Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: oAq1LaHHP1YSYkKcnwSHVXBfPv64Dg6V0sjxiY6U4qg=
Subject key identifier: A5:18:39:43:A6:C3:5F:5C:B6:73:78:35:2A:00:09:78:49:89:B4:A0
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01A0C96AAF8E2A85A8643C1CB5B48CE944F8
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0D8C
Signing time: Tue 22 Sep 2026 14:00:07 +0000
Manifest this update: Tue 22 Sep 2026 14:00:07 +0000
Manifest next update: Wed 23 Sep 2026 14:00:07 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: 5B9gCauC8CM42QB4oq5taL5OlabiS7wK44EazJSF3n0=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: 4oi3EjwE8RtJaaTZsc/DxfOd3jKDEdHDsrWpl4YvnPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:af:8e:2a:85:a8:64:3c:1c:b5:b4:8c:e9:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Sep 22 14:00:07 2026 GMT
Not After : Sep 23 14:00:07 2026 GMT
Subject: CN=a5183943a6c35f5cb67378352a0009784989b4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:08:c7:d7:d4:43:7f:37:9c:f2:2f:1a:2c:
19:7e:5d:d7:56:73:6a:6c:e3:19:13:90:48:84:82:
9f:ab:91:11:90:39:28:7b:19:d6:5e:20:d1:be:48:
de:ea:33:e2:24:3f:ce:4c:6c:1b:4b:9f:af:0d:68:
fa:d4:09:cc:a3:32:9e:57:81:ca:c1:0d:d6:7d:f6:
fb:6d:0d:10:a4:ff:ca:d3:59:f5:69:c1:6a:a1:6e:
29:13:6f:0f:76:78:d6:bd:71:23:8b:a0:b3:82:b4:
fa:27:3b:48:aa:3c:af:54:1e:07:1d:7e:a6:c0:03:
c0:3a:e7:c0:01:5c:09:38:c7:36:00:d0:02:4b:a0:
4e:51:b3:0f:7b:58:cc:8e:8d:b5:d0:bb:25:aa:7c:
5b:4e:09:59:2b:15:3d:17:b8:58:18:a3:c8:98:99:
13:99:b3:95:f4:9a:6b:6b:c4:13:11:1c:42:12:7d:
cf:29:e1:85:a7:dd:0f:b3:01:25:66:fa:6d:19:7f:
57:9a:8e:e6:d8:43:8e:b0:bc:6e:aa:d0:fd:92:06:
51:35:ec:15:f7:3f:09:e6:09:a0:32:6a:05:53:5a:
84:ce:6d:49:c0:91:57:b2:43:46:f8:aa:7c:d2:83:
28:02:0b:18:2f:ee:7e:5e:62:fa:36:5e:ed:c2:f3:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:18:39:43:A6:C3:5F:5C:B6:73:78:35:2A:00:09:78:49:89:B4:A0
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:84:1d:e5:0b:0f:b2:12:ba:bb:2c:e6:59:0c:d9:70:4b:bc:
38:c2:37:86:6e:d0:66:ea:d6:b3:01:4d:a4:9e:ed:81:e1:ab:
2b:37:90:fa:a7:6a:ac:c1:51:b2:8e:20:08:e3:1d:03:9d:f6:
07:8e:27:af:54:6a:aa:91:17:8a:c1:ec:51:8e:aa:45:e4:50:
e4:51:72:2f:f9:4b:fb:8a:6a:1a:a9:7e:28:e3:e9:7b:95:15:
9b:9f:06:32:dc:32:f5:15:9b:a6:19:1b:87:49:a1:7e:08:01:
c1:23:8b:3f:a4:55:e4:74:ee:83:1d:66:c8:40:b1:be:ee:dc:
e6:5a:97:ab:c4:c1:cd:96:04:c1:17:17:1d:d8:41:e9:fc:9e:
35:a0:39:6c:45:d7:43:62:83:ba:67:17:91:84:27:f2:be:24:
ff:0b:ef:76:c4:d2:d0:64:64:8e:50:f4:10:30:6c:6d:ed:a9:
9b:8e:2c:82:fc:6f:b1:d9:0f:0b:29:da:a8:0e:38:2c:2c:40:
ce:8e:7f:83:3d:20:70:d7:53:1b:ea:98:28:df:95:98:50:3c:
87:89:1f:68:34:7f:af:c6:81:bb:18:14:0e:38:c7:f6:11:2d:
76:66:6b:43:46:87:6d:23:c5:69:e7:4f:13:85:09:0f:f4:c6:
01:4a:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:33:28 2026 by rpki-client