Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: hEhKojboGf0Z4lUHGnnRMTDruRY1znxsVs4wjeOvFZg=
Subject key identifier: AE:6A:F2:4B:B7:BD:FF:56:5B:47:98:F6:71:3B:6C:EB:AE:D8:E1:19
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 6C2E20D1AC02A331EB09482E48E773966A628D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: 0150
Signing time: Thu 23 Jul 2026 09:39:34 +0000
Manifest this update: Thu 23 Jul 2026 09:34:34 +0000
Manifest next update: Fri 24 Jul 2026 12:59:34 +0000
Files and hashes: 1: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: PRWiNE8L6bsJZs/yeMM9h/e6jw6qkfzERNfNFsi1lNk=)
2: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2e:20:d1:ac:02:a3:31:eb:09:48:2e:48:e7:73:96:6a:62:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Jul 23 09:34:34 2026 GMT
Not After : Jul 24 12:59:34 2026 GMT
Subject: CN=AE6AF24BB7BDFF565B4798F6713B6CEBAED8E119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b4:89:9a:56:22:c1:97:9c:bb:f1:e6:94:42:
3e:15:0c:4a:06:09:82:87:2f:cb:6d:ab:76:74:68:
bc:e7:da:bb:c0:fd:26:62:a3:33:8e:c5:1c:ae:d5:
35:6a:a0:39:4f:98:26:6e:ee:50:f2:85:e6:17:0b:
35:c2:d1:01:84:bc:b5:c4:d9:14:32:48:1a:25:09:
06:c3:00:7b:b0:8c:e8:73:a1:8b:a8:b7:28:fb:7f:
10:ed:30:1c:9e:b8:6b:45:1a:06:2b:24:bc:ff:43:
79:44:d9:b0:89:dc:4c:da:e7:8f:ee:d7:f9:39:ab:
c4:e4:02:62:00:39:46:46:4f:5a:4d:f7:fa:84:dd:
60:7b:78:55:0c:6f:8d:3e:8e:a2:85:ab:9e:77:f1:
20:86:31:eb:9a:41:54:af:94:8b:b7:04:27:e7:12:
74:c8:27:61:11:23:6c:2d:7b:8d:f9:af:0d:e4:31:
ec:0d:81:54:f1:d7:30:10:e7:da:a3:b2:22:cd:27:
f7:50:85:48:95:3a:d6:ed:c7:0d:3a:4b:1c:f2:4c:
ba:6d:0b:03:7a:2c:36:51:0b:d5:70:d9:cd:93:13:
92:86:91:4d:5b:e5:42:98:9a:96:41:51:34:34:56:
97:55:13:ea:a3:34:5e:f8:e5:76:bf:8d:ed:2a:bd:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:F2:4B:B7:BD:FF:56:5B:47:98:F6:71:3B:6C:EB:AE:D8:E1:19
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:7d:fa:12:d7:e2:57:cc:3f:0e:67:2a:ac:21:9a:2a:10:
59:19:f9:5b:0a:de:12:d1:50:fb:4e:00:00:60:9b:0b:3e:b0:
23:ac:d8:0e:bd:bd:71:f6:35:31:9b:de:16:d5:64:a3:96:48:
be:61:e0:ad:4b:b8:a1:6d:b2:b6:a8:7e:d2:cb:26:50:7f:32:
bc:70:70:7a:6e:e1:f5:c2:9e:c6:82:d7:c4:4e:12:c7:0a:bd:
57:40:0f:86:5f:7e:75:a4:c8:7c:3c:87:f3:a7:5d:82:aa:9b:
0f:21:f4:38:5e:df:a0:05:2a:ea:bd:22:8f:b8:ad:54:85:6c:
82:24:e6:0a:34:2e:da:2d:fa:c6:66:e0:63:81:0c:77:10:da:
91:09:fa:89:e4:7f:45:dc:ee:e7:03:71:f2:89:0b:d5:35:b8:
b5:2f:23:35:3a:9d:8e:b6:b7:e0:58:e3:60:58:9e:f5:68:48:
00:7c:e1:9f:50:d8:e1:81:3d:74:2f:e2:ae:cf:9b:5a:98:09:
80:36:d4:26:8e:9a:6b:ae:ab:85:e8:1f:c4:9b:d2:cd:d9:c1:
50:e4:7f:0c:cd:d3:d6:e9:ac:86:dc:71:92:92:5c:a2:f8:b2:
b0:ce:13:cd:5d:5e:09:db:10:98:f0:3d:f1:68:2c:7d:51:f8:
8f:16:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:33 2026 by rpki-client