Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: TGIETj+WbHLSOx46P2+2wXlJAfeRRKOc7kKiLQUmva0=
Subject key identifier: EB:BB:36:81:9C:24:C7:67:19:F4:72:9E:FD:75:47:86:80:5D:7D:DD
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01A1C81F4D54A410BF15E060773BDD0E93B8
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0E33
Signing time: Wed 11 Nov 2026 01:00:56 +0000
Manifest this update: Wed 11 Nov 2026 01:00:56 +0000
Manifest next update: Thu 12 Nov 2026 01:00:56 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: 8Mb+u9svvO1dRPgaNG8tDBcVHlKfspDr3eMuEiG8zoE=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: 6nYxfHk/+TPvvSbVemc820V8vCbt8zQM71xbLwRqAWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c8:1f:4d:54:a4:10:bf:15:e0:60:77:3b:dd:0e:93:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Nov 11 01:00:56 2026 GMT
Not After : Nov 12 01:00:56 2026 GMT
Subject: CN=ebbb36819c24c76719f4729efd754786805d7ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:a3:ad:ad:69:50:7f:a8:a1:ec:51:08:c8:
b4:10:e1:15:46:4b:36:5d:d3:20:a5:bb:5f:63:e5:
b6:4d:6c:74:84:fc:88:12:38:2e:6d:b7:54:46:9c:
2b:78:bf:67:da:ad:f5:dc:ea:3f:fd:c9:4a:f1:46:
f8:ed:0e:ef:c9:27:d4:30:5c:ec:6b:7f:87:af:55:
dd:0c:49:a5:32:ec:dd:b0:08:52:5b:9a:52:69:25:
cb:47:d1:46:41:cc:d5:c6:86:e6:cd:19:ea:65:0c:
af:d8:4f:73:7d:04:6d:aa:67:03:2d:19:aa:5f:fa:
10:1e:a4:95:bc:54:16:f4:3a:c2:56:b2:5d:19:77:
e3:a1:c6:4f:86:35:c4:bf:18:4d:57:d3:92:b7:5a:
0f:15:a1:c9:43:91:fe:ff:0c:0c:c3:ee:91:e8:18:
d1:e5:21:b4:c9:55:38:67:3a:cc:ef:fc:1a:07:12:
c5:38:73:b2:2f:01:a3:c0:15:66:0f:c9:a7:c6:59:
a4:93:ca:11:ab:02:58:75:f2:81:41:70:85:94:f6:
25:c2:e6:4c:73:a5:70:1f:57:83:27:2c:83:b5:14:
01:d6:3c:07:34:ca:07:9a:7c:0c:5e:b7:cd:80:45:
ab:70:14:91:e6:14:84:33:b7:b5:cd:e2:56:f5:22:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:36:81:9C:24:C7:67:19:F4:72:9E:FD:75:47:86:80:5D:7D:DD
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:c3:34:c2:ab:19:68:76:5f:30:c3:05:38:d2:5a:14:6d:
41:bb:35:e0:70:1a:38:01:61:da:8c:97:62:1e:62:09:aa:82:
e4:3b:82:ec:86:39:e2:2e:94:5a:f6:db:01:28:38:3a:2e:67:
95:91:ee:ae:99:57:d1:ae:31:3e:6f:cc:85:01:bf:a8:97:a7:
8e:31:8f:2a:eb:d4:59:11:6f:db:10:51:7d:3e:45:8e:f5:2f:
6a:02:dc:ba:40:7a:4d:4e:6b:f6:42:80:ee:88:84:49:8b:e2:
fa:cc:e4:2d:3f:a7:c4:ec:03:69:d0:4c:34:6c:d2:a9:be:56:
3e:88:76:c0:bc:87:66:c0:ee:58:6a:cf:70:03:27:3b:b2:39:
d8:23:97:dd:70:9f:c6:51:cb:e0:a0:93:a2:f2:93:28:ef:50:
4e:44:7e:6a:94:cd:af:56:a0:d6:02:8e:f4:17:e6:25:3a:61:
5d:55:36:04:68:07:9b:43:61:dd:4b:29:27:a2:46:67:6a:80:
1c:31:11:21:0a:88:37:70:4d:98:bb:41:12:92:7f:38:bc:e2:
e1:bb:86:70:bb:70:67:c0:31:72:c3:3e:aa:76:64:8e:15:51:
19:f3:c8:c5:19:01:31:5f:fa:8c:78:3e:fd:43:85:5f:df:06:
c0:e0:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:33:58 2026 by rpki-client