Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: +XYQauZUXh2JyIZhCDEzjJKlTYOHxjYDaWh414nkQTE=
Subject key identifier: 33:92:1F:54:B7:64:39:A0:63:A4:5B:04:DD:5D:C5:8D:C7:76:34:D4
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 62D1D17643D2C740E4EC314149F2DA344D92E5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: B1
Signing time: Wed 25 Mar 2026 17:20:55 +0000
Manifest this update: Wed 25 Mar 2026 17:15:55 +0000
Manifest next update: Thu 26 Mar 2026 20:12:55 +0000
Files and hashes: 1: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: vWkEfHo5Dvf2wwiQikvQWt6Fkz+tigRdggbqnoWotSQ=)
2: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d1:d1:76:43:d2:c7:40:e4:ec:31:41:49:f2:da:34:4d:92:e5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Mar 25 17:15:55 2026 GMT
Not After : Mar 26 20:12:55 2026 GMT
Subject: CN=33921F54B76439A063A45B04DD5DC58DC77634D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:b6:99:3e:87:d5:61:ac:71:d0:e7:fc:4f:
b5:ff:c4:e8:25:9c:c2:dc:dd:f4:6e:12:97:ed:d5:
b4:98:58:8a:20:0f:be:62:94:19:25:91:7d:b3:58:
f5:d7:4a:73:aa:85:5c:25:e4:48:6e:20:9f:0c:d3:
8b:fe:b2:a4:e3:be:fd:52:88:fb:bc:6a:30:11:17:
81:0b:fe:14:3b:b9:18:36:13:39:25:05:52:f4:43:
19:c5:6a:be:5c:07:0c:8b:85:00:30:f2:ed:ee:55:
da:4d:e7:6e:29:ca:8f:16:1c:2b:47:63:14:d0:80:
62:f8:b1:72:74:61:70:48:06:88:8e:f2:35:64:fe:
c0:7a:45:ff:2f:02:97:dc:73:f0:e7:f7:47:cf:8c:
b2:1a:8a:0f:e8:14:87:72:59:99:b2:ea:55:52:42:
5a:1e:aa:f8:38:b8:55:c2:04:07:43:e8:46:93:04:
d9:e5:d6:f2:1f:b6:e3:b0:5e:c4:24:03:a3:12:bb:
44:52:90:47:f2:2b:af:b5:fb:a0:e3:e3:14:6c:97:
1e:c1:31:2a:ef:a8:c9:cc:ba:cb:aa:de:96:d0:b2:
73:1c:55:c0:25:00:b5:f2:76:d0:97:4c:1e:7d:21:
53:00:64:5f:af:df:c0:fc:db:27:96:4f:e0:de:9a:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:1F:54:B7:64:39:A0:63:A4:5B:04:DD:5D:C5:8D:C7:76:34:D4
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7c:ad:3b:7f:cd:63:48:af:fd:d3:bb:af:43:a9:0c:1c:5c:
8d:d6:16:25:7a:2b:86:c9:bb:91:c9:cf:5c:00:73:e1:70:b7:
f2:41:36:27:c3:78:33:9a:a1:28:92:85:d7:ed:63:bc:3f:4e:
ca:18:37:db:ad:f7:07:d4:d7:c0:d2:44:1f:b9:a2:03:29:6a:
bf:81:fa:af:18:8b:24:c5:55:17:91:75:1e:de:3a:51:ca:ee:
0e:26:e8:13:e6:5a:4a:b9:a6:43:d0:cb:e9:a1:3e:63:49:96:
79:c0:a3:ff:ae:67:f4:ae:ff:4c:aa:cf:c8:9e:f6:bc:9d:d0:
a3:81:1c:bc:73:50:89:3c:a8:08:33:b8:9b:82:f9:5b:73:78:
46:8e:c3:07:bc:6b:42:31:ba:69:88:95:c9:d5:eb:14:1c:9d:
35:a6:e3:dc:92:d9:29:27:b6:79:8a:98:af:01:e4:fd:bf:8a:
76:ca:14:ac:af:4e:e0:9f:e7:a7:15:c4:81:b9:ce:1f:31:23:
cf:e4:cb:d0:19:38:c7:aa:f9:3f:4b:e9:47:b5:6f:3b:f1:3f:
b0:30:57:ae:84:99:11:17:cc:f7:e6:b9:cb:ac:4d:14:01:1a:
6e:46:b6:a3:85:94:2f:7e:7e:ec:7b:d7:66:ef:23:89:92:7f:
e3:5b:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:46:22 2026 by rpki-client