Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: idGSuIA1YNDuk2pjjFhfTSrK76CPFYoRDH6OuC3acGY=
Subject key identifier: C4:36:B5:7C:15:F5:68:37:47:FB:3C:65:3D:9B:7A:15:33:00:7B:49
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019D2771AE35ED6850E5F943C64FFA31E0A2
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0B16
Signing time: Thu 26 Mar 2026 00:00:38 +0000
Manifest this update: Thu 26 Mar 2026 00:00:38 +0000
Manifest next update: Fri 27 Mar 2026 00:00:38 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: lZwB2ZrhR0hCJBnxGjrGWYFKE3HkAeJYKRVCYwDsH1Q=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: 2Z6KN58L/8C65BbkmNjOd3h5VZ1O//DIkgo1Jl390Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ae:35:ed:68:50:e5:f9:43:c6:4f:fa:31:e0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Mar 26 00:00:38 2026 GMT
Not After : Mar 27 00:00:38 2026 GMT
Subject: CN=c436b57c15f5683747fb3c653d9b7a1533007b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:f6:6a:e6:5e:1e:88:63:bd:3f:1c:b8:8f:
3c:0c:77:3d:0b:73:ab:cd:c2:fc:d7:2f:26:ba:3d:
bc:04:7a:45:92:42:1c:1b:a8:47:b4:a9:c7:14:29:
6e:1e:54:be:cd:79:dc:47:be:da:d9:55:eb:6f:74:
ed:6f:e2:3f:dd:64:90:c1:0c:50:79:42:17:5b:d9:
51:64:b1:82:89:a0:05:13:f1:55:89:33:1d:c5:42:
d4:19:bc:ff:4d:64:4f:a4:93:a9:6e:13:40:cc:fc:
77:25:a3:aa:70:2f:fa:3f:10:16:ad:7e:6c:3a:92:
ed:3f:ba:5e:8d:0b:ea:90:82:f8:a8:ba:69:a2:43:
85:77:2c:7d:a6:2e:6e:2b:fc:3b:3a:f7:1a:ee:93:
fa:c9:d3:e7:a9:f7:f3:41:48:4e:cb:06:aa:74:20:
59:1d:4b:56:03:7b:11:6f:66:2a:69:b9:55:cb:5a:
b3:f9:eb:34:17:02:4b:bf:4d:a4:13:44:cd:6f:bf:
99:12:76:b1:ce:2b:e0:96:d7:2b:6f:56:18:82:f2:
0a:ca:a0:90:59:fd:0c:e5:f9:6b:4d:40:86:fd:c6:
60:8f:9c:62:0c:dc:1f:ed:06:35:f3:91:41:bc:22:
7f:5c:84:bf:e0:5d:ab:19:93:d0:f4:b9:86:db:ec:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:B5:7C:15:F5:68:37:47:FB:3C:65:3D:9B:7A:15:33:00:7B:49
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:60:2e:27:a4:f6:51:15:51:51:46:89:1c:73:1c:0c:f9:42:
aa:3e:64:e1:a5:4a:e5:15:2a:15:23:40:a8:7e:ad:c2:39:93:
c8:e1:f8:6b:85:77:c2:d3:7f:7b:fe:8e:ea:cf:76:44:c9:18:
c6:35:7c:2e:fb:89:fb:85:e0:a5:af:9e:f5:b5:b4:de:04:95:
b4:70:58:bb:76:aa:c8:15:d4:42:5e:63:d2:98:fd:e3:c5:f3:
07:e3:40:27:42:67:e3:e0:f2:a1:7d:8a:4c:40:27:1c:c5:6f:
82:8e:d0:f4:d4:75:be:e3:0c:d5:dd:f2:ce:d6:c8:b2:14:46:
fd:84:d0:c3:b8:e7:39:f5:b7:ea:c0:54:22:26:6f:f9:d1:0a:
3d:b2:fc:75:78:a9:98:8e:28:55:aa:28:28:a9:4f:75:18:02:
55:d1:d7:26:cf:2e:76:59:2a:fc:57:6d:5a:ed:dd:8d:11:23:
26:0b:ae:05:5f:36:da:35:52:03:45:e9:f4:9d:c3:98:72:c9:
86:35:86:87:cc:ff:ca:14:06:53:75:c6:09:0d:99:17:2a:39:
23:cc:7b:b1:63:4c:29:cb:0d:80:21:37:8b:f3:8d:00:79:1d:
aa:7b:51:67:b5:ac:e1:1d:45:90:31:57:02:e5:bb:cb:3b:77:
06:e6:d8:83
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAZ0nca417WhQ5flDxk/6MeCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi
MTczMWEwHhcNMjYwMzI2MDAwMDM4WhcNMjYwMzI3MDAwMDM4WjAzMTEwLwYDVQQD
EyhjNDM2YjU3YzE1ZjU2ODM3NDdmYjNjNjUzZDliN2ExNTMzMDA3YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCv2auZeHohjvT8cuI88DHc9C3Or
zcL81y8muj28BHpFkkIcG6hHtKnHFCluHlS+zXncR77a2VXrb3Ttb+I/3WSQwQxQ
eUIXW9lRZLGCiaAFE/FViTMdxULUGbz/TWRPpJOpbhNAzPx3JaOqcC/6PxAWrX5s
OpLtP7pejQvqkIL4qLppokOFdyx9pi5uK/w7Ovca7pP6ydPnqffzQUhOywaqdCBZ
HUtWA3sRb2YqablVy1qz+es0FwJLv02kE0TNb7+ZEnaxzivgltcrb1YYgvIKyqCQ
Wf0M5flrTUCG/cZgj5xiDNwf7QY185FBvCJ/XIS/4F2rGZPQ9LmG2+zQ+QIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFMQ2tXwV9Wg3R/s8ZT2behUzAHtJMB8GA1UdIwQY
MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4
by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGRgLiek9lEVUVFGiRxzHAz5Qqo+ZOGlSuUVKhUjQKh+rcI5k8jh+GuFd8LT
f3v+jurPdkTJGMY1fC77ifuF4KWvnvW1tN4ElbRwWLt2qsgV1EJeY9KY/ePF8wfj
QCdCZ+Pg8qF9ikxAJxzFb4KO0PTUdb7jDNXd8s7WyLIURv2E0MO45zn1t+rAVCIm
b/nRCj2y/HV4qZiOKFWqKCipT3UYAlXR1ybPLnZZKvxXbVrt3Y0RIyYLrgVfNto1
UgNF6fSdw5hyyYY1hofM/8oUBlN1xgkNmRcqOSPMe7FjTCnLDYAhN4vzjQB5Hap7
UWe1rOEdRZAxVwLlu8s7dwbm2IM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:37 2026 by rpki-client