Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: IK+iX8RbZUlCMBgU0Tgl9dP5qEue0qC6fOz9UQIYC1g=
Subject key identifier: 52:C2:65:4E:CF:3B:01:3F:3D:A4:BB:C0:5C:CE:5C:B9:F5:D2:1A:EB
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 3701036BA9438ED78375D6B1E44AAC553BE9B29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: 01A4
Signing time: Thu 24 Sep 2026 03:24:35 +0000
Manifest this update: Thu 24 Sep 2026 03:19:35 +0000
Manifest next update: Fri 25 Sep 2026 06:38:35 +0000
Files and hashes: 1: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: VhgSF6JIIa3iMN901xuUUHgQRIEBZh3h5p7hrx73CqE=)
2: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:01:03:6b:a9:43:8e:d7:83:75:d6:b1:e4:4a:ac:55:3b:e9:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Sep 24 03:19:35 2026 GMT
Not After : Sep 25 06:38:35 2026 GMT
Subject: CN=52C2654ECF3B013F3DA4BBC05CCE5CB9F5D21AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:3b:e7:15:26:76:d5:ec:b1:3a:11:66:54:
5f:64:4f:aa:71:44:f4:73:17:c7:69:a4:82:32:72:
8f:b0:8a:3e:09:8b:66:ec:a5:7f:05:fd:8f:d9:0b:
ae:9c:68:08:56:aa:14:07:91:89:80:f9:0c:df:ce:
64:00:9e:91:94:cf:79:c3:61:7c:9c:e3:09:16:d6:
c4:ed:69:88:be:cd:3a:14:fa:55:de:a6:58:a4:47:
71:85:2b:27:4d:30:c0:e7:54:1d:5c:42:98:ac:11:
de:86:67:5b:52:a4:d1:7a:c6:4f:a5:8d:3f:c0:e2:
b5:6d:1b:e1:3b:11:a0:3b:7d:85:7e:df:2a:64:3d:
5c:e2:f8:f6:0f:e1:20:6c:92:a8:9b:b2:3d:7f:25:
37:5c:15:25:2b:9e:7b:7c:9b:e4:df:94:7e:fd:85:
9c:ee:39:4a:45:14:f6:db:e0:89:cd:c6:06:f0:2d:
40:2c:42:e4:cb:85:96:17:38:01:a1:2f:02:9a:72:
6f:6d:87:49:21:53:14:af:38:ec:40:97:a0:d7:4a:
fc:4d:cb:51:34:62:60:ef:09:0e:c1:1e:91:b4:44:
e4:0c:95:05:35:17:c8:5a:25:6e:55:34:6c:30:ee:
ae:6b:8e:8c:18:a6:a5:e2:3e:2e:c2:79:b1:5b:38:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C2:65:4E:CF:3B:01:3F:3D:A4:BB:C0:5C:CE:5C:B9:F5:D2:1A:EB
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:22:55:e2:c9:89:65:69:ad:d3:41:4c:2d:56:6d:5f:9d:75:
ca:f8:b3:de:26:dd:1c:f4:fa:fb:9d:9f:d4:f9:62:50:8e:93:
f0:b8:aa:b4:b0:c7:16:77:74:72:f4:30:b3:f0:14:18:23:62:
f4:48:cd:7f:05:64:5a:b8:a8:a3:3e:1c:ec:ac:84:28:2d:05:
c8:b1:11:a0:6d:dd:ad:50:7b:4a:85:b5:61:7b:dd:08:a8:2a:
5c:17:b5:8b:ee:13:c2:87:c5:5a:5c:89:46:7d:97:eb:ff:e8:
e6:bd:93:c5:1f:44:b5:75:18:40:9e:15:60:92:c6:aa:f9:a5:
7f:cd:35:9c:ef:3e:3d:a3:fc:1b:b1:c3:e4:a9:c7:e6:be:c4:
f6:04:ff:0b:8a:3f:da:42:1e:17:34:65:08:4d:c4:48:26:bf:
e8:56:1b:67:1c:29:ee:77:12:23:b3:b6:79:96:10:f3:97:34:
e8:27:0d:ed:d1:90:b4:64:3d:77:ad:58:79:56:82:72:12:9f:
38:8d:e3:5b:6c:54:0c:f9:8e:24:79:fb:07:49:19:fa:84:e9:
82:e5:dc:7e:ef:cb:34:b9:5f:dc:0b:de:7e:06:07:a8:fe:f8:
08:c0:ca:1b:e5:05:e0:79:e6:65:45:d2:a7:11:24:91:cc:e8:
ab:a0:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:01:13 2026 by rpki-client