:4a:12:fd:ed:47:04:13:b7:5e:5e:ca:99:78:
5d:1a:b9:5d:8a:1a:03:17:53:f2:35:20:b3:53:56:cf:56:ef:
c6:e4:b0:3b:d0:9e:98:bb:ce:55:80:15:60:02:2c:8a:46:70:
1d:f2:88:1b:85:a5:29:8a:37:96:b7:bb:98:57:f0:48:09:a6:
c0:fb:c6:ef:52:2e:7c:b6:9b:cc:8d:67:f8:b7:d2:af:6b:a1:
7b:34:99:95:8b:49:ab:ea:18:6d:6d:80:f8:a2:ad:4b:e9:69:
38:01:a0:c0:c8:b4:da:12:06:39:7e:40:6f:0a:9e:64:a1:64:
c2:f7:d7:0a:b1:dc:13:19:2c:75:17:ab:f5:89:62:0d:95:b5:
a0:ce:55:98:4d:85:4a:90:12:c4:fe:e2:82:8e:51:02:01:db:
33:cb:ff:e0:b7:f4:01:31:fd:83:5b:41:e1:7d:b4:94:74:81:
14:7a:5c:2b:67:82:d6:a4:56:1e:57:75:a7:7e:13:97:0d:47:
94:d5:78:39:85:54:41:75:1c:47:74:c1:81:c0:f3:0f:56:33:
25:d7:de:64:8e:7f:4a:27:9b:3a:6d:f7:7b:e8:fd:54:42:4a:
0d:77:51:c9:15:3c:51:4a:13:6b:fa:9e:7b:88:0e:81:dd:8e:
f3:31:ac:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy1ScYCHCKi8Sby+vaz6cjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjYwMzAzMjAwMDM2WhcNMjYwMzA0MjAwMDM2WjAzMTEwLwYDVQQD
Eyg5ZTAyOWVhMmQ1NjgxNWEyYThhMTllMDg4NjA4MTBjOTEwMDhmODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MI4x9hk2yzFwXrKvL7Ftl4fkZIW
UPWvPxJ7y0bMXDGLBbwjaCKHTSOuIPGKNlhT3QfTjAar7ewpaBUdllC/gVaKKL6V
2ig3/22xhxj5uplC5gGMzGp2WcXv3SpQd29x1DYfmjsYzVcvyBfJTOQN9TTugVZ6
kL5imf8gL9dVOwLkIpTfa5pBD9eGYnBbMAqBzVJYys+RtG64KpDBO9/RbaIMgvyD
uRnMOGpUiLN+v5RWxaZhgDAEG9jLK942A4/wSyhvI7ib23mJh29TGV8hZxo1KVBR
eEoT2eH9xx5/tbbsI9IAIWep9KeHTnfEBLrdfSEJ7dBWnsLB37i+ViAPnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4CnqLVaBWiqKGeCIYIEMkQCPhFMB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFUDO9lK
Ev3tRwQTt15eypl4XRq5XYoaAxdT8jUgs1NWz1bvxuSwO9CemLvOVYAVYAIsikZw
HfKIG4WlKYo3lre7mFfwSAmmwPvG71IufLabzI1n+LfSr2uhezSZlYtJq+oYbW2A
+KKtS+lpOAGgwMi02hIGOX5AbwqeZKFkwvfXCrHcExksdRer9YliDZW1oM5VmE2F
SpASxP7igo5RAgHbM8v/4Lf0ATH9g1tB4X20lHSBFHpcK2eC1qRWHld1p34Tlw1H
lNV4OYVUQXUcR3TBgcDzD1YzJdfeZI5/SiebOm33e+j9VEJKDXdRyRU8UUoTa/qe
e4gOgd2O8zGsBQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 06:13:26 2026 by rpki-client