Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: oSvPqEo9K0aBfEZluW3UnqUZUGXRnvCnEA3nFlx9K2Q=
Subject key identifier: 4C:51:21:17:D2:CF:11:25:AA:D0:A2:0A:24:BF:1A:65:54:23:CF:24
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 513EEA66BA0BFA016CAFE4CC13AB380BE996B09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: FD
Signing time: Tue 12 May 2026 11:52:18 +0000
Manifest this update: Tue 12 May 2026 11:47:18 +0000
Manifest next update: Wed 13 May 2026 15:49:18 +0000
Files and hashes: 1: AS202939.asa (hash: iDIu0hKaPS/zg+NagX3RrC3gMBM2QJ5Y4u7QGwmqP8U=)
2: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: Qne7jLTFBDepUqj7vVQGcwQoN4ygrUnOXgdAeo/xO/0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3e:ea:66:ba:0b:fa:01:6c:af:e4:cc:13:ab:38:0b:e9:96:b0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: May 12 11:47:18 2026 GMT
Not After : May 13 15:49:18 2026 GMT
Subject: CN=4C512117D2CF1125AAD0A20A24BF1A655423CF24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:31:1c:34:a7:a2:6d:dd:ff:42:5f:1b:b1:
4d:23:95:cd:2f:43:c1:e1:c9:bd:95:57:f6:70:bf:
fb:90:90:74:9a:42:b5:12:1c:e6:2d:cd:b0:52:e2:
b6:c2:38:c0:32:6e:d1:6d:c4:5c:da:cb:a8:75:6a:
97:32:12:12:58:e0:c2:81:ff:f5:18:d2:63:36:ea:
14:1b:a6:65:0a:b2:76:7a:26:41:81:3a:e6:29:93:
15:46:3c:25:69:54:2d:ae:cd:40:75:17:eb:fc:1a:
76:7b:07:2d:89:9a:c8:0c:eb:eb:29:61:1d:34:3c:
14:60:66:5d:8d:13:df:97:02:d8:e0:42:c1:22:b4:
18:f9:af:03:f9:f5:87:da:d2:1b:8b:86:92:14:b0:
0b:e1:4c:34:6f:ec:3c:85:2f:44:b4:80:38:e4:da:
d7:b3:2b:db:ff:c3:1c:b5:5e:b6:9c:ed:23:ad:89:
72:2f:e5:94:92:8e:03:60:3c:02:64:0c:e7:6a:60:
30:bf:c1:55:41:01:48:3a:8c:7a:e4:1c:18:42:bf:
2d:11:7c:03:e7:5b:c7:85:30:3b:58:20:a0:03:50:
50:7b:50:2e:1f:e6:61:45:c7:74:9c:01:59:05:82:
5d:f9:d9:50:a4:73:43:1d:15:cd:f0:e1:7e:8e:bf:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:21:17:D2:CF:11:25:AA:D0:A2:0A:24:BF:1A:65:54:23:CF:24
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:57:30:6d:91:23:a1:e9:32:09:ce:c4:74:a7:94:2e:cd:88:
f1:c7:d8:0c:fd:33:02:d8:3d:34:93:ad:8b:14:e5:6f:84:f1:
47:35:06:35:f5:14:cb:6a:45:f3:96:7b:ba:fc:1c:b5:a5:b6:
4c:e4:5d:ac:ca:82:06:6f:09:d1:a8:6b:10:45:7a:05:9f:da:
7e:67:28:1c:e5:74:e9:b5:9d:b0:92:eb:7c:66:97:80:51:b7:
e5:88:fb:b9:69:20:11:3b:c2:99:d9:8b:d5:3c:83:ca:fe:9d:
42:64:d9:bb:f7:e5:14:83:46:90:cc:e3:77:34:17:4d:be:5a:
f6:ca:26:a9:54:e8:c9:40:f6:e0:6b:71:d4:cc:e5:dc:4e:2a:
79:0e:63:a4:38:c6:09:20:c2:0e:cc:5e:e3:50:93:bc:ac:93:
84:14:be:2e:68:a6:1b:9b:3e:e5:97:c9:6d:1d:bf:e0:41:84:
09:a1:a8:05:6f:ee:2c:8a:4f:12:3d:2d:3b:3b:60:65:85:70:
a7:9b:72:d3:b3:f0:0d:95:98:8f:40:2b:3a:c8:c7:ce:19:f4:
e6:f7:b6:bf:34:7c:ac:0b:d0:a8:66:7e:d6:f3:55:f8:aa:34:
da:a6:74:76:50:2c:18:48:a9:7e:bb:f8:c4:a9:53:85:bb:70:
19:30:57:97
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUT7qZroL+gFsr+TME6s4C+mWsJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBmMDJmYjdkZmU5YWM4MDBhMWIxYjY5MzcwOWMyZjAz
YzVlZDk4YjAeFw0yNjA1MTIxMTQ3MThaFw0yNjA1MTMxNTQ5MThaMDMxMTAvBgNV
BAMTKDRDNTEyMTE3RDJDRjExMjVBQUQwQTIwQTI0QkYxQTY1NTQyM0NGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhDEcNKeibd3/Ql8bsU0jlc0v
Q8Hhyb2VV/Zwv/uQkHSaQrUSHOYtzbBS4rbCOMAybtFtxFzay6h1apcyEhJY4MKB
//UY0mM26hQbpmUKsnZ6JkGBOuYpkxVGPCVpVC2uzUB1F+v8GnZ7By2JmsgM6+sp
YR00PBRgZl2NE9+XAtjgQsEitBj5rwP59Yfa0huLhpIUsAvhTDRv7DyFL0S0gDjk
2tezK9v/wxy1Xrac7SOtiXIv5ZSSjgNgPAJkDOdqYDC/wVVBAUg6jHrkHBhCvy0R
fAPnW8eFMDtYIKADUFB7UC4f5mFFx3ScAVkFgl352VCkc0MdFc3w4X6Ov8c3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTFEhF9LPESWq0KIKJL8aZVQjzyQwHwYDVR0j
BBgwFoAUQPAvt9/prIAKGxtpNwnC8Dxe2YswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5
YTA0LzAvNDBGMDJGQjdERkU5QUM4MDBBMUIxQjY5MzcwOUMyRjAzQzVFRDk4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FQQXZ0OV9wcklBS0d4dHBOd25DOER4
ZTJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDhmOGIzZS0w
NTFlLTRjNDQtOWNiNS03YjgzMzFlZjlhMDQvMC80MEYwMkZCN0RGRTlBQzgwMEEx
QjFCNjkzNzA5QzJGMDNDNUVEOThCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVcwbZEjoekyCc7EdKeU
Ls2I8cfYDP0zAtg9NJOtixTlb4TxRzUGNfUUy2pF85Z7uvwctaW2TORdrMqCBm8J
0ahrEEV6BZ/afmcoHOV06bWdsJLrfGaXgFG35Yj7uWkgETvCmdmL1TyDyv6dQmTZ
u/flFINGkMzjdzQXTb5a9somqVToyUD24Gtx1Mzl3E4qeQ5jpDjGCSDCDsxe41CT
vKyThBS+LmimG5s+5ZfJbR2/4EGECaGoBW/uLIpPEj0tOztgZYVwp5ty07PwDZWY
j0ArOsjHzhn05ve2vzR8rAvQqGZ+1vNV+Ko02qZ0dlAsGEipfrv4xKlThbtwGTBX
lw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:12:11 2026 by rpki-client