Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: iGawfm+3QikYx3iH9q78uytSKlh4h1zyEJmPQ5n3lXw=
Subject key identifier: 78:71:58:E1:64:BE:23:03:D9:B4:95:24:FE:03:DB:1F:22:0F:1B:50
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 5A857DA56F41BB6F1710FCD092224C581068689B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: 01A7
Signing time: Sat 26 Sep 2026 12:54:36 +0000
Manifest this update: Sat 26 Sep 2026 12:49:36 +0000
Manifest next update: Sun 27 Sep 2026 14:40:36 +0000
Files and hashes: 1: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
2: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: 4fYPCTwApqXgvVoLTWc1XjYpmt3NAWROd5SvpVQJX4c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:85:7d:a5:6f:41:bb:6f:17:10:fc:d0:92:22:4c:58:10:68:68:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Sep 26 12:49:36 2026 GMT
Not After : Sep 27 14:40:36 2026 GMT
Subject: CN=787158E164BE2303D9B49524FE03DB1F220F1B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:7a:dd:1e:98:58:d5:e9:8a:b4:83:68:9b:
aa:8a:b8:d7:24:e3:dd:73:88:8d:3b:49:9e:ad:a6:
48:8b:8a:d1:48:57:c6:4b:a5:96:32:46:72:97:00:
b4:0a:57:7f:71:7c:05:c1:4d:06:ed:21:87:9b:16:
3c:fb:5e:21:ba:5e:c6:89:45:51:7d:79:b1:d7:fa:
cb:3d:3b:9b:66:b9:01:97:76:86:00:ed:f8:cd:17:
4f:2a:26:1e:45:0b:27:4b:83:4f:45:82:5c:53:9b:
c1:a3:23:1a:4c:33:00:4d:7e:b8:d0:25:e2:7d:f6:
ab:a1:9a:e0:6b:87:45:63:c0:29:53:e2:f4:85:53:
05:27:11:9b:c7:aa:bf:25:c2:58:e7:9d:b7:9a:62:
f3:2c:c4:fc:d6:5e:db:23:d1:94:79:5e:2f:b1:c2:
01:af:b8:44:36:ce:6c:ca:e2:71:e7:be:17:1f:01:
26:76:cc:e0:49:cd:81:f3:2c:55:12:38:6d:60:30:
4b:e5:88:9b:18:6e:2c:b0:d4:5b:5d:2d:f8:19:d5:
f7:55:7a:a4:1d:55:4d:c4:8f:c7:6a:20:4d:2b:91:
9f:10:8d:50:76:3e:a0:86:49:78:35:20:e7:ec:77:
22:59:68:a3:25:44:70:cb:a6:85:35:d0:9a:62:1a:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:58:E1:64:BE:23:03:D9:B4:95:24:FE:03:DB:1F:22:0F:1B:50
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ae:96:35:bb:9d:2b:35:2a:8d:b0:2e:fd:82:ac:ab:64:98:
ff:18:57:07:51:7c:45:be:ad:41:f8:39:5c:98:70:7a:de:e0:
1d:c8:10:33:26:89:37:6b:6b:87:40:15:45:b1:59:63:74:91:
4b:92:22:db:92:67:58:ab:5f:53:3e:16:43:8d:6f:9e:9c:06:
03:3d:95:7f:f4:64:6e:a3:be:cd:91:66:52:e8:28:c4:2f:c1:
e8:32:1a:21:42:da:79:5f:f2:d3:a5:2c:47:29:7b:c8:49:a4:
ee:4c:7c:dc:e0:b5:1c:70:61:1f:b8:a5:85:d1:ca:a5:bd:1e:
ec:c0:8b:42:44:68:5b:c8:bc:ef:49:99:83:4d:1f:b1:fe:05:
1f:03:7d:aa:c6:bf:f5:55:3b:74:df:f2:7c:01:b7:cb:4c:f8:
5a:c1:b8:bd:c0:de:81:3d:47:ca:f4:48:f1:b9:49:a6:9f:24:
4c:f7:c7:d9:b3:67:ec:2a:a9:df:4a:4b:9a:0b:a8:c9:0a:99:
0a:54:4b:24:fc:d6:7a:fe:4a:6d:d8:da:ec:d6:56:32:c7:ab:
1c:d1:e1:53:ac:f1:e4:3d:3e:c2:14:4f:6d:3c:1e:8e:c7:bd:
84:66:15:49:74:7f:5d:2f:8d:09:b1:45:de:6d:1b:43:4e:54:
26:b8:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:27 2026 by rpki-client