Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: QMdfjriPVUnObdS1029IPLPpnN4/M1j1Qx4dwrTlphI=
Subject key identifier: AA:70:77:4B:79:F8:48:6C:8D:69:71:C9:4A:4D:65:2E:8F:2E:B2:92
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01A1A7EF94CE030ED0E221E720C6224EFB36
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0E1E
Signing time: Wed 04 Nov 2026 19:00:58 +0000
Manifest this update: Wed 04 Nov 2026 19:00:58 +0000
Manifest next update: Thu 05 Nov 2026 19:00:58 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: c7oO1SA2h/G0Zx1LZNXq/4wapU1wU7YC6YpFX+GsuEo=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: gwZ551F1EmFrHmd+VmCge/dKn2+kWlDjcDNzGB4JnT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:ef:94:ce:03:0e:d0:e2:21:e7:20:c6:22:4e:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Nov 4 19:00:58 2026 GMT
Not After : Nov 5 19:00:58 2026 GMT
Subject: CN=aa70774b79f8486c8d6971c94a4d652e8f2eb292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:cb:5a:ea:c8:f5:f4:ae:a5:dc:8d:0f:36:
a4:8a:dc:02:2e:35:c1:35:d2:9a:78:a8:50:ab:3e:
66:5d:cd:a0:35:8f:7f:9d:35:0f:52:af:a0:de:c7:
ce:da:70:e7:bc:3f:5b:fc:9a:1f:8c:67:82:be:7c:
2f:9f:42:9c:4d:06:57:84:66:a8:b5:2e:82:39:0a:
f4:a8:b6:9d:b2:75:88:d8:cf:8d:e2:f4:85:1e:d4:
d7:44:a1:75:c9:e6:87:88:23:80:40:e0:dc:93:88:
8d:e1:97:0e:a9:7d:a7:aa:b2:1b:fd:19:3d:a3:d1:
34:c9:d2:22:4b:b1:cc:38:ad:bb:ec:a1:97:3b:e0:
2b:35:87:41:37:d8:a1:ee:d2:30:35:9b:4b:7d:f4:
49:82:3a:7d:54:4a:bf:25:a1:fc:ae:96:4f:10:9b:
ab:43:7c:43:1e:e5:66:da:9f:f1:34:08:b7:92:20:
ce:0b:87:02:dc:ef:80:cc:b7:74:03:3a:a4:31:d2:
d4:73:92:9c:5a:6f:1a:ac:3a:ea:f3:65:b5:75:c5:
a0:aa:ac:3e:c7:14:97:ac:82:e2:76:dc:d5:30:75:
36:39:7d:c9:c7:97:96:a7:73:b8:1b:73:14:bf:41:
3d:bf:eb:6d:2d:7f:00:f3:b5:53:ed:89:64:99:0b:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:77:4B:79:F8:48:6C:8D:69:71:C9:4A:4D:65:2E:8F:2E:B2:92
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:f9:ac:37:d2:80:ae:c5:07:e4:3a:9e:53:61:32:78:2d:
88:48:25:a2:7d:43:3b:55:07:5a:8c:06:5c:50:45:6e:0f:6a:
54:c0:80:a3:af:12:64:4d:0b:0a:7a:41:69:8d:b7:3d:34:72:
8e:6d:bb:82:a7:b7:43:3a:45:ed:42:ec:04:62:a1:98:af:5e:
46:4b:26:83:60:b0:9e:a5:e3:e3:8f:16:ba:ad:b6:2e:3a:d6:
39:c6:bc:44:b1:6a:8d:4b:53:fc:d8:b9:93:75:7e:fe:29:4c:
44:ba:cb:cd:18:b6:e6:ee:cf:eb:45:3f:b3:38:f1:fa:f7:b2:
18:95:56:92:c0:47:5b:f0:2d:bf:be:64:8e:c6:60:b6:f0:7c:
fa:be:9e:e4:2f:07:f7:e4:4f:19:18:b8:8f:dd:11:a2:fc:24:
ac:df:05:62:63:9b:ec:20:c4:ab:43:21:db:95:03:73:74:47:
02:53:59:c8:57:13:6b:75:71:93:fc:a2:53:48:12:18:01:65:
c1:e6:6c:e3:48:65:71:0a:29:a3:7f:0f:29:32:26:3d:f9:a3:
84:9d:87:46:41:b9:62:53:91:3f:62:08:94:da:af:a9:48:8a:
46:8f:3f:3c:4c:f2:e7:21:7f:19:8f:2c:01:75:6e:f4:12:38:
4b:09:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 23:18:44 2026 by rpki-client