Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: GYoAGhkeuLQv5FwJDuu1K1IAEOpezmIIeM0L3VpQddc=
Subject key identifier: 4F:85:FF:81:15:BE:F8:93:B5:E8:49:9D:1A:91:E7:53:AB:B5:02:44
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019EA2D06A623E392136ABF2C2CC5801744A
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0C13
Signing time: Sun 07 Jun 2026 16:00:09 +0000
Manifest this update: Sun 07 Jun 2026 16:00:09 +0000
Manifest next update: Mon 08 Jun 2026 16:00:09 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: qW/6E63IEKRk4J55kpBtM84LupOw6xIgyHR4luvWI+U=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: MXtb5x7qPHIucyvCmFdn6chl4AWtbpextfDqXeVlaZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a2:d0:6a:62:3e:39:21:36:ab:f2:c2:cc:58:01:74:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jun 7 16:00:09 2026 GMT
Not After : Jun 8 16:00:09 2026 GMT
Subject: CN=4f85ff8115bef893b5e8499d1a91e753abb50244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:c6:2c:c5:43:d6:c9:cd:68:4b:6f:76:31:
70:30:d3:24:2e:05:42:bb:8b:28:02:6f:f2:39:7c:
cf:fe:0a:55:ea:34:5a:46:f0:97:bc:8b:1b:92:32:
ca:2c:4f:a6:aa:28:d7:9a:07:f7:24:66:81:e7:1b:
b3:c6:cb:fe:1b:fe:e1:83:81:df:d8:a4:e3:00:05:
5d:3c:e6:82:3a:22:94:b5:05:c5:b5:37:b3:fc:f7:
e1:2b:1d:7a:ce:f9:06:32:7a:45:92:bb:b5:7c:f7:
bf:2a:c4:bb:44:41:2f:50:e4:1e:81:ee:72:bb:0e:
10:de:d1:a4:94:da:d1:65:c5:6d:ed:0b:cb:f2:86:
db:a9:f4:b6:56:bb:71:7e:df:d9:54:c8:25:8f:8b:
27:de:2b:aa:b4:79:3c:31:50:d3:6d:da:b9:1a:08:
2e:14:b7:06:d1:96:62:c2:fe:1f:cb:cf:e5:f1:79:
27:6c:83:ce:72:ef:bb:f1:2f:c0:4d:82:4b:d0:1e:
87:c3:fe:46:97:8e:00:a9:04:bf:5f:f5:82:d4:6f:
18:17:56:85:7a:ad:62:2d:5c:10:51:a1:9d:54:66:
ef:43:cc:84:60:7d:9e:ef:35:63:c2:2a:62:83:51:
0d:2a:7e:ca:95:50:10:cc:da:9c:52:26:93:44:40:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:FF:81:15:BE:F8:93:B5:E8:49:9D:1A:91:E7:53:AB:B5:02:44
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c8:e2:2b:93:bf:43:68:af:3f:52:bc:58:ae:40:c8:64:f1:
93:0c:bb:cf:d2:36:44:b7:31:ea:bf:c7:b3:69:bf:f4:4f:b3:
2b:3a:c1:71:25:b4:d7:40:c1:45:ca:d9:5c:92:c7:83:10:a9:
6f:fb:4c:b4:7a:b7:08:b8:ce:dc:a1:15:32:91:9e:f8:66:09:
40:cd:09:dd:1e:b5:69:47:d4:49:73:6d:dd:3b:1c:6a:ef:32:
e4:83:fd:05:3f:f5:90:a7:53:fd:5f:07:e8:a5:33:c7:3b:fe:
cb:f4:c4:7a:0c:d3:64:cd:17:b1:00:65:74:ae:a8:ab:9f:9b:
ce:74:f9:3b:92:ff:71:5c:85:36:e0:e2:e1:16:fc:33:ba:26:
9b:60:55:5e:cd:ac:17:4d:a3:4b:8b:a9:37:f2:cf:21:d9:d6:
78:cb:e2:07:c3:8c:a5:3e:16:ab:19:37:3d:80:63:9f:9f:f9:
53:8d:d3:e5:de:08:ab:0b:d3:e5:22:4a:91:0a:fb:43:4b:27:
5e:20:bb:e5:76:9c:83:d7:55:a4:02:cf:c6:79:ea:34:0c:45:
1e:94:4e:66:a3:6b:09:e4:66:2e:2c:5b:81:d6:69:0a:af:b4:
a9:7a:58:5c:4b:04:39:31:a3:14:ee:4f:69:e6:54:94:cb:59:
83:19:76:06
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAZ6i0GpiPjkhNqvywsxYAXRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi
MTczMWEwHhcNMjYwNjA3MTYwMDA5WhcNMjYwNjA4MTYwMDA5WjAzMTEwLwYDVQQD
Eyg0Zjg1ZmY4MTE1YmVmODkzYjVlODQ5OWQxYTkxZTc1M2FiYjUwMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuzGLMVD1snNaEtvdjFwMNMkLgVC
u4soAm/yOXzP/gpV6jRaRvCXvIsbkjLKLE+mqijXmgf3JGaB5xuzxsv+G/7hg4Hf
2KTjAAVdPOaCOiKUtQXFtTez/PfhKx16zvkGMnpFkru1fPe/KsS7REEvUOQege5y
uw4Q3tGklNrRZcVt7QvL8obbqfS2Vrtxft/ZVMglj4sn3iuqtHk8MVDTbdq5Gggu
FLcG0ZZiwv4fy8/l8XknbIPOcu+78S/ATYJL0B6Hw/5Gl44AqQS/X/WC1G8YF1aF
eq1iLVwQUaGdVGbvQ8yEYH2e7zVjwipig1ENKn7KlVAQzNqcUiaTRED4fQIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFE+F/4EVvviTtehJnRqR51OrtQJEMB8GA1UdIwQY
MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4
by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJ/I4iuTv0Norz9SvFiuQMhk8ZMMu8/SNkS3Meq/x7Npv/RPsys6wXEltNdA
wUXK2VySx4MQqW/7TLR6twi4ztyhFTKRnvhmCUDNCd0etWlH1Elzbd07HGrvMuSD
/QU/9ZCnU/1fB+ilM8c7/sv0xHoM02TNF7EAZXSuqKufm850+TuS/3FchTbg4uEW
/DO6JptgVV7NrBdNo0uLqTfyzyHZ1njL4gfDjKU+FqsZNz2AY5+f+VON0+XeCKsL
0+UiSpEK+0NLJ14gu+V2nIPXVaQCz8Z56jQMRR6UTmajawnkZi4sW4HWaQqvtKl6
WFxLBDkxoxTuT2nmVJTLWYMZdgY=
-----END CERTIFICATE-----
Generated at Sun Jun 7 23:08:48 2026 by rpki-client