Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: a/Pndz2WnfF90kl5/TV9lQkJKbzmVJzvdzFyCz8HMWY=
Subject key identifier: 2C:C4:CF:80:A6:FD:18:3C:9C:19:C1:7E:E8:25:2C:6C:C3:7B:9E:D6
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019E1C8E2CA033C501CA07D83A6B19BA4AB2
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0BC1
Signing time: Tue 12 May 2026 14:18:42 +0000
Manifest this update: Tue 12 May 2026 14:18:42 +0000
Manifest next update: Wed 13 May 2026 14:18:42 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: lO5dD4PySazQJRVpJ1jfGmH1h1gW7pg/Crwt0TtQkpI=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: hSkT7yk56MqItRGP87nEbOMUD2SOWPdp3XoVcEk8kcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:8e:2c:a0:33:c5:01:ca:07:d8:3a:6b:19:ba:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: May 12 14:18:42 2026 GMT
Not After : May 13 14:18:42 2026 GMT
Subject: CN=2cc4cf80a6fd183c9c19c17ee8252c6cc37b9ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:33:a7:01:28:6d:32:c2:7d:51:51:50:9d:
4e:0c:f0:0c:d9:ff:52:c5:ef:96:14:9f:a7:6a:25:
5c:64:09:28:94:f2:c6:a6:f0:e4:59:ee:cc:f3:84:
48:d1:5a:b4:3d:dd:74:56:99:02:8b:cd:2d:60:90:
05:12:c5:31:eb:4f:40:42:c7:f2:8f:b5:3b:ef:da:
03:05:ab:dd:77:ad:de:68:8c:94:fb:16:98:8e:9d:
0e:f4:60:b2:2c:a8:f3:c9:e7:f0:a6:10:3a:9d:3a:
ed:d8:22:e5:04:c0:84:d1:7a:89:1b:45:85:aa:0c:
0a:8c:c7:f7:d6:e1:f3:c8:89:0d:d9:ca:cc:0e:c3:
d4:7f:20:85:9b:4e:a3:85:2e:9e:6b:af:63:56:84:
bd:88:52:98:ae:bc:7d:46:0d:6e:7c:43:fc:70:d3:
57:96:a0:2f:61:b1:8a:06:bc:cc:be:48:dd:bb:e4:
34:9f:6e:43:71:2b:8e:2e:91:93:af:7b:5f:88:0b:
c8:20:28:41:2b:8c:74:72:07:8b:ac:02:31:5c:0e:
f5:63:70:82:b5:76:66:ef:77:69:b4:1a:a9:42:78:
e8:c7:0e:ca:a0:b5:b3:c3:96:95:c6:00:85:e6:d5:
3d:c4:de:07:27:fb:a6:70:ca:d1:60:59:69:ee:df:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:CF:80:A6:FD:18:3C:9C:19:C1:7E:E8:25:2C:6C:C3:7B:9E:D6
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4f:71:4d:be:85:cd:8b:00:e4:4e:80:c8:23:2c:bd:38:8c:
cc:df:b7:61:83:d8:ae:a3:e0:ac:84:3b:ae:c2:4d:67:e2:c2:
80:35:b2:0c:94:e5:9d:8d:52:34:09:23:e8:f1:93:69:80:cf:
78:2c:7b:23:b9:2b:66:d3:eb:21:6b:81:fc:af:6c:9f:e6:5e:
eb:cd:c5:f9:d6:a2:83:60:97:cc:c1:53:5e:69:f9:94:37:c1:
9a:b8:2b:b2:7a:27:d4:73:71:a6:90:7a:11:d1:b5:aa:a5:f6:
a1:b1:fb:64:a5:16:85:0e:4d:de:79:66:7a:b1:d2:d2:fc:3b:
0c:2a:f8:c3:d9:a9:20:9b:b9:07:db:b1:a2:71:12:af:df:b7:
ec:52:0d:d9:74:32:9b:de:44:d9:22:b8:84:f6:69:46:bf:aa:
f6:7e:5c:d4:18:e0:0a:c4:a6:18:f3:9f:8e:4d:6c:fd:41:c9:
20:bb:c4:43:8f:5e:1d:70:8e:11:72:be:1e:00:c5:69:7b:98:
10:5e:d5:0e:d2:25:57:82:bc:dc:2e:a6:17:0a:4c:5a:29:a5:
9a:58:a5:2f:16:32:29:b5:c9:81:d3:d1:0f:c0:78:05:d9:7d:
51:47:43:be:82:09:81:3f:87:01:c1:13:38:7f:5a:e0:35:0a:
df:e2:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 20:43:27 2026 by rpki-client