Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: pC/KFsl7y0S8AuNZVU+/6/o/6zNo8VL1SM4Ho/5/ggs=
Subject key identifier: 3A:D9:57:45:E6:D2:E2:44:09:3B:2B:8D:77:79:BF:E2:01:15:10:CC
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019EBE7E9C90594583DE6E988995EE03C4DE
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0C2B
Signing time: Sat 13 Jun 2026 01:00:11 +0000
Manifest this update: Sat 13 Jun 2026 01:00:11 +0000
Manifest next update: Sun 14 Jun 2026 01:00:11 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: uHAE/KQZ5JZTbDbM4IljAj7eCA6YvgnZ0c5ir6mCwOY=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: FfA/epYjDbANEKn73AGsTslIE73uDRpt28iaW+gp/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:9c:90:59:45:83:de:6e:98:89:95:ee:03:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jun 13 01:00:11 2026 GMT
Not After : Jun 14 01:00:11 2026 GMT
Subject: CN=3ad95745e6d2e244093b2b8d7779bfe2011510cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:4b:27:88:f7:38:39:c0:f7:6d:49:98:b7:
9b:14:55:de:25:da:93:0d:89:e9:f3:a7:86:3a:14:
aa:12:f2:6b:5f:39:6a:4a:83:5c:e5:99:88:ee:07:
ae:c3:69:eb:37:05:8f:14:78:98:2f:8b:28:da:f1:
17:63:d6:58:45:d7:52:a4:d4:1e:9f:d2:31:d5:ef:
38:16:5a:c9:45:bb:54:91:1e:2b:a4:be:b5:74:32:
7f:58:59:72:5d:46:0c:3c:31:6e:77:2f:73:94:5f:
42:c0:4d:4e:01:66:20:d6:de:4d:41:f8:47:a4:be:
88:9a:2d:85:8a:48:3f:3f:30:d7:37:8a:8e:9f:67:
fe:fa:e7:d8:3a:df:a1:17:8c:1c:cf:67:5a:8c:a2:
a2:7c:1e:55:49:ca:a9:28:db:94:23:9f:29:68:1c:
7d:d9:62:ed:b5:7e:1e:c6:73:8f:94:65:95:bc:15:
71:51:c3:a0:63:5e:50:9c:4c:e3:8d:85:5e:5c:fb:
fe:e8:c1:60:99:f4:61:0d:d5:00:bf:68:1b:16:59:
49:a1:41:2e:6e:03:4f:03:09:98:f5:b4:6f:c1:08:
93:4c:d9:9a:9a:4d:89:a7:be:3a:cb:bf:17:1c:c6:
9b:4c:8c:80:e6:53:d0:de:b2:3b:dd:c2:b5:6e:b6:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:57:45:E6:D2:E2:44:09:3B:2B:8D:77:79:BF:E2:01:15:10:CC
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9c:35:3d:23:56:a0:27:d0:0d:90:28:e8:3c:c6:a7:d8:d7:
0c:b7:c9:55:b8:15:e1:29:52:19:91:ae:73:89:fb:dd:49:1d:
4b:f1:af:75:e0:c3:d8:4a:aa:6f:53:d5:86:27:36:ee:c7:09:
c4:09:b3:68:74:0e:dd:b1:5f:46:6b:f8:60:05:3b:cd:f8:b6:
46:65:2c:14:38:36:18:81:41:de:c8:21:ac:36:b1:ca:92:ec:
81:80:67:ad:94:cc:9e:d7:6d:c5:aa:f7:7b:4f:dc:a4:81:3a:
06:d5:21:ec:25:2f:3c:a6:5c:ee:5c:a3:d6:fd:f5:5e:97:d9:
05:d9:e1:48:a6:6d:d7:b1:48:4b:35:01:d6:2d:9d:08:af:51:
9a:66:03:b2:9f:42:a4:b5:44:f1:1f:27:e5:44:24:87:bb:83:
3b:72:22:0e:4d:7d:ed:72:5f:ac:54:df:88:3f:0e:77:92:31:
91:b7:1f:2e:99:b3:0b:ee:67:04:e8:fc:e8:3a:66:d1:ba:6c:
05:66:68:ce:2b:b4:43:14:6a:4d:cf:40:44:22:e7:c6:18:fd:
1d:c4:1a:5b:90:57:38:a2:e9:db:f6:bf:7e:6a:2c:eb:2c:17:
e0:dd:89:6c:d5:ee:8c:bb:ee:10:75:d1:b2:5e:0b:94:ff:6b:
56:b6:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:40:51 2026 by rpki-client