Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: NpfR2pWsO7AashtWZXZEuIQrsEOA5VSjsGWRRjMgh2Y=
Subject key identifier: A3:06:E7:1D:D1:0D:82:9A:82:20:A4:2E:0A:40:16:49:18:14:F1:56
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 754087716587AE914E885FE9C27EC25E76A71357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: BC
Signing time: Wed 25 Mar 2026 10:41:44 +0000
Manifest this update: Wed 25 Mar 2026 10:36:44 +0000
Manifest next update: Thu 26 Mar 2026 14:24:44 +0000
Files and hashes: 1: AS202939.asa (hash: jUHD6mNaSkNqMxKUJXa0cX4c8ff2vOZ1XBHIaaVWWvQ=)
2: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: Ekg6Q5hqXT5H2DtJ9TU6blgZ3apxVyBZJL4TPPGZkTA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:40:87:71:65:87:ae:91:4e:88:5f:e9:c2:7e:c2:5e:76:a7:13:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Mar 25 10:36:44 2026 GMT
Not After : Mar 26 14:24:44 2026 GMT
Subject: CN=A306E71DD10D829A8220A42E0A4016491814F156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:31:e4:09:69:46:54:a7:05:e0:29:4b:74:
28:e6:58:ee:20:96:b0:70:05:60:02:f8:b4:2e:13:
a3:30:1f:f4:dc:53:2d:12:13:6f:e0:88:f7:93:9e:
fb:3d:52:5f:b4:f6:22:a2:2f:15:a9:48:eb:06:0e:
88:4b:70:f2:94:a9:a2:7c:f8:22:9f:5c:bd:1e:44:
2f:0d:7d:17:8e:2c:e4:7d:33:ba:57:fc:1d:ba:90:
a1:9c:31:e1:7f:f0:32:31:23:b4:6b:5e:86:20:6f:
4d:86:d6:8d:6d:e0:0f:6a:71:96:3d:c7:d0:d8:66:
05:91:15:2e:98:be:fa:01:ed:49:3a:e1:ad:93:74:
79:e6:c0:2a:07:f4:f3:e2:9f:93:b0:91:a9:7f:29:
d9:22:08:5b:d6:85:45:93:17:4b:44:2c:0c:c1:1f:
f1:a0:94:70:ca:9b:80:80:fd:09:78:b8:ff:24:f2:
53:23:7f:bc:99:8d:f3:d1:59:05:b5:31:05:90:89:
32:02:51:59:09:e5:62:fe:58:4b:ef:85:24:bd:1b:
f5:a9:6a:ab:07:89:99:33:19:cd:39:a9:8a:87:8c:
1c:36:d9:19:a2:c0:3a:bd:8b:2e:f2:81:9c:1b:2e:
01:65:94:50:32:f7:9c:68:9c:d6:63:f2:3e:f3:df:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:06:E7:1D:D1:0D:82:9A:82:20:A4:2E:0A:40:16:49:18:14:F1:56
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e5:86:44:1b:ee:ca:cd:53:41:9d:69:07:4d:8f:9f:ad:82:
09:99:c2:ee:07:6d:68:22:ca:0b:73:37:2c:d4:49:2c:34:d4:
20:41:ce:17:29:ad:8d:e9:9c:82:ac:b5:f2:9c:f6:89:3c:e4:
c5:d6:e9:0a:1c:ce:14:58:9b:6d:f5:6b:44:48:38:01:56:fb:
63:a7:0b:e8:02:8a:fb:28:b1:0a:8a:ba:44:89:06:12:72:a6:
a5:4a:60:dc:8d:10:79:88:37:a0:6b:a4:49:d8:9e:11:3b:fd:
c7:59:54:80:95:71:2f:fb:e7:05:2c:d9:6d:ff:19:50:21:c5:
27:e5:90:c8:70:e2:9e:1a:03:71:11:59:9d:3e:d4:2d:59:fe:
fb:4c:25:97:6c:dc:ae:fb:b4:60:fe:c0:ac:ab:70:8b:04:4f:
a8:b9:cb:5c:5b:4a:c4:d6:22:ec:a0:4e:ac:db:20:f2:98:6e:
66:67:6b:93:3c:08:80:ca:69:5f:23:b3:94:80:9a:ba:aa:94:
1d:ae:e8:5f:16:39:81:2f:b0:5a:02:cb:6b:ca:11:fc:12:cb:
48:51:1e:28:75:b3:ed:7f:bb:55:77:d9:82:eb:56:c9:ae:b2:
c1:77:7d:4f:98:02:93:f3:79:48:32:d6:9a:2c:a7:ee:b7:e0:
cf:90:ae:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:39 2026 by rpki-client