Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: teZQFL66fnLBxrayU809BPYpuUPHNAzsh6vb2RCkOmw=
Subject key identifier: 62:4E:94:C5:A5:2A:D2:F6:5E:EE:30:04:87:93:33:93:6F:44:4C:6C
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019EFDCD0CF2CB1D4E022C1946AED1500A88
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0C5B
Signing time: Thu 25 Jun 2026 08:01:54 +0000
Manifest this update: Thu 25 Jun 2026 08:01:54 +0000
Manifest next update: Fri 26 Jun 2026 08:01:54 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: ZWQkvCT++RyZ7U6foL0AmhjdfZyq9pHHQzOmGPhQoQw=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: AHrQwpGwHt5L1g4SBAdM4/cZIYagIslXfO9djpHVFxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 08:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:cd:0c:f2:cb:1d:4e:02:2c:19:46:ae:d1:50:0a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jun 25 08:01:54 2026 GMT
Not After : Jun 26 08:01:54 2026 GMT
Subject: CN=624e94c5a52ad2f65eee3004879333936f444c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:f4:c8:55:e3:1f:bd:b4:0b:9c:f5:b9:71:
15:d6:e3:2b:35:87:e8:6f:5f:6f:08:e5:bd:a8:e4:
41:fc:15:82:10:e5:3a:fe:60:a2:f5:52:26:68:52:
c4:3b:d0:7e:45:dd:27:f9:8f:5a:31:5d:ad:96:68:
cf:67:83:f9:f0:91:23:01:3a:8d:1a:18:95:e0:3b:
0f:fe:39:65:75:b5:32:69:97:5f:c0:ed:40:0f:d5:
ac:de:37:10:59:e8:70:ab:c9:be:79:e0:2e:27:1b:
30:89:67:12:0f:c3:42:b1:ad:81:52:ae:7c:fc:ba:
bb:6c:c4:c4:5d:70:df:c1:57:be:d5:8e:a0:3b:48:
fb:f1:a3:f8:de:a2:ba:3b:4e:ab:dc:a7:d4:13:66:
3f:d8:f7:4f:07:d4:4c:79:38:54:bd:33:8b:cf:28:
1d:c1:0d:31:eb:b4:2a:f9:ee:15:3b:01:77:fc:72:
a8:4b:25:2c:b2:fe:49:d6:90:69:d1:3d:4f:fd:f3:
ee:87:05:9c:4d:ef:8a:43:10:6f:45:12:45:39:8a:
47:61:d2:cf:5c:09:90:d8:00:b8:41:6e:65:cb:69:
2b:42:61:9a:8f:82:d9:b8:8d:dd:97:7d:2d:50:6a:
29:33:18:88:44:cf:90:03:8f:e5:08:ed:ba:fe:48:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4E:94:C5:A5:2A:D2:F6:5E:EE:30:04:87:93:33:93:6F:44:4C:6C
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:d4:57:4c:d0:e1:f8:a1:10:81:c6:fa:43:d1:1e:29:cc:
bd:55:d1:ac:95:6b:6c:27:fb:34:4b:21:b6:83:74:89:d3:ee:
bf:db:1b:92:09:e9:34:da:3b:74:1a:cd:f2:8f:68:f0:55:e0:
44:26:f7:7c:64:69:72:63:85:33:b0:9a:25:b8:bc:07:50:45:
61:bc:a3:1f:5e:9a:1f:63:ec:c8:16:06:40:fd:31:28:37:c0:
86:f6:d1:92:48:92:a6:1e:b6:65:35:09:3e:fe:05:40:a4:c5:
f3:8e:b9:1a:1c:67:49:34:57:37:8e:90:78:0d:53:1c:90:06:
42:26:13:2d:ac:62:8b:5c:a2:e1:e7:db:61:12:aa:df:a1:a4:
37:cd:02:c6:14:83:16:67:b4:9b:5b:67:7e:10:5a:e1:45:70:
64:76:91:ab:5e:57:c6:03:8c:b1:0f:02:b4:0e:ea:0d:75:06:
1b:ce:eb:30:6f:5c:4c:8b:59:9d:2e:bb:76:46:a4:81:5c:e6:
91:b6:45:65:67:53:36:31:11:b5:79:01:ba:19:89:9e:66:9e:
7d:99:f5:21:29:fe:0c:86:04:1b:ec:71:90:24:c7:f5:c6:4e:
78:53:62:23:21:c5:08:29:c9:64:62:d5:e8:04:6a:d2:a6:49:
91:af:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 18:28:23 2026 by rpki-client