Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: vZXl85TCPf5n/UFTnLR6f/KNzGTcTYH1NzjhOPP/0w8=
Subject key identifier: C3:E4:1C:EC:A7:08:EC:1F:30:4F:6C:6B:78:6C:25:89:97:1A:A8:A8
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01A0BD2F968720309F175C39A5905E93E570
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0D84
Signing time: Sun 20 Sep 2026 05:00:07 +0000
Manifest this update: Sun 20 Sep 2026 05:00:07 +0000
Manifest next update: Mon 21 Sep 2026 05:00:07 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: xu5LBYFczhflFtbCOEPNUGJ9JtdHN2FaZUwWqBLQGNA=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: rYxhAn17MvUfXfIYjmwickPa7Q/vp8Wbmt0rDhWkkCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:96:87:20:30:9f:17:5c:39:a5:90:5e:93:e5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Sep 20 05:00:07 2026 GMT
Not After : Sep 21 05:00:07 2026 GMT
Subject: CN=c3e41ceca708ec1f304f6c6b786c2589971aa8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:fd:85:88:9b:dd:e4:e0:fd:07:c3:79:eb:
cc:7b:1d:33:be:8e:b2:97:27:a1:a8:67:be:dc:d3:
1e:92:1a:3c:74:fc:3d:79:5b:37:3d:53:a7:f9:67:
4d:29:9f:2c:5f:26:5a:ac:e2:3b:ef:12:75:1c:14:
c0:ea:a1:14:d5:0a:b2:dd:56:e8:1b:89:97:6f:96:
08:c5:4b:80:73:56:a7:7b:a6:4c:2f:46:90:2c:b8:
77:57:c7:90:29:9c:31:70:f5:3c:2c:d4:83:ce:45:
8c:70:47:4a:8a:64:3b:53:1f:38:69:b3:a2:f2:e8:
0a:bd:65:74:f0:f2:60:d1:28:fd:5b:00:8a:10:64:
bc:8f:e9:6f:5a:7d:4b:b3:20:97:a1:3c:05:cc:6f:
8a:6b:60:79:fe:24:3c:3e:e0:81:9a:43:f9:5b:01:
fb:38:77:db:fb:23:8a:9f:8d:39:8b:53:ca:a7:5c:
0f:fb:62:47:00:1b:74:b6:17:39:85:47:15:91:63:
69:08:de:7e:c3:f7:63:dd:60:5e:23:2f:d1:1d:9a:
b4:36:67:df:88:f7:c6:87:f4:88:32:00:37:cd:cc:
ef:60:3d:00:c0:41:f0:48:4b:7c:0a:e8:a8:b7:81:
a3:42:b0:41:d9:53:18:f0:a2:6c:96:b6:56:5f:78:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:1C:EC:A7:08:EC:1F:30:4F:6C:6B:78:6C:25:89:97:1A:A8:A8
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:3f:ec:e2:4b:84:6f:50:b4:07:6d:24:39:b9:67:64:41:
85:a2:dd:73:f1:ed:ec:02:a6:1d:21:4e:3b:b7:89:cd:51:cf:
93:91:d4:eb:2b:fd:59:ab:34:49:1a:4b:0b:1a:d0:d6:95:93:
60:3f:d7:7d:af:07:f9:37:ff:0a:12:0a:12:61:d2:b1:59:f9:
5b:d7:e2:cc:7a:c5:4e:bc:7b:39:01:01:5c:10:30:2e:6d:36:
6e:9b:d7:bd:0e:9e:00:b8:6a:1d:cb:9a:7d:35:48:56:7e:30:
70:25:17:46:e7:4b:8e:1c:f4:4c:f8:e4:ec:75:25:c1:fc:d1:
1a:26:54:3b:f3:d0:88:23:d2:9e:a8:7a:0e:19:88:fe:97:44:
33:b4:1d:ab:51:19:1e:de:0e:67:54:9a:f0:5e:47:b2:47:02:
59:bf:89:f2:3e:c5:c7:4d:94:96:b8:ea:cc:89:be:ad:a3:47:
ce:76:0e:33:d7:ea:8c:f3:14:b1:0e:db:e0:62:3e:cf:5b:cb:
77:2a:a2:2a:44:21:69:e6:73:9e:22:24:e8:14:e5:3d:55:25:
fd:af:91:9a:c7:e4:34:eb:58:c0:5f:ce:6e:66:5e:64:a3:22:
5e:03:40:c8:39:fa:7d:72:4c:1f:55:35:82:da:7e:95:09:60:
44:f3:83:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:07:48 2026 by rpki-client