Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: I/Q7hDHQmIvPQDOFrrs9clOL2Ju7kGRlJLTovrt98AA=
Subject key identifier: BC:3F:14:96:6A:C8:D5:A1:6E:4D:49:00:A7:40:BD:0C:95:30:B9:8E
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019FA917899816B6B8E05B408DDA18E55551
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0CD2
Signing time: Tue 28 Jul 2026 14:18:39 +0000
Manifest this update: Tue 28 Jul 2026 14:18:39 +0000
Manifest next update: Wed 29 Jul 2026 14:18:39 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: w65aR6mcLMveAAuk7B5BT6dFTUJ4egJ0d0/Y79W6I0A=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: fwQVUyaE5iOWFGOSQRsI15HLhZBKia9PLWwHPefrCTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:17:89:98:16:b6:b8:e0:5b:40:8d:da:18:e5:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jul 28 14:18:39 2026 GMT
Not After : Jul 29 14:18:39 2026 GMT
Subject: CN=bc3f14966ac8d5a16e4d4900a740bd0c9530b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:cc:97:de:50:ef:26:f0:3d:9d:2e:38:d9:
44:67:0a:d9:1e:9e:35:83:2b:ba:3a:e0:43:b2:74:
ef:d6:13:cc:02:06:56:ad:51:a4:9e:05:df:56:d3:
e0:f6:53:d6:76:27:07:e4:d3:ff:dd:3a:30:9b:8a:
34:fc:2e:ae:43:9b:4a:bc:3c:3f:67:dc:51:72:81:
01:30:53:2f:f4:ba:71:ef:7a:af:4c:01:22:83:7c:
f9:bf:22:19:d4:55:88:76:95:e7:42:fb:0d:80:93:
3e:df:86:ec:74:d7:f0:91:f8:b0:a3:34:05:ad:e3:
9f:d9:c4:c1:85:45:c1:9a:1a:75:ea:82:37:fd:1b:
3e:82:5e:6d:59:ef:a4:d4:62:97:52:43:0a:15:c0:
e0:05:02:c2:9b:65:14:f1:00:e3:20:9b:e8:c4:4e:
84:5f:e3:81:31:5c:41:8d:ae:ab:33:52:3d:ac:b4:
b1:3b:3c:34:01:c9:84:fb:7d:6c:3d:db:bb:3b:63:
e9:c1:69:b4:70:c3:cb:c2:d8:39:8c:6b:d8:aa:e6:
4b:26:b0:74:28:6a:b4:94:f1:e5:b0:60:b8:0d:ba:
1c:4e:82:f0:a2:23:3f:5b:a9:66:dc:0c:5f:89:46:
fb:cf:00:ae:dc:59:09:50:1c:af:ef:09:c7:4d:ac:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3F:14:96:6A:C8:D5:A1:6E:4D:49:00:A7:40:BD:0C:95:30:B9:8E
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:ed:0a:83:5e:26:f3:3f:5c:a5:ac:d3:26:66:26:f9:ec:
b2:6a:f2:e1:53:dd:48:d2:4f:20:b3:ea:f4:04:12:2f:5c:c3:
1e:30:7f:db:ae:eb:d9:51:bf:37:16:11:a6:97:8b:ff:86:c5:
a2:b4:9d:00:75:49:42:82:96:cd:45:86:4e:48:b6:30:8f:2e:
3a:37:af:9d:17:8d:6d:12:0c:12:f0:f6:49:5e:92:8a:3d:1b:
b1:25:33:a4:07:eb:0a:40:6c:13:8e:e4:b4:5f:be:01:22:f7:
ca:76:dc:9b:87:5f:9c:aa:31:78:b6:ac:2d:74:60:c6:e3:79:
6e:60:0c:8e:63:58:ad:2f:24:32:53:42:65:67:79:d9:ee:14:
b1:01:ba:11:42:39:0e:c9:b0:96:53:42:94:c3:d0:d5:b9:81:
e9:15:65:f0:56:a4:ec:2b:fc:a5:32:c8:ec:b7:e8:40:9b:92:
45:c0:d1:77:91:73:41:d6:b8:68:02:80:f2:84:ab:0d:45:e6:
ad:6e:af:a2:43:06:6b:a1:ea:e8:96:a4:2d:73:aa:47:88:cd:
54:a3:5b:fa:49:60:d5:3b:c6:e4:c4:96:21:47:e0:94:a2:ec:
18:b8:3d:3e:42:d9:61:13:47:09:ed:83:0a:b0:ca:f9:d6:0b:
5e:98:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:37 2026 by rpki-client