Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: +DYYa1C9CV19u2HneNF2DsjhtWjgwqdsdN6z40Jd0b4=
Subject key identifier: 4A:BE:EF:36:F3:D8:99:3A:5B:E9:15:5A:62:36:18:4B:B5:FD:B2:31
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019FE69C9D1031D297A0B519E8ED0C419AC2
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0CF8
Signing time: Sun 09 Aug 2026 13:00:51 +0000
Manifest this update: Sun 09 Aug 2026 13:00:51 +0000
Manifest next update: Mon 10 Aug 2026 13:00:51 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: 1TQmHSv25HVSwydqs6jmTb5iftlRzbEp4QGpvks1PnQ=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: Rf4++60BeFs38DSxfKNPslc4r3x1ktDKPBie6DOOrVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Aug 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:9c:9d:10:31:d2:97:a0:b5:19:e8:ed:0c:41:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Aug 9 13:00:51 2026 GMT
Not After : Aug 10 13:00:51 2026 GMT
Subject: CN=4abeef36f3d8993a5be9155a6236184bb5fdb231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:a4:f6:a7:51:a2:69:00:37:5e:8f:f7:c0:
33:c5:5c:9c:ae:b5:23:36:34:a0:fc:4d:3a:2d:35:
2c:6a:8f:b6:71:c1:ee:f4:8c:0e:56:7c:a5:c6:c4:
db:19:3b:6e:84:f4:e5:20:5e:2b:07:ed:ce:a5:7d:
62:bb:3b:86:47:cb:fe:42:2b:ac:65:b0:a5:cc:02:
fe:11:3c:aa:42:b9:14:48:47:42:85:04:b1:11:78:
86:1a:01:fa:99:1a:e7:bb:89:1d:33:10:d0:75:6c:
e4:f0:76:1d:bf:a6:fe:3d:43:6e:d5:cb:e8:06:23:
eb:21:62:a3:90:d7:b0:b2:81:4b:3e:37:9b:03:d4:
ba:87:c1:cb:c8:16:eb:61:50:fa:37:6d:19:91:ee:
47:37:7e:a6:bb:5a:fe:6f:51:5e:a9:55:ac:74:da:
24:16:32:19:b9:65:c0:c4:0a:0c:a3:eb:b8:0f:cf:
65:e4:16:18:03:b2:a7:2c:8e:85:d5:0b:58:c1:72:
e2:81:25:0f:57:bf:0c:f2:7f:fa:b0:52:ea:30:bd:
9f:19:e7:bf:cb:b1:d7:a4:dc:57:1a:f4:63:8e:07:
38:0e:f9:f0:c6:48:4b:e8:0f:06:09:21:fd:e5:8d:
cf:94:46:ab:85:57:21:1d:5d:dc:36:d2:1d:1b:3f:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BE:EF:36:F3:D8:99:3A:5B:E9:15:5A:62:36:18:4B:B5:FD:B2:31
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5f:76:4f:95:68:9a:41:f0:15:53:b0:00:9f:36:03:d3:53:
59:3e:c1:94:52:cf:bc:88:0b:f2:55:64:f6:ee:59:58:8e:36:
a6:51:b9:e3:e9:47:7e:3f:32:ab:7d:85:84:fc:04:d7:b4:3b:
5b:1b:c3:dd:6e:15:b0:c5:2a:d4:6f:42:62:90:91:39:51:b9:
d0:02:2e:81:58:f4:c9:f8:c9:80:cd:6f:ef:4c:f2:2a:3f:ba:
a0:01:8c:df:27:f4:6f:fa:0d:ce:c2:7d:9e:f3:5a:61:bd:b8:
b8:0b:90:31:30:a4:2e:77:3d:6f:c9:d2:b0:5d:01:f6:f1:4a:
58:da:a8:39:23:f4:46:19:38:84:19:bd:2a:25:1e:21:1d:43:
49:02:ca:c3:77:d9:94:d1:08:d9:da:fb:d7:83:6a:ef:f5:53:
95:83:d3:94:45:74:c7:9e:b6:e9:14:39:70:1e:c0:eb:db:c1:
65:a7:a2:61:2f:65:15:c2:04:f3:5c:97:1d:35:f9:cb:d5:c0:
4e:b4:5a:7f:e3:1c:9b:4f:c5:4c:0c:50:df:a0:d3:54:44:80:
30:6c:96:f0:90:83:46:3c:47:58:ae:a9:2b:a4:03:02:96:99:
cc:ae:20:e6:e2:69:fa:3a:08:76:50:28:86:b5:9e:e7:c0:b9:
83:78:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 22:03:46 2026 by rpki-client