Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: 3eyE17oqYYDyXIWrlH8Z/3cQMgTJwuK0tLz1DuzLA3k=
Subject key identifier: 7E:29:79:3E:80:6E:6F:9D:78:65:8F:DA:18:6C:FF:3E:30:16:8B:75
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019E205ADB80E76AB37AB6A875CA62367765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 08:01:25 +0000
Manifest this update: Wed 13 May 2026 08:01:25 +0000
Manifest next update: Thu 14 May 2026 08:01:25 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: QPwGJ1sdNdurxQzAP3IRscRY7iWEQdbLIdA3ydZYhlE=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:db:80:e7:6a:b3:7a:b6:a8:75:ca:62:36:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: May 13 08:01:25 2026 GMT
Not After : May 14 08:01:25 2026 GMT
Subject: CN=7e29793e806e6f9d78658fda186cff3e30168b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:8d:7f:48:ce:bf:33:c7:f5:d2:c3:81:76:
e1:13:42:4d:64:e1:40:32:2d:0e:45:85:52:e2:cb:
5d:f0:77:91:2f:cb:f2:67:5c:28:56:24:79:af:6b:
1f:2b:03:85:e8:27:4a:ab:4a:56:6a:63:81:1c:7f:
c1:e7:d4:5a:d1:a3:3c:02:2d:0b:70:1a:d1:2b:76:
1f:91:99:86:ff:3d:68:1a:10:e1:b9:d7:7a:4c:58:
f4:17:e4:b5:59:fa:90:39:47:e9:c5:a6:98:08:db:
94:75:bc:b2:5e:29:ff:11:98:f7:55:96:6b:96:10:
5e:4e:d2:38:1b:39:1d:d6:d2:a3:4f:3f:03:f7:da:
cc:54:b2:ae:a9:62:f9:82:67:d5:0d:43:cf:fa:ff:
5e:c5:d9:82:e9:42:32:37:d3:75:f1:22:55:08:e5:
33:44:c6:54:3a:9d:71:19:24:e5:86:fd:b7:ca:fd:
de:66:1a:a0:0e:90:91:55:05:fb:be:4e:e5:21:d9:
44:67:c6:2b:e7:de:88:70:51:16:b5:dc:43:ec:c4:
96:1b:4b:17:7d:c8:57:a8:7c:ab:a3:10:c5:9b:54:
c8:ac:e3:9d:bf:2b:43:71:f6:f6:b3:41:02:f4:91:
89:48:2e:e8:e5:eb:7f:75:34:91:a0:18:1d:2c:80:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:79:3E:80:6E:6F:9D:78:65:8F:DA:18:6C:FF:3E:30:16:8B:75
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:3a:de:c2:4f:2f:3d:81:b3:79:d2:25:e4:db:ba:9e:db:
e1:8a:6f:91:bb:98:0b:cb:5e:ac:45:e5:3c:7a:56:e1:2e:d5:
74:cc:77:10:69:b7:4b:ec:73:86:10:fa:b7:38:9f:e2:40:2c:
b3:ae:0e:eb:86:64:69:20:5a:59:7a:88:85:a3:e5:da:af:76:
dd:25:37:d6:54:c7:a4:77:ed:3a:90:8b:84:3d:06:d0:f7:d9:
20:45:05:aa:31:a4:89:84:cd:91:b4:19:71:b6:da:f1:6d:d4:
19:07:11:1f:f1:7a:ed:1b:59:09:ad:8d:29:7d:f4:54:17:f9:
52:1f:a6:5c:59:cc:1f:9f:ce:2a:14:44:68:42:be:ab:a6:02:
77:10:3f:bf:fc:02:ca:31:bd:31:0f:64:58:1b:ce:60:33:ad:
8a:2a:1e:8c:07:8a:7d:78:e1:b6:99:99:e6:e8:53:75:79:d8:
2d:fc:44:36:0a:f3:c9:a7:1d:a9:e6:4e:63:2b:f1:c9:62:08:
af:35:dc:af:06:e0:eb:09:a9:f2:d3:ed:41:f8:47:bb:8a:32:
e4:7c:73:fc:43:27:f6:3c:34:c8:70:e4:a1:6d:1b:d6:5e:bc:
2e:82:59:9e:08:bc:e3:64:80:2d:58:c4:ce:3c:67:dc:de:81:
6f:cb:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:19 2026 by rpki-client