Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: wnBDOBwPz+ub+6OpX5POhMe2T9wGMC8ceTLwynamDpk=
Subject key identifier: 7E:C9:F8:90:90:EB:CA:A7:BF:D9:B6:E9:ED:96:17:71:F9:F6:CB:08
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 1D350EE61C529CF5C28E212D9AC7B3B1AB78F568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: 017D
Signing time: Wed 26 Aug 2026 01:54:58 +0000
Manifest this update: Wed 26 Aug 2026 01:49:58 +0000
Manifest next update: Thu 27 Aug 2026 05:05:58 +0000
Files and hashes: 1: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: rtD8Pb7nv6GKB1Is1Pqpsdgq7RL4PEeenGzOwGaoIUk=)
2: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:35:0e:e6:1c:52:9c:f5:c2:8e:21:2d:9a:c7:b3:b1:ab:78:f5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Aug 26 01:49:58 2026 GMT
Not After : Aug 27 05:05:58 2026 GMT
Subject: CN=7EC9F89090EBCAA7BFD9B6E9ED961771F9F6CB08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:5a:cf:27:33:f8:ef:79:42:35:80:70:b7:
30:de:92:86:84:0a:8c:19:3f:1b:cf:90:12:d4:56:
de:49:c4:b6:0a:ce:a5:9e:18:00:7b:92:d2:05:c7:
6f:aa:1c:21:cd:9a:69:b0:55:25:6b:cc:d2:d6:c7:
23:a2:37:26:ee:75:d0:67:31:32:8e:3c:ad:52:c6:
65:c1:e4:59:a1:d1:cf:23:07:5e:98:a9:01:8f:84:
74:b5:92:ef:8e:82:f2:57:21:c9:08:02:0a:44:8b:
fb:ca:f9:a1:d1:57:96:e9:4c:5f:37:8d:1e:2c:5f:
28:80:05:66:a7:70:18:d3:8e:a2:fd:4c:d9:9c:f6:
60:46:a7:cd:83:cb:06:ca:a3:06:04:22:a0:e6:b1:
76:f6:23:f6:a3:21:f3:df:a4:e5:89:2b:91:b0:06:
30:45:78:56:af:a8:fc:88:13:2d:09:b2:20:c4:44:
c2:07:ce:bd:2c:17:72:42:2b:22:bc:9a:a5:b7:49:
31:80:c7:4e:5c:4e:c7:37:5b:11:58:6e:92:81:6f:
21:10:ca:e6:44:b2:53:df:da:06:31:58:4f:70:7b:
d6:c5:d9:f1:6c:27:09:bb:39:18:32:71:03:8f:b7:
23:ec:4d:ea:dd:3a:74:a7:28:fd:96:15:c4:22:53:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:F8:90:90:EB:CA:A7:BF:D9:B6:E9:ED:96:17:71:F9:F6:CB:08
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d5:90:f0:10:26:22:5d:eb:11:55:17:b9:b2:28:94:02:0f:
9c:4e:8f:8f:bf:a4:39:9b:e6:af:e8:16:d2:bf:c4:1a:4f:a2:
f3:40:b2:89:f7:27:57:2b:9f:5a:27:19:d8:b7:8d:d1:63:ca:
b8:66:53:9f:8c:03:6c:ec:d5:73:26:12:6a:13:21:17:86:fe:
bd:1c:a7:2f:9e:a5:f9:17:dc:03:db:f3:cb:bd:b5:1f:1a:27:
71:a5:4d:2b:ac:24:55:a1:eb:d1:cf:66:86:72:7d:85:d7:ee:
e3:e1:5e:fe:55:b5:3f:0a:9f:f7:b4:c1:04:60:c4:18:d7:84:
b8:c2:bd:2f:58:05:0d:80:fa:01:98:8e:16:81:53:ce:19:a9:
ea:e3:e4:2d:f6:97:30:ac:13:39:c9:ef:af:4b:f5:16:e3:8d:
f8:c8:c0:2a:28:da:23:26:0e:e9:e6:b2:76:17:75:5b:f5:d3:
06:4f:97:6c:95:b2:1d:31:c8:f0:1e:d9:2f:26:e7:b9:33:49:
f6:6b:6b:86:07:63:37:97:22:db:96:52:84:4f:7d:a1:bd:41:
70:6b:a6:44:ee:3c:4e:26:24:51:64:5b:dc:8f:e8:11:57:22:
1d:db:dd:b9:fd:15:2a:a5:6f:56:67:d5:47:38:dc:e2:1b:fa:
39:6c:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:21 2026 by rpki-client