Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: /YDLXa13/MloH1DeqZRoRfdFNDOTPW1TPFhIhQgPzgg=
Subject key identifier: B4:DB:44:C7:E6:4C:6A:84:BA:84:1D:47:9D:02:31:31:14:1D:B3:0B
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019D984F73C9C8173B9EB9D8C9AA4471B8ED
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0B69
Signing time: Thu 16 Apr 2026 22:00:20 +0000
Manifest this update: Thu 16 Apr 2026 22:00:20 +0000
Manifest next update: Fri 17 Apr 2026 22:00:20 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: jcstmsqi16BLyCfmnO22b3qKIZJDfv2FpbyQittrm54=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: myn0EsXlIuQ2Lo1hd72sN3DZqhHUKzC8gniEWet415I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:73:c9:c8:17:3b:9e:b9:d8:c9:aa:44:71:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Apr 16 22:00:20 2026 GMT
Not After : Apr 17 22:00:20 2026 GMT
Subject: CN=b4db44c7e64c6a84ba841d479d023131141db30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:22:dd:53:6a:eb:2f:c1:1b:b5:1c:98:84:
4f:ca:c0:a0:28:8d:9e:ce:db:2c:d6:8f:e7:cb:fe:
51:09:b5:7d:54:21:e9:77:80:34:84:b6:59:85:09:
26:53:17:e9:e0:cb:aa:61:b1:1d:c0:dc:d0:b6:cf:
dd:d1:2b:59:4e:a4:b3:57:49:34:95:7c:a5:41:af:
e2:d6:0d:b4:45:bf:1b:8f:b0:30:c1:49:8c:fa:f3:
0a:73:3c:82:a7:5e:0d:e7:78:e7:30:67:b6:29:6b:
1b:e8:a7:fb:f6:4c:b6:8d:89:e6:1b:0b:95:a3:fc:
63:ae:58:73:1b:47:73:fa:72:7e:29:ad:78:b2:a8:
23:64:3b:a6:fc:da:aa:78:d7:07:0e:f1:13:bd:77:
d4:95:8b:14:2a:54:fc:6c:f3:c8:f1:42:e5:6e:ee:
ca:54:33:4c:bc:78:05:86:0b:91:b7:f5:b7:d0:b7:
db:5f:5b:6d:67:46:e6:02:7e:66:bf:c6:eb:d6:6e:
77:19:e1:1d:36:6a:87:c7:00:cb:70:ac:aa:d5:b7:
3b:3a:86:73:b3:22:7b:61:31:5d:64:5c:bc:5e:4a:
c4:00:25:cd:8e:f4:82:51:9b:84:d0:e9:27:ae:77:
17:42:6e:1f:a4:2b:38:0c:14:81:2c:13:12:19:56:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:44:C7:E6:4C:6A:84:BA:84:1D:47:9D:02:31:31:14:1D:B3:0B
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:91:fe:4b:27:81:47:dc:ee:fd:24:42:24:88:11:4f:b8:
da:9b:3f:95:6e:c6:fe:02:82:27:9a:e3:b6:b0:cf:a9:b3:e6:
65:56:31:7c:d4:5c:fa:82:13:ac:70:95:64:63:a4:7c:b1:87:
08:9b:26:d4:c6:f8:32:7c:64:2b:53:7b:07:33:29:60:c8:1c:
b8:7f:b6:6f:e0:72:ef:44:a1:b5:96:d9:54:b8:f8:dc:e8:b9:
b4:18:fe:0f:aa:6b:a8:20:0e:02:04:f4:1b:d4:9b:d1:f9:68:
05:50:98:34:f7:01:74:0e:30:b1:27:97:44:3d:e4:44:19:52:
59:4a:0b:74:c5:c4:5b:55:62:e3:6e:d4:ec:8c:09:91:85:79:
cd:a7:24:68:58:4f:6c:90:29:cd:19:60:a5:3b:4d:74:b3:6a:
ef:5d:f8:cf:8d:e3:05:cf:4e:24:27:aa:2f:7d:d5:11:8f:38:
f8:58:13:55:e3:17:f6:af:1c:e4:2b:52:48:b4:ac:cb:68:47:
ba:ac:ae:45:cc:2f:9c:49:93:e8:00:1e:f7:d2:7f:8a:3d:42:
c6:2f:fb:c1:7f:2f:09:ff:41:a3:60:b3:f6:72:7a:da:3d:55:
6d:24:93:a7:90:a2:af:d6:07:b3:06:15:bc:ac:63:6f:68:c3:
4f:a2:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:54:44 2026 by rpki-client