Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: qQso6FYnl+ouFjrjfyNUmB6RuzMW9qtLaSBIqcCc4z8=
Subject key identifier: E4:04:FB:46:06:17:8B:BF:60:3B:CF:A1:23:67:02:25:42:90:4B:5E
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 3E6E3C68C36EE9015A089724D5F04D45B744ADA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 01B3
Signing time: Wed 23 Sep 2026 02:43:03 +0000
Manifest this update: Wed 23 Sep 2026 02:38:03 +0000
Manifest next update: Thu 24 Sep 2026 02:45:03 +0000
Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: 4Hwaz/dYCoLBRxSSBA1PnKldik4RROluNZDAVJv6CDE=)
2: AS202939.asa (hash: UvZJyCl32sjR2hersPnz8KdOU6cEiBPVyANdVZ/Z0kQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6e:3c:68:c3:6e:e9:01:5a:08:97:24:d5:f0:4d:45:b7:44:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Sep 23 02:38:03 2026 GMT
Not After : Sep 24 02:45:03 2026 GMT
Subject: CN=E404FB4606178BBF603BCFA12367022542904B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:74:fe:7a:a6:18:09:46:4f:bd:ad:72:3d:
b4:cb:e5:8f:b1:dc:85:e1:7d:05:55:d5:6d:56:cb:
ce:9e:01:76:88:0e:8e:3b:fc:81:57:d5:76:76:cb:
c7:19:33:78:71:fd:08:0c:2e:06:98:66:61:4e:87:
2b:ce:f0:66:6f:4f:62:ab:0b:b4:52:e2:d1:36:fd:
34:fb:3f:bd:b1:67:22:b6:86:13:32:1d:f4:db:8c:
52:46:ac:4d:5a:6e:fe:5a:46:08:5a:a9:f7:35:db:
75:f3:92:26:69:cd:d9:ec:89:dd:4a:82:20:60:c5:
2b:9e:94:9e:97:8e:b9:cf:08:bd:bd:12:91:23:d8:
7f:e6:22:4a:c3:5c:f3:a4:5f:40:7c:78:9d:db:ea:
44:73:66:8c:71:00:59:20:6a:93:e8:25:4b:49:89:
f8:2a:40:c9:48:73:c3:b7:f2:72:60:95:20:08:3e:
9f:75:25:78:22:4a:d4:e7:3a:71:60:59:73:f6:03:
b6:36:90:51:c5:9a:63:a9:65:52:7c:f2:d2:72:cc:
69:8c:cd:e2:87:e8:5f:8c:d5:73:39:01:d5:d0:76:
bf:f5:d4:32:53:d5:bb:f9:c6:2e:76:9b:09:5a:0b:
86:97:3e:c3:3d:c0:23:15:0c:f4:a9:0c:da:3d:51:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:04:FB:46:06:17:8B:BF:60:3B:CF:A1:23:67:02:25:42:90:4B:5E
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9a:44:0e:02:2f:e0:de:94:c2:b0:bd:a7:28:5a:b6:fa:74:
8a:d2:76:7f:e2:ca:c2:45:9b:bf:41:e0:43:52:d2:fb:43:1a:
f7:48:55:49:7f:ff:29:64:68:38:47:34:e7:9e:9f:ff:5e:56:
b4:24:c3:7e:e8:c7:9b:9e:77:11:bf:5d:5a:89:5e:47:8e:9e:
c0:21:3b:16:ff:22:78:9d:7d:12:57:d3:c7:f0:4b:5f:c0:ff:
8f:a9:74:16:50:5c:9d:e7:b9:4c:9b:24:e5:9f:2b:43:81:ba:
7a:56:5f:c9:d8:69:09:e3:81:6a:86:1d:ca:e9:22:e9:47:2e:
15:25:30:66:77:5d:3f:34:f4:21:60:5f:f3:83:68:b9:72:7c:
2e:7f:18:b7:ac:4b:8b:2e:21:b2:91:60:bb:db:50:38:17:7b:
c7:8f:bb:fa:55:bc:ff:ab:11:06:8e:a3:be:ba:fc:70:e0:f8:
28:e6:d2:67:3f:0b:e2:0f:34:85:64:c2:c5:a1:91:4f:cd:b8:
03:80:94:b3:ce:8c:19:85:ac:8a:d9:7c:40:27:b9:fb:48:31:
f8:6d:96:9b:8f:1f:38:74:07:f1:58:49:b3:63:63:52:d1:69:
05:a1:a6:0c:12:01:23:13:11:4f:f3:54:71:4e:98:65:59:de:
3b:4a:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:40:13 2026 by rpki-client