Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: JZSeKb7Pu5nX3Gc46xmNZFDwcQiuoneyO0lbGmWc/5M=
Subject key identifier: EF:1E:B7:4F:39:5B:18:7A:13:D3:B4:DC:75:15:1F:B5:CA:1E:E7:B5
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 69E3D033446D52211CC8985BB0D9BF8BDD9190EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: F0
Signing time: Tue 12 May 2026 08:18:41 +0000
Manifest this update: Tue 12 May 2026 08:13:41 +0000
Manifest next update: Wed 13 May 2026 12:04:41 +0000
Files and hashes: 1: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: lvDR6oSQfwCju0dBtKjLxJ+jOGBhrIWumFpZKY6Zahw=)
2: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e3:d0:33:44:6d:52:21:1c:c8:98:5b:b0:d9:bf:8b:dd:91:90:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: May 12 08:13:41 2026 GMT
Not After : May 13 12:04:41 2026 GMT
Subject: CN=EF1EB74F395B187A13D3B4DC75151FB5CA1EE7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:84:ad:af:b2:8b:b7:f7:71:ff:b4:7a:84:
f2:f8:5c:00:81:2f:dc:77:8e:c5:bd:3c:bb:d9:d2:
42:d0:98:f6:10:3f:34:6f:39:84:d3:3c:16:82:ce:
85:f9:ad:99:23:4c:c0:cd:a3:5e:8a:9b:6e:b7:36:
a1:dc:28:8d:0f:ad:c4:a4:1c:c7:c2:4c:50:52:2e:
42:e6:64:df:b4:44:b8:0d:96:0a:a4:0b:5d:5b:7b:
37:48:61:78:c7:a1:47:41:4a:6d:04:02:d7:1a:ad:
7a:5e:b9:9a:4c:87:87:a9:88:c6:5d:f5:ad:4a:ab:
10:d0:a9:3b:74:10:53:54:da:32:dd:90:b0:27:9d:
d6:e7:ed:6a:c0:0c:dd:55:71:2b:b2:19:14:6a:bc:
77:d3:6c:e5:a8:8c:9b:7c:d1:9f:a2:4f:ae:7f:83:
ee:ba:ef:00:20:0d:8d:89:f9:0a:1d:54:e0:04:9d:
20:ed:32:d1:93:97:18:82:57:33:40:4f:f0:1e:55:
e6:e0:06:0c:bb:77:90:d9:39:fb:6e:de:84:45:cd:
df:ce:3c:e1:43:70:b2:4b:7a:10:b8:7a:6e:5e:07:
00:cf:4b:43:5f:a6:70:92:71:60:83:33:55:54:84:
a6:58:71:f0:e2:13:2e:34:38:14:17:a8:f5:46:9c:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1E:B7:4F:39:5B:18:7A:13:D3:B4:DC:75:15:1F:B5:CA:1E:E7:B5
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e8:3a:b5:47:ea:20:aa:15:0a:31:d7:3d:e2:df:cd:a2:dc:
1f:df:17:86:05:60:44:6f:db:ab:91:0a:a7:66:40:c8:6d:bf:
01:04:a0:a9:db:98:2f:5b:f1:09:16:a2:ad:7d:04:3b:6f:87:
a5:d4:ba:b6:db:13:a7:5f:f6:bb:f7:57:d2:b4:5e:2b:1a:38:
27:e0:d5:c6:3d:dd:5f:2f:a7:26:06:38:c8:3d:37:81:2e:e2:
4f:f3:6c:d4:1f:93:c2:ae:3a:99:ba:fe:8f:f7:0a:8e:a6:68:
15:5d:45:8b:fe:38:ee:75:51:3e:a3:d7:a4:14:ea:11:30:9f:
55:b7:17:ad:0e:35:59:36:23:69:12:13:7e:54:95:ee:fe:a9:
6d:46:aa:37:e1:a1:6d:a0:8d:d2:fd:b1:7d:e8:98:fc:9b:e8:
e6:0a:e8:37:16:0a:b9:1a:3e:3f:18:a4:e7:89:55:3c:f5:97:
f5:54:d2:6e:fe:a2:76:82:ee:a7:7f:6d:31:f4:86:97:90:f7:
b4:e7:cf:27:79:94:1e:43:f5:5c:78:d5:a2:da:d3:46:96:9b:
44:55:b6:32:9c:f8:fd:f4:5e:a2:01:15:c7:b0:5c:20:30:56:
9c:dc:ad:c3:ea:b9:33:b8:ab:8b:c8:33:01:b5:e4:e5:c7:14:
80:61:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:25 2026 by rpki-client