Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: h1sy9318oSlj++673xwlpncVnMsmHr9+1wJENOx25DA=
Subject key identifier: 64:FC:5A:7C:E0:92:15:E1:68:E6:81:12:BF:C6:F5:7F:40:9E:C6:57
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 01A10F9618F91581DC97838720B5F0111DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 05:00:57 +0000
Manifest this update: Tue 06 Oct 2026 05:00:57 +0000
Manifest next update: Wed 07 Oct 2026 05:00:57 +0000
Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: bftPELpvHG9i6Bg0LxIre//sZ0vrzyYF330Slv6kMNc=)
3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:96:18:f9:15:81:dc:97:83:87:20:b5:f0:11:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Oct 6 05:00:57 2026 GMT
Not After : Oct 7 05:00:57 2026 GMT
Subject: CN=64fc5a7ce09215e168e68112bfc6f57f409ec657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:85:83:d3:e4:3d:ea:e3:b9:3e:58:8f:4a:
de:45:75:65:f0:d7:2c:b6:6e:3f:41:4b:db:80:70:
10:33:75:f3:61:92:b3:41:9f:c0:55:e6:c0:c5:7e:
b1:99:e9:29:0c:8a:0c:7c:39:23:ef:61:2c:8a:45:
99:d9:10:7c:7a:49:ac:0f:54:22:36:c5:23:f6:8f:
37:70:c6:23:bb:cc:d1:0b:d6:48:1b:94:57:53:67:
72:c1:3e:0d:70:f0:80:2e:2b:55:56:41:9c:d9:d0:
65:1c:2a:c5:9b:3b:0f:82:47:94:d0:9e:95:83:1c:
c8:bf:b3:dd:06:b4:30:bf:24:94:a7:ff:a1:97:bc:
13:39:e5:e4:32:09:60:84:70:2c:1c:6c:7e:ba:b3:
a4:08:39:d6:ae:e6:de:62:6c:5a:79:46:65:1b:5a:
1a:4f:7b:57:d2:a8:d4:49:48:60:a9:8a:16:c8:ed:
23:1b:a0:cd:11:b5:a6:5f:e3:e2:2c:f3:8d:2d:27:
cf:5c:ff:1d:b4:10:54:27:33:55:1c:c8:e7:0c:c1:
4c:b8:14:26:6c:72:b5:61:c8:21:87:21:a4:c5:be:
95:a4:a1:6f:09:17:31:96:3f:60:f0:5b:c8:45:88:
bd:79:3c:c3:61:f0:de:de:c5:6f:78:d4:81:b6:c4:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:5A:7C:E0:92:15:E1:68:E6:81:12:BF:C6:F5:7F:40:9E:C6:57
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:32:45:95:cb:ab:2b:de:67:d6:e0:c7:e4:27:ed:1c:40:
ca:d8:47:a2:d8:79:d2:41:4d:bd:bd:52:cc:7c:9a:a1:73:77:
70:b7:25:0b:49:eb:18:08:b2:01:9f:e7:36:f3:7a:84:c7:3a:
6e:62:d0:e9:dd:7d:0f:48:65:1c:e9:82:0a:b0:52:7b:45:f5:
f1:ba:91:6a:cc:44:a9:53:7c:ba:c4:d8:f0:06:66:03:26:e0:
47:29:cf:ee:57:d3:23:a8:b2:a3:f0:1c:c6:9b:d7:bc:2e:11:
c1:1e:91:4b:f9:14:ca:a6:e0:8f:0d:16:6e:37:d8:3c:7f:fd:
93:4a:8e:ce:c1:ef:55:8d:15:0c:a1:84:63:b2:a2:c7:73:bd:
c4:16:77:c8:e1:79:56:05:f8:a9:ab:3a:7d:61:f2:e8:d1:37:
17:c0:07:5c:86:b8:47:cb:1a:c6:d4:fb:c3:f8:ee:fc:73:23:
96:98:d5:99:7e:57:53:3e:c0:25:9a:ad:16:72:20:78:a7:30:
29:0d:0f:22:5d:24:c5:f4:9a:e6:06:2d:d7:36:6b:2b:eb:ec:
63:ec:a9:df:8f:0e:a8:99:cf:2d:d7:c4:ba:de:f1:fb:9d:70:
f1:9b:51:60:80:2a:56:15:76:0b:03:90:ac:3e:f4:29:36:dd:
79:6d:27:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPlhj5FYHcl4OHILXwER3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjYxMDA2MDUwMDU3WhcNMjYxMDA3MDUwMDU3WjAzMTEwLwYDVQQD
Eyg2NGZjNWE3Y2UwOTIxNWUxNjhlNjgxMTJiZmM2ZjU3ZjQwOWVjNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKeFg9PkPerjuT5Yj0reRXVl8Ncs
tm4/QUvbgHAQM3XzYZKzQZ/AVebAxX6xmekpDIoMfDkj72EsikWZ2RB8ekmsD1Qi
NsUj9o83cMYju8zRC9ZIG5RXU2dywT4NcPCALitVVkGc2dBlHCrFmzsPgkeU0J6V
gxzIv7PdBrQwvySUp/+hl7wTOeXkMglghHAsHGx+urOkCDnWrubeYmxaeUZlG1oa
T3tX0qjUSUhgqYoWyO0jG6DNEbWmX+PiLPONLSfPXP8dtBBUJzNVHMjnDMFMuBQm
bHK1YcghhyGkxb6VpKFvCRcxlj9g8FvIRYi9eTzDYfDe3sVveNSBtsRenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT8WnzgkhXhaOaBEr/G9X9AnsZXMB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUIyRZXL
qyveZ9bgx+Qn7RxAythHoth50kFNvb1SzHyaoXN3cLclC0nrGAiyAZ/nNvN6hMc6
bmLQ6d19D0hlHOmCCrBSe0X18bqRasxEqVN8usTY8AZmAybgRynP7lfTI6iyo/Ac
xpvXvC4RwR6RS/kUyqbgjw0WbjfYPH/9k0qOzsHvVY0VDKGEY7Kix3O9xBZ3yOF5
VgX4qas6fWHy6NE3F8AHXIa4R8saxtT7w/ju/HMjlpjVmX5XUz7AJZqtFnIgeKcw
KQ0PIl0kxfSa5gYt1zZrK+vsY+yp348OqJnPLdfEut7x+51w8ZtRYIAqVhV2CwOQ
rD70KTbdeW0nCA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:37:32 2026 by rpki-client