Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: ZWq1nHVPZsmZu8Ouq1GgbVMdN3jY6AJvGNj6xJlvQ28=
Subject key identifier: 30:4F:D9:8D:0A:A0:B3:13:73:94:4B:35:86:B7:D4:28:F2:6C:EF:18
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019E10427BC52C31C5566F903C51654B88A5
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0BB7
Signing time: Sun 10 May 2026 05:00:36 +0000
Manifest this update: Sun 10 May 2026 05:00:36 +0000
Manifest next update: Mon 11 May 2026 05:00:36 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: eOxh0UXXqFHImACiwPzWkC5l3hZDcxIRORq/5wIU/cA=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: 9qVWCxoeYL/GhTJpjrG4qDVm4i8C1gb5L5/af7AShFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:10:42:7b:c5:2c:31:c5:56:6f:90:3c:51:65:4b:88:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: May 10 05:00:36 2026 GMT
Not After : May 11 05:00:36 2026 GMT
Subject: CN=304fd98d0aa0b31373944b3586b7d428f26cef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:1c:69:74:62:d1:e2:48:20:bf:d3:a0:67:
06:c9:01:f4:9a:68:cf:59:f5:b4:5f:bc:19:f6:e9:
0e:a1:51:f9:3e:88:cc:23:3f:11:5c:f8:a0:3d:ef:
aa:f3:46:f7:84:dd:6a:b1:54:86:75:81:f8:2b:72:
82:54:89:59:48:87:3f:5a:57:2e:b0:cf:bc:b7:fb:
8a:36:68:6d:d3:02:ae:46:21:41:67:90:e0:68:94:
f7:b6:3e:a5:bd:cb:c9:e9:68:56:fc:2c:59:ce:13:
1d:be:8e:33:77:c8:b0:43:50:fd:d2:e0:3f:90:14:
40:34:15:b0:ca:c6:e6:49:85:09:7c:d2:2d:63:64:
72:24:7e:2b:b5:99:63:c9:71:ae:5d:12:e7:cc:78:
24:34:be:cd:f7:3c:49:c6:81:44:ae:39:c9:a7:f5:
b6:47:d9:cc:5d:f6:ca:4b:46:5f:ae:2b:ac:91:3a:
04:04:01:82:7a:a2:5d:27:b8:81:9a:84:3d:0d:c0:
98:a8:94:3c:5e:91:da:e6:59:f0:6e:a0:79:30:b0:
08:15:a7:46:a6:29:60:21:22:b1:05:1b:d0:76:cc:
f3:e6:de:7c:fd:71:c9:9a:5f:b6:15:47:bd:8e:79:
1a:58:05:94:51:f9:8e:ab:05:dc:8a:a6:fb:77:7f:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:D9:8D:0A:A0:B3:13:73:94:4B:35:86:B7:D4:28:F2:6C:EF:18
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e7:46:db:93:be:33:b9:e1:3e:d9:c7:26:04:92:fa:48:a7:
91:98:ac:0e:3d:11:95:62:c9:2e:aa:d3:8e:bc:ac:d7:7c:67:
93:34:7a:8d:87:4a:3c:cb:39:0b:ec:6f:d5:fb:7f:f6:2c:f2:
2e:2b:0e:d1:df:97:e0:03:cb:88:7e:f0:61:97:dc:87:6e:39:
a2:24:d0:a4:3b:ca:f5:d5:9e:e8:6a:4e:f7:cb:42:f5:ba:45:
a8:f2:89:4f:a4:6a:58:ce:2f:c5:a0:22:23:6b:4b:0a:5f:49:
92:01:54:25:93:18:2d:4b:9d:12:1a:44:6e:ba:b7:b9:4f:6e:
51:c1:f7:81:6f:7a:7e:ca:cc:87:da:9f:7d:9f:9e:2a:aa:45:
d4:87:43:bc:50:ed:1d:da:a5:70:8b:2f:8c:2e:3b:49:de:f2:
09:8d:d4:4d:bd:1d:55:a2:55:c4:48:b1:af:c4:aa:fd:a5:c5:
04:91:f4:47:fe:8c:52:8a:43:26:e7:75:ed:f9:6a:a9:2b:b6:
cd:a8:a3:93:6e:ce:52:bd:70:94:8c:25:bf:dd:24:24:8d:a1:
4c:a7:d2:81:83:ee:80:1f:a2:fc:c8:0f:72:4b:8e:c1:a1:77:
3d:b9:12:da:82:a1:77:56:ea:c0:9b:ad:21:ce:48:e4:11:5c:
a6:ff:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 08:28:50 2026 by rpki-client