Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: 9O0i13RkcLe31x6SfqGfksSAwvg1k3D3Z/3a9TJYH3o=
Subject key identifier: 11:AB:98:54:BD:91:C1:2A:9F:57:DC:31:BB:80:86:AD:6E:47:24:41
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 0A083DF55ADC54B3B9CED6CE0E030C268C47DE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 015F
Signing time: Thu 23 Jul 2026 15:12:41 +0000
Manifest this update: Thu 23 Jul 2026 15:07:41 +0000
Manifest next update: Fri 24 Jul 2026 16:38:41 +0000
Files and hashes: 1: AS202939.asa (hash: JPhtYie6fuAUUwZ1e+sArmYU3lPbg/kkUe3K+Rj+oIs=)
2: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: dBiqlJlUESbnKQ6oe3AACe+JRYtTWbZAofCe3VY0ApU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:08:3d:f5:5a:dc:54:b3:b9:ce:d6:ce:0e:03:0c:26:8c:47:de:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Jul 23 15:07:41 2026 GMT
Not After : Jul 24 16:38:41 2026 GMT
Subject: CN=11AB9854BD91C12A9F57DC31BB8086AD6E472441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:99:83:75:d3:0d:c2:a9:31:a6:14:ef:60:
2c:e3:31:2f:41:b5:71:82:8e:c8:31:97:50:27:85:
5c:34:d1:03:32:89:5e:c4:68:bb:22:5f:3f:72:16:
a1:2a:78:6c:8a:c4:86:4f:77:4c:33:db:dc:69:95:
e5:df:96:ec:d1:e8:cc:2b:6c:0d:67:da:00:5f:49:
7b:d9:bc:d9:7f:e5:29:55:74:3d:a0:e7:3d:3b:2e:
41:bb:77:59:20:61:b3:22:0e:48:d4:db:4d:d5:81:
c2:f7:72:6d:fc:5c:e7:60:94:f2:1f:bb:f5:4c:db:
b3:86:c7:c8:b4:5f:19:a1:ee:8e:94:ee:d8:97:9b:
46:50:fa:6c:10:4d:7b:67:e1:d8:cf:15:75:06:dc:
4f:23:0b:b6:34:17:e7:b1:a4:eb:91:6a:48:e9:da:
f0:b2:31:0e:8e:bd:8d:a0:14:0f:8d:d5:17:73:3c:
91:7a:c0:31:63:06:4f:93:5b:e0:57:ef:08:4f:39:
3a:7b:84:ac:51:71:54:bc:f0:5e:90:c8:3e:bd:fd:
e0:5c:1b:3f:af:b0:3f:d6:1c:a2:b9:0a:78:ba:78:
81:93:98:3e:0f:49:aa:36:8e:16:99:f9:4a:28:bb:
49:33:90:04:32:71:1e:c5:42:5c:1f:f5:18:d7:bd:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:98:54:BD:91:C1:2A:9F:57:DC:31:BB:80:86:AD:6E:47:24:41
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a6:59:17:c0:51:69:fc:82:0d:df:81:5a:a1:c1:b9:3e:90:
e9:f8:35:50:76:c0:4e:20:e6:84:ec:98:55:58:39:7c:df:12:
8d:24:0c:b9:5c:76:c0:02:c2:70:45:32:98:a5:25:fd:f6:eb:
a5:47:f5:51:da:c9:fb:09:bf:f6:2b:ed:36:ba:ef:30:cd:70:
ec:90:b1:d3:34:52:97:71:ef:c3:69:f2:0e:10:5b:11:54:7e:
e2:38:ef:1b:44:2b:99:a2:2a:4d:11:d3:f4:7f:6b:97:db:05:
a1:05:cd:d9:f1:de:18:f2:1c:c4:02:dc:34:df:07:25:92:af:
85:a4:41:08:d4:0d:ea:30:c6:0d:cc:64:37:09:e0:59:76:89:
97:45:79:3b:30:1a:a7:ba:2e:f4:11:e3:1d:58:e3:c8:39:ea:
72:ec:1c:d3:48:16:88:ca:9a:2e:36:ca:dc:96:77:97:1d:c2:
48:af:75:14:e4:06:c7:b6:08:da:4a:f9:44:c4:07:5c:65:8f:
dd:f6:13:bd:59:41:b5:03:f3:6b:c3:12:e2:a0:94:3c:3f:2b:
82:79:fc:54:70:92:e7:61:bf:9a:02:f9:c8:50:bf:d7:d8:ec:
10:ef:91:6d:83:6b:0f:0e:12:d7:69:da:56:f6:59:62:20:aa:
8f:2f:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:50 2026 by rpki-client