Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: 6WH4SwDXyZN0odNssi+BZsJFBfiNuZdp31YnBIoO7C0=
Subject key identifier: B7:ED:B3:75:56:41:26:9A:C6:D1:35:4A:EF:DF:1D:C4:AE:F3:60:A7
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 5BA8CF976F95368A831BF26D0A8F1BF8DA7B22B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: 01BA
Signing time: Sat 10 Oct 2026 23:17:01 +0000
Manifest this update: Sat 10 Oct 2026 23:12:01 +0000
Manifest next update: Mon 12 Oct 2026 00:28:01 +0000
Files and hashes: 1: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
2: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: gAyFfts2BtQv8kXyN2e2HeFlZHQYxCSCm0mY4nBQYzg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a8:cf:97:6f:95:36:8a:83:1b:f2:6d:0a:8f:1b:f8:da:7b:22:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Oct 10 23:12:01 2026 GMT
Not After : Oct 12 00:28:01 2026 GMT
Subject: CN=B7EDB3755641269AC6D1354AEFDF1DC4AEF360A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:2f:a0:48:ec:d4:36:c1:4f:de:0a:c2:0c:
79:c8:91:88:b7:09:55:3d:7c:70:31:95:04:c9:61:
a7:2c:52:c3:4a:d7:75:31:19:cd:90:f8:9e:c8:c3:
34:42:39:fb:f1:55:6d:d1:1b:4a:27:a3:e1:b4:e5:
a3:f4:84:31:11:f8:6f:2e:e3:e1:bb:77:30:4b:bb:
97:16:aa:ae:66:9d:18:6b:3b:dc:cb:b1:c6:0f:f3:
76:aa:6c:03:52:0d:2f:90:09:41:d1:2c:50:42:c7:
43:ed:fd:23:cc:84:a3:c7:bb:90:ab:09:7f:3e:ca:
0c:ff:7b:55:4b:0e:32:dd:0c:e7:4e:9c:d8:02:93:
0d:13:ea:92:5c:80:70:63:a2:5e:b0:db:fc:64:c9:
69:9d:17:9b:6a:2b:e2:c9:59:ff:0f:8e:90:ac:28:
6e:8f:71:2a:71:b5:21:df:80:ae:15:7f:15:a1:03:
a7:a9:10:a3:23:91:51:06:93:ff:85:c1:22:05:0b:
82:21:ff:49:54:08:63:35:bb:9b:b5:a5:cf:24:97:
a7:bc:b3:65:11:f3:a5:30:7a:d1:85:18:21:15:29:
11:97:b4:0b:41:af:31:1e:3d:c0:e5:92:4c:7e:79:
a1:d3:43:5d:7d:a8:db:3c:4a:9e:77:b4:27:59:a9:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:ED:B3:75:56:41:26:9A:C6:D1:35:4A:EF:DF:1D:C4:AE:F3:60:A7
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dc:1a:e2:be:c0:39:94:c3:e0:1d:b2:24:7b:c1:a0:4c:60:
9e:a0:aa:40:a5:00:c7:6c:80:3a:5a:81:46:bb:3e:70:6a:21:
a9:b4:ff:76:1f:f7:22:32:fe:04:1c:12:be:e9:95:d3:8b:7c:
4e:bb:5a:cc:ea:18:61:76:c0:6a:8a:1b:bb:a8:e7:dd:90:cc:
3b:2e:ef:33:ff:9b:cd:e9:ee:a7:3a:c1:3e:e1:6c:83:3f:7c:
15:e2:fc:b4:a1:cb:4c:fb:b8:3f:2d:e8:fb:5d:6f:18:cb:73:
9a:19:c0:cb:99:9a:6d:4a:bd:5c:62:64:46:23:07:63:3d:fa:
30:61:e3:36:6f:96:ff:75:a6:1f:f8:5c:93:70:a1:8e:b7:00:
85:51:47:32:cc:41:6c:bb:59:83:29:c8:26:63:f8:be:ca:ef:
20:7d:bc:91:0b:b2:31:0a:80:72:06:07:c2:b8:86:76:dd:df:
57:b3:a5:f7:c1:f5:17:e8:35:ae:81:b1:3c:b6:74:2e:2a:38:
88:4a:aa:9c:e1:46:1e:66:ad:f7:a5:d2:72:8b:39:8b:97:9d:
6e:89:53:18:92:9b:f2:a5:bf:ec:67:99:fe:c1:b9:4a:7c:5c:
de:29:1b:d8:3b:a3:3d:d1:42:be:8a:68:65:0f:34:69:c0:30:
fd:2d:7a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:51:49 2026 by rpki-client