Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: yVI2qG0dwfCJI/LSqK5oynPnXsIjVHqeurH8aTpB2Xc=
Subject key identifier: FD:B3:81:04:5B:BB:05:16:0B:17:2F:F1:34:6E:D6:00:87:95:C5:52
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019CA7FC0F367FD0F8CF716BFADF12CA06DF
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0AB3
Signing time: Sun 01 Mar 2026 06:00:26 +0000
Manifest this update: Sun 01 Mar 2026 06:00:26 +0000
Manifest next update: Mon 02 Mar 2026 06:00:26 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: IJ6pOSMbx45QSqYpZlORuDJ1R+91Z6UOma2ty0zWBd4=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: aBDF5hodPFZ4S4P5+5KDWDFcfssfY5N/y/FIPmE8jz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:0f:36:7f:d0:f8:cf:71:6b:fa:df:12:ca:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Mar 1 06:00:26 2026 GMT
Not After : Mar 2 06:00:26 2026 GMT
Subject: CN=fdb381045bbb05160b172ff1346ed6008795c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:ba:d2:7f:8e:98:93:d7:f0:2a:dd:85:98:
d5:04:b5:52:f0:10:b2:12:c1:19:52:4b:bd:78:8b:
11:5a:7e:18:7e:a3:11:12:0f:a8:02:e4:6b:12:7e:
95:10:f5:3c:39:d0:97:d6:f1:c7:57:f3:1f:b0:2e:
d1:f8:7f:a2:5c:a3:b8:4d:a1:18:72:5a:8c:59:6f:
5e:f6:a4:84:9b:21:d0:05:c3:bd:be:6a:d8:f9:7f:
7c:c7:da:c4:31:fe:fe:4f:56:f5:29:fe:3f:1c:76:
bf:7b:0c:d6:01:52:fb:67:95:69:3b:8d:24:f6:10:
60:4d:35:6a:7f:fb:d0:22:31:f3:f1:6d:5c:a2:74:
0c:15:42:4e:bf:1a:d2:f3:c2:42:63:5e:5a:05:aa:
2e:15:11:40:69:1c:22:c1:9e:7c:0d:fc:63:c4:6d:
8d:2f:ce:0b:1f:76:30:38:d8:19:05:41:b9:55:ab:
1e:21:79:44:59:40:99:63:71:30:4d:09:bd:20:d7:
07:fa:be:c7:7d:a0:8d:ce:a2:7b:d6:45:d3:d7:51:
ad:e9:08:77:14:a5:fb:db:5a:12:a2:5a:ef:e6:4b:
98:25:d1:fc:ad:6f:b0:69:05:60:f3:fb:10:01:ef:
74:0b:09:31:da:2f:cf:37:25:35:00:cc:fb:e0:a8:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:81:04:5B:BB:05:16:0B:17:2F:F1:34:6E:D6:00:87:95:C5:52
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:ae:41:3f:59:c1:35:c2:89:86:d3:96:61:96:9c:10:04:
f6:98:43:40:f0:df:be:fe:db:26:cb:08:e4:12:84:b9:1d:d7:
c2:bb:b4:91:3b:c2:39:c9:0d:7b:e4:bb:af:15:71:a5:10:cb:
42:bb:cc:2a:88:e0:f7:84:32:19:2e:cc:6d:3e:41:a2:74:7a:
e7:5e:01:5e:5e:45:9c:0a:72:83:c1:ab:63:34:1b:a3:f8:a0:
23:6c:b2:5f:c0:41:b2:b4:5d:fc:1b:ea:8a:3f:fd:ac:24:6b:
5a:d8:71:f0:4e:fb:e8:da:55:4b:b9:21:1d:36:91:c6:60:aa:
71:94:1c:c9:d8:ef:6c:bb:33:d4:76:1e:3e:4b:66:84:d4:c1:
47:f8:65:da:55:39:e3:9c:fd:2b:04:06:72:18:98:15:74:cf:
cc:27:e1:b1:30:63:38:de:32:46:57:18:cf:2f:69:da:ef:f3:
e1:7b:23:cc:e4:5e:9d:06:19:e8:62:38:84:de:f6:16:43:5e:
84:57:b9:62:5a:92:2f:74:57:1d:a1:5a:f8:ed:43:2f:2b:16:
f7:b0:13:7e:e7:9b:ff:0e:10:c2:f3:23:8a:8e:be:b0:bc:11:
3e:77:c0:e7:f9:4c:15:7a:5e:02:01:70:f9:aa:79:86:10:2c:
08:2f:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:27 2026 by rpki-client