Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json)
Hash identifier: PNuXrF2KKNDspKYQNrG5Pg0wz5FEr+CxBjEjx5pMk8I=
Subject key identifier: 16:E2:B1:6A:B6:C8:99:04:0A:F9:2B:64:D9:E4:97:D1:BE:BC:4C:26
Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Certificate serial: 2893FE1C38BE808D425E9B672B9CC772686E617B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
Manifest number: 0157
Signing time: Tue 28 Jul 2026 19:04:36 +0000
Manifest this update: Tue 28 Jul 2026 18:59:36 +0000
Manifest next update: Wed 29 Jul 2026 22:49:36 +0000
Files and hashes: 1: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=)
2: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: 5Vls55VzQ0kVhp7WKozBzeLCiolu45EVa/q0qgTRm3s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:93:fe:1c:38:be:80:8d:42:5e:9b:67:2b:9c:c7:72:68:6e:61:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed
Validity
Not Before: Jul 28 18:59:36 2026 GMT
Not After : Jul 29 22:49:36 2026 GMT
Subject: CN=16E2B16AB6C899040AF92B64D9E497D1BEBC4C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:c7:86:d8:66:d4:da:e6:53:7d:d0:a1:40:
ae:f3:49:87:e6:f1:6a:a8:d3:40:fc:e6:6e:ee:f9:
b8:49:f3:86:cf:f5:1e:34:3c:00:9a:f6:91:4d:60:
82:00:5e:68:d3:57:0f:21:c2:83:17:24:5a:89:0d:
d6:84:df:23:f1:ea:69:35:05:65:fb:c9:66:89:b5:
84:e0:c9:4c:b0:27:e9:4d:4e:4a:ec:a9:7b:de:a7:
64:59:35:d7:9e:66:78:9b:16:98:3a:16:85:89:6a:
62:93:a4:59:29:21:be:50:06:cd:1a:bb:3c:35:35:
0f:da:46:4e:ab:d1:8a:86:5e:fe:9d:37:e7:ee:9d:
32:b4:a7:af:0d:87:74:8f:ba:66:5f:3c:ac:9d:5f:
74:9d:77:c8:e3:e7:84:fb:7f:f1:fe:c3:c4:e4:e0:
fd:85:eb:22:02:b2:b4:e6:52:ca:20:de:9c:e8:e4:
cd:06:f6:cf:70:88:ed:e3:1e:5d:5b:8d:bb:ef:66:
be:1d:26:9f:fe:51:66:7d:d6:bc:36:dc:ab:33:ec:
d6:ce:cf:73:af:b4:90:07:45:b2:e6:49:d8:b5:ec:
3e:fb:8e:c0:23:03:2a:35:50:6e:32:8e:49:51:3c:
8f:fd:5a:5d:7e:ec:8f:96:02:dc:40:0f:2c:3d:0a:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:B1:6A:B6:C8:99:04:0A:F9:2B:64:D9:E4:97:D1:BE:BC:4C:26
X509v3 Authority Key Identifier:
keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:58:42:ee:64:5e:7c:cb:95:39:96:f4:5c:ce:09:9f:fb:9a:
7d:3f:d2:a4:1a:6a:5e:1b:a4:f1:77:06:26:9e:48:fc:64:4a:
19:9c:02:3d:68:4f:29:b2:ad:b2:29:fe:98:e1:96:72:04:89:
02:8b:24:fb:cd:34:ae:02:87:24:d5:4b:5a:64:38:71:4e:c7:
34:82:ae:27:b6:e5:0b:f9:da:b9:d7:51:9d:c2:c2:f3:93:e4:
33:7e:d2:92:20:f4:5b:7a:00:4c:94:8b:7b:bf:1d:93:08:a9:
d9:04:97:6c:03:d3:7b:df:50:67:e0:c5:5e:6c:e8:65:10:92:
d9:66:c5:14:61:a6:84:d4:81:2d:67:1b:f3:b1:5a:c1:a7:b7:
e8:9d:0d:28:62:c8:34:cf:45:ab:a7:c0:c7:f3:31:4a:bc:f2:
61:0b:59:6c:4a:32:6d:86:55:6e:c2:aa:bf:f2:32:92:2e:9c:
fd:9a:1f:de:22:68:69:44:6d:cb:03:76:81:f4:a7:90:12:65:
99:8b:14:4a:1d:a5:9e:e4:16:7e:d1:00:ec:04:cd:e8:94:81:
2e:94:34:64:25:84:cc:19:1f:e8:ab:ee:e9:9e:49:14:02:58:
58:63:f8:22:8f:d6:6c:d3:d5:c6:b7:31:97:56:4a:ce:04:48:
f3:be:a2:60
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKJP+HDi+gI1CXptnK5zHcmhuYXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3ZGFmOGRjODk3ZDNmMWM0M2Q4NjZlYTk0NTMwNTMw
M2FkNzNlZDAeFw0yNjA3MjgxODU5MzZaFw0yNjA3MjkyMjQ5MzZaMDMxMTAvBgNV
BAMTKDE2RTJCMTZBQjZDODk5MDQwQUY5MkI2NEQ5RTQ5N0QxQkVCQzRDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqceG2GbU2uZTfdChQK7zSYfm
8Wqo00D85m7u+bhJ84bP9R40PACa9pFNYIIAXmjTVw8hwoMXJFqJDdaE3yPx6mk1
BWX7yWaJtYTgyUywJ+lNTkrsqXvep2RZNdeeZnibFpg6FoWJamKTpFkpIb5QBs0a
uzw1NQ/aRk6r0YqGXv6dN+funTK0p68Nh3SPumZfPKydX3Sdd8jj54T7f/H+w8Tk
4P2F6yICsrTmUsog3pzo5M0G9s9wiO3jHl1bjbvvZr4dJp/+UWZ91rw23Ksz7NbO
z3OvtJAHRbLmSdi17D77jsAjAyo1UG4yjklRPI/9Wl1+7I+WAtxADyw9ClOxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFuKxarbImQQK+Stk2eSX0b68TCYwHwYDVR0j
BBgwFoAUQH2vjciX0/HEPYZuqUUwUwOtc+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5
MTE2LzAvNDA3REFGOERDODk3RDNGMUM0M0Q4NjZFQTk0NTMwNTMwM0FENzNFRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FIMnZqY2lYMF9IRVBZWnVxVVV3VXdP
dGMtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l
MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMC80MDdEQUY4REM4OTdEM0YxQzQz
RDg2NkVBOTQ1MzA1MzAzQUQ3M0VELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglhC7mRefMuVOZb0XM4J
n/uafT/SpBpqXhuk8XcGJp5I/GRKGZwCPWhPKbKtsin+mOGWcgSJAosk+800rgKH
JNVLWmQ4cU7HNIKuJ7blC/nauddRncLC85PkM37SkiD0W3oATJSLe78dkwip2QSX
bAPTe99QZ+DFXmzoZRCS2WbFFGGmhNSBLWcb87Fawae36J0NKGLINM9Fq6fAx/Mx
SrzyYQtZbEoybYZVbsKqv/Iyki6c/Zof3iJoaURtywN2gfSnkBJlmYsUSh2lnuQW
ftEA7ATN6JSBLpQ0ZCWEzBkf6Kvu6Z5JFAJYWGP4Io/WbNPVxrcxl1ZKzgRI876i
YA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:40 2026 by rpki-client