Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: UPyDDhIIglv96hi7kLjilvjR5PJhAoThxqkhbiLSniA=
Subject key identifier: 93:95:F2:AF:FD:85:4F:FA:AB:93:16:AE:AE:47:57:6A:5D:2D:36:BA
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01A0CE9C26D41B047004100791E47F8F4764
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0D90
Signing time: Wed 23 Sep 2026 14:12:15 +0000
Manifest this update: Wed 23 Sep 2026 14:12:15 +0000
Manifest next update: Thu 24 Sep 2026 14:12:15 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: Z49KuoTO1pZIrkdYwdCUKBpNA1Oc21qvueDoXHYxMj0=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: ozNdZ4AjDCOmfCq9c1aJmP4FihnuCWWPcy3QjBeYzLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:9c:26:d4:1b:04:70:04:10:07:91:e4:7f:8f:47:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Sep 23 14:12:15 2026 GMT
Not After : Sep 24 14:12:15 2026 GMT
Subject: CN=9395f2affd854ffaab9316aeae47576a5d2d36ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:0a:77:ab:df:e4:3b:6a:7f:ee:fa:1a:5a:
c2:8d:b3:04:38:f6:e4:0b:3f:74:2d:15:fc:30:0b:
e7:42:4b:85:12:1b:6c:7f:41:be:89:d6:a2:5f:d2:
28:2c:ed:65:8d:40:ad:75:c5:7c:65:82:27:0e:13:
74:3a:00:ac:fc:df:13:73:b9:65:ec:48:a1:94:ce:
d1:27:f9:f3:33:9e:9b:25:75:a2:bc:37:c9:89:fe:
2e:74:b8:3b:6c:a4:99:2f:bb:85:7f:ed:3b:3e:e4:
7c:03:73:b4:fb:04:1c:b6:0f:16:2f:91:76:5d:87:
d7:f9:b2:c0:c4:70:8c:46:43:fd:ba:ce:55:6b:d6:
49:c5:f7:02:af:a7:7a:81:1a:4c:3c:e2:00:48:ea:
6d:bd:9e:c1:3a:af:ca:63:6f:5a:e4:7e:5b:63:2f:
49:d5:e6:27:b0:58:03:96:a0:64:04:08:90:b1:e9:
70:49:00:b5:57:7f:30:97:50:f0:9c:82:26:f4:64:
aa:0d:44:b1:16:3b:c1:ff:d9:f4:5a:4d:bb:9a:9f:
70:80:06:a9:04:6c:c5:d7:3e:57:da:65:b1:72:df:
c8:c5:fa:aa:4f:ae:bb:a8:89:98:8d:eb:4f:fa:d9:
e8:0d:0f:6c:8c:7a:73:90:f1:38:67:45:d5:47:0a:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:95:F2:AF:FD:85:4F:FA:AB:93:16:AE:AE:47:57:6A:5D:2D:36:BA
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f0:19:39:d4:88:04:31:ff:3a:ad:9d:f1:33:5a:82:f3:73:
94:e7:18:1d:bf:e1:8b:ba:6c:2a:6f:c5:f3:c0:4b:e4:69:36:
12:ac:4c:93:73:60:0f:a8:7c:57:81:8a:40:f7:2c:75:c9:3e:
62:71:9f:02:ac:4c:a2:88:3d:82:7b:30:06:02:f0:20:3c:c3:
db:27:0f:02:a0:0e:de:25:cf:45:de:e0:36:6a:60:9f:97:0c:
c5:95:1c:ec:f8:7c:ad:12:b8:f2:18:c0:93:d2:ea:44:d9:c1:
48:70:e6:09:f7:85:f6:00:96:e2:f2:3c:33:f9:0f:16:35:6b:
73:86:db:7a:6a:40:7c:fd:77:4d:6b:a5:ac:c6:7d:dc:27:90:
ea:e3:94:a5:6e:59:71:31:cf:c7:61:94:74:01:6f:4c:6e:6c:
7b:33:10:68:1b:be:29:85:b5:fb:95:a7:f0:85:6f:9f:31:a8:
a5:f0:ac:bb:1c:ba:39:f9:1b:53:07:17:da:6a:26:c7:49:05:
6e:7a:14:a6:95:80:ef:03:e0:a6:6c:3b:4c:80:df:ea:aa:c0:
c1:07:1e:20:67:7c:9b:7a:28:38:c5:3c:7e:cb:77:93:ce:e3:
45:33:9a:88:fc:e6:1c:fc:7c:bb:7c:19:83:b8:3f:8c:89:eb:
1a:64:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:16:17 2026 by rpki-client