Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: pq8kS4S+XzGJsWHcIK1aQs83qEFIFq1Cm594kkTP9oY=
Subject key identifier: 5A:A6:13:E1:CC:F9:F7:C4:D6:43:61:D9:01:A3:30:89:18:9F:0B:41
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019D2592F7120534C19A8E02A99A609B8F7A
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0B15
Signing time: Wed 25 Mar 2026 15:17:46 +0000
Manifest this update: Wed 25 Mar 2026 15:17:46 +0000
Manifest next update: Thu 26 Mar 2026 15:17:46 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: 7FP+HabYaq5bC1hguQo1Hh2RS02yG7mWw8d7gTIDV0c=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: 2Z6KN58L/8C65BbkmNjOd3h5VZ1O//DIkgo1Jl390Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:92:f7:12:05:34:c1:9a:8e:02:a9:9a:60:9b:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Mar 25 15:17:46 2026 GMT
Not After : Mar 26 15:17:46 2026 GMT
Subject: CN=5aa613e1ccf9f7c4d64361d901a33089189f0b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:1c:42:8c:38:d1:ce:91:6a:77:ce:f9:b5:
ac:60:01:c1:fe:90:23:46:54:ca:cc:f6:59:2c:02:
70:09:d0:05:fd:76:61:78:81:ab:42:09:53:fc:5a:
31:84:e5:81:19:c5:b1:36:d2:06:86:2c:65:1b:cb:
e4:c2:00:1f:1a:2d:85:62:20:5b:f1:56:8b:ed:69:
17:13:34:b0:e2:16:40:2b:42:62:3e:67:53:24:f9:
d3:c8:af:74:da:c1:a6:97:d6:09:b6:41:79:1a:40:
9e:d7:2b:99:bb:fc:a8:7a:9f:ce:26:a5:24:46:9e:
8c:71:07:5e:ae:c3:87:56:01:90:7e:e0:af:8d:93:
25:fd:09:b9:ce:55:fc:91:d9:7c:20:5f:7c:a7:42:
26:b1:ea:6c:1b:98:aa:35:d2:29:cf:c7:cc:e6:a9:
e2:2a:0d:99:0e:35:04:e0:85:f8:6d:2a:8d:c0:a6:
72:47:b7:8b:b5:ca:8a:e7:80:8d:a6:ba:c4:2a:b7:
a9:31:15:b5:1e:6a:b2:36:9a:43:ca:cd:27:3e:89:
97:72:4e:f6:55:83:2f:a3:12:13:15:59:1f:71:71:
cc:93:c1:77:08:8f:43:2d:c0:2a:2e:7e:36:c8:27:
8b:24:9c:4e:76:cc:32:6a:e5:b3:8e:ed:4b:05:54:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:13:E1:CC:F9:F7:C4:D6:43:61:D9:01:A3:30:89:18:9F:0B:41
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:87:db:a2:5a:50:9f:74:3e:b4:c7:14:f7:2b:5d:36:39:9d:
17:57:b6:16:05:97:a5:a2:36:79:a3:88:5f:fe:f1:a0:a4:58:
f8:69:63:38:3a:3e:2d:c2:60:b3:9a:aa:69:cc:48:65:79:85:
65:52:1c:f1:4f:54:34:f3:0d:f7:ff:58:ea:80:66:f4:b4:26:
72:5a:8c:dd:70:51:f3:da:99:39:62:24:28:7d:88:ea:d7:56:
f7:ae:21:98:76:c3:69:ad:29:84:da:3b:42:19:2f:0e:6c:28:
0e:89:83:6b:56:73:c9:e7:88:c4:6d:f3:93:c8:65:33:8c:10:
39:42:06:54:d7:0f:5c:e3:52:50:85:4b:17:62:ce:09:e7:21:
af:7d:6f:bc:d2:03:d4:0d:8a:fe:7b:0c:3d:74:af:e1:f1:b2:
ea:01:b8:3b:45:c7:46:a9:13:b2:b6:b7:1c:5b:f4:c5:92:4e:
fe:34:b7:37:11:9c:ad:5d:3c:55:7a:03:7b:85:73:83:81:8f:
31:46:e8:f2:df:07:92:af:2e:ae:ca:6b:42:a6:d2:4a:55:d2:
41:5b:c9:98:9b:a6:89:09:5b:8f:81:6c:6d:79:31:2b:11:9b:
a5:04:9d:45:b7:5b:4d:e9:7a:2d:15:fa:d1:51:f1:6c:8a:83:
3a:77:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:24 2026 by rpki-client