Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: VdZ0Ocsm4DzqZY5GmLmUhqvyKcM4HbK/P2OvaFsufWo=
Subject key identifier: F2:4C:88:7B:96:25:73:06:01:A4:B9:57:B9:47:9F:DB:A7:0C:72:CF
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019F9512AC7B804E977EF5364F1575E75FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 17:00:56 +0000
Manifest this update: Fri 24 Jul 2026 17:00:56 +0000
Manifest next update: Sat 25 Jul 2026 17:00:56 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: 4RLDLY+dFiCcWr6WDr7T+LOkw8daXlVbPJWDLJTlspM=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:ac:7b:80:4e:97:7e:f5:36:4f:15:75:e7:5f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jul 24 17:00:56 2026 GMT
Not After : Jul 25 17:00:56 2026 GMT
Subject: CN=f24c887b9625730601a4b957b9479fdba70c72cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:55:07:a6:af:62:dd:d3:56:ca:43:e9:5c:
50:3f:5a:39:78:66:09:fa:d9:95:0c:e7:7d:ba:ff:
0a:ec:a3:6b:81:87:fc:c3:a9:e1:e9:54:fa:ae:a1:
f9:d1:27:35:90:80:46:09:44:b5:94:30:cf:60:56:
e0:95:2b:bd:d0:48:ea:ea:c2:20:58:ee:04:28:e6:
6f:19:02:35:bd:82:fa:a1:31:eb:67:c1:74:f1:31:
f3:08:89:7c:69:cd:d6:6b:76:f2:f4:24:2f:11:15:
60:26:d7:ef:cc:bc:1d:12:42:18:87:84:d0:a5:3f:
85:98:73:9f:6b:41:73:7b:dc:31:45:6c:35:df:55:
61:92:7d:5d:0b:12:c2:9b:83:6e:1f:63:99:bd:8f:
a2:a8:bf:f8:15:66:f7:49:a2:ce:a3:04:63:6e:06:
b3:fc:b5:7e:eb:a0:0d:d5:96:95:c6:2d:ea:3c:d1:
d4:ef:63:53:c4:49:9f:07:d3:09:15:fc:22:bc:6b:
f8:27:1d:df:18:56:a5:bc:70:dc:da:6f:85:f8:23:
48:29:14:9b:5c:c2:be:c2:35:a7:37:c3:83:39:6c:
2a:9f:d7:47:b6:b2:81:be:71:46:b9:22:39:ca:99:
39:86:f6:9a:73:e0:14:b5:49:c0:32:ce:1c:e3:90:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4C:88:7B:96:25:73:06:01:A4:B9:57:B9:47:9F:DB:A7:0C:72:CF
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:f3:2a:f4:11:01:1c:51:83:62:53:33:75:f6:b9:00:65:
e2:81:0d:2e:d3:10:15:10:bd:25:2b:4a:21:a0:51:07:e5:ba:
eb:8e:0f:d6:20:83:63:61:7d:4a:06:5f:be:21:11:92:7e:2b:
4b:ba:75:9c:23:6f:a6:b2:a4:2b:23:1e:b6:e4:60:f2:57:c7:
fe:28:40:d5:41:ea:53:d8:54:ab:44:4b:16:a9:3f:c4:43:66:
53:71:8f:28:4d:40:d9:54:77:82:9b:eb:03:e3:c5:53:94:e3:
a9:da:ec:64:9e:86:59:10:4e:2c:8e:7e:98:dc:e2:fa:7c:b4:
41:02:b5:2e:f2:68:81:8e:28:be:ee:85:35:0f:16:e7:f9:83:
2c:1d:ad:1a:e0:94:d4:35:28:86:08:c5:83:b7:9a:0d:c3:89:
a0:90:41:bd:b2:dc:69:1f:bc:ee:ad:02:34:f1:a1:7f:f7:dd:
72:e9:7c:6d:c3:9f:51:96:a0:33:54:00:68:77:a8:2f:5f:d9:
ed:9e:23:54:56:68:41:c8:8c:2a:3b:28:15:87:22:98:74:85:
c3:af:8d:b9:b2:65:06:d2:60:01:af:02:4a:66:c7:b6:4b:a7:
8e:72:96:e7:ad:5f:33:84:fa:e3:85:4d:5d:6b:67:f0:67:77:
45:8b:c5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEqx7gE6XfvU2TxV151/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjYwNzI0MTcwMDU2WhcNMjYwNzI1MTcwMDU2WjAzMTEwLwYDVQQD
EyhmMjRjODg3Yjk2MjU3MzA2MDFhNGI5NTdiOTQ3OWZkYmE3MGM3MmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37NVB6avYt3TVspD6VxQP1o5eGYJ
+tmVDOd9uv8K7KNrgYf8w6nh6VT6rqH50Sc1kIBGCUS1lDDPYFbglSu90Ejq6sIg
WO4EKOZvGQI1vYL6oTHrZ8F08THzCIl8ac3Wa3by9CQvERVgJtfvzLwdEkIYh4TQ
pT+FmHOfa0Fze9wxRWw131Vhkn1dCxLCm4NuH2OZvY+iqL/4FWb3SaLOowRjbgaz
/LV+66AN1ZaVxi3qPNHU72NTxEmfB9MJFfwivGv4Jx3fGFalvHDc2m+F+CNIKRSb
XMK+wjWnN8ODOWwqn9dHtrKBvnFGuSI5ypk5hvaac+AUtUnAMs4c45AA+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJMiHuWJXMGAaS5V7lHn9unDHLPMB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTnzKvQR
ARxRg2JTM3X2uQBl4oENLtMQFRC9JStKIaBRB+W6644P1iCDY2F9SgZfviERkn4r
S7p1nCNvprKkKyMetuRg8lfH/ihA1UHqU9hUq0RLFqk/xENmU3GPKE1A2VR3gpvr
A+PFU5TjqdrsZJ6GWRBOLI5+mNzi+ny0QQK1LvJogY4ovu6FNQ8W5/mDLB2tGuCU
1DUohgjFg7eaDcOJoJBBvbLcaR+87q0CNPGhf/fdcul8bcOfUZagM1QAaHeoL1/Z
7Z4jVFZoQciMKjsoFYcimHSFw6+NubJlBtJgAa8CSmbHtkunjnKW561fM4T644VN
XWtn8Gd3RYvFmg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:44 2026 by rpki-client