Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: BecMTSgz4yYBCiq8S9mlVimT3XNw5agfdPG8bq5+OQs=
Subject key identifier: B8:39:1A:B4:BF:9D:CA:96:F3:FC:1B:03:C0:B5:A9:EF:00:30:5A:5A
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 5186C52D200286EC663FE0D3BD13A41722000974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: 01DD
Signing time: Mon 09 Nov 2026 14:54:27 +0000
Manifest this update: Mon 09 Nov 2026 14:49:27 +0000
Manifest next update: Tue 10 Nov 2026 17:00:27 +0000
Files and hashes: 1: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: JuL9UrQKWO0Zeve9QUmd4WulpQc93rfFE3Jpo1HZTk0=)
2: AS208915.asa (hash: C/vW+0F5eTIOg6LeD0Ce6DMfnWE+0Z2gXnyCj2Hi9Ww=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:86:c5:2d:20:02:86:ec:66:3f:e0:d3:bd:13:a4:17:22:00:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Nov 9 14:49:27 2026 GMT
Not After : Nov 10 17:00:27 2026 GMT
Subject: CN=B8391AB4BF9DCA96F3FC1B03C0B5A9EF00305A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:84:a5:45:5d:72:2f:3a:bc:53:a4:38:2e:
ca:38:48:f3:3b:0e:fa:4b:21:96:fd:99:90:3a:c9:
3b:2c:9f:6d:f2:fb:56:cf:8c:4b:67:2e:8f:01:96:
7c:c4:fe:3f:a1:64:ad:5e:7c:48:ab:1c:52:b5:3e:
22:a0:14:ae:67:9a:66:bc:1c:34:ca:36:a6:bf:af:
b1:3f:07:55:2a:4d:cd:c0:c4:2b:eb:03:28:7f:44:
e8:2c:50:b8:8f:d6:d6:92:bb:20:81:50:5e:26:fd:
a8:a3:a8:c3:de:ff:95:3d:0b:2f:17:dc:64:78:34:
0a:c9:ea:c0:c3:29:f2:8f:a0:ad:9e:71:6c:43:23:
e3:26:26:67:b5:d3:2f:af:a9:0b:a5:58:80:73:1f:
f7:da:9a:86:c4:74:a3:f5:74:ab:ff:e5:25:27:d4:
d9:50:f4:ca:35:aa:77:e3:dc:30:8c:6a:95:97:15:
a4:39:a4:a2:1a:8a:79:3e:03:30:78:a6:c7:47:70:
f5:37:4a:2c:dc:8c:b9:a4:da:15:65:4b:49:6d:6c:
65:2f:44:e4:08:6a:33:d4:8a:4e:b3:a4:b9:e8:13:
02:c8:de:b1:6b:c1:3a:7e:e1:ea:7b:b5:45:7e:00:
de:a2:10:11:e4:df:ce:9b:71:9e:20:d8:a3:29:3a:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:1A:B4:BF:9D:CA:96:F3:FC:1B:03:C0:B5:A9:EF:00:30:5A:5A
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:97:22:de:bf:1e:f4:49:19:ff:d9:dd:83:e9:c5:28:c4:76:
65:79:4f:93:42:d9:c9:ff:fc:ee:13:2e:86:69:28:36:67:72:
a8:bd:f3:c8:14:8b:cf:a8:65:62:a5:bd:b1:64:90:aa:12:73:
47:b1:ef:27:e3:ab:0c:11:f9:bd:7a:1b:7b:52:5f:2a:f7:d2:
b7:11:2e:fd:6f:08:af:78:3d:b4:34:49:de:77:d0:06:0b:32:
b9:4b:9b:7c:44:48:1b:63:ee:ff:d6:56:60:f2:57:6c:98:f1:
bb:63:fb:e2:b3:ea:4e:7d:81:74:e3:e6:38:cb:4a:87:a2:57:
4f:8f:c5:f3:ad:ac:c5:3d:4d:db:f6:8a:88:a1:65:ba:10:c4:
35:5f:80:64:3a:ae:49:34:c4:a7:be:3b:af:e0:65:04:65:ef:
b3:33:19:cb:68:a2:07:3c:6c:0c:6f:43:51:a0:f7:7b:16:59:
83:13:1d:bb:e9:6c:1f:8b:7c:ef:1e:2a:ca:2d:cd:c3:45:8d:
6d:97:bd:67:1c:e8:aa:39:ea:ab:9f:2a:ba:c9:c2:6a:b0:98:
1c:84:2f:d3:42:40:25:70:76:6b:b8:10:97:57:39:84:aa:12:
50:ea:3e:26:db:da:f4:09:1b:7a:47:e8:d2:df:fc:96:9f:bd:
37:d5:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 09:21:53 2026 by rpki-client