Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File: 40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier: hUw+D3t/G8ZGm5otFJGlXpCMNKicnJAWUJWvxYTcLZ0=
Subject key identifier: 35:EB:7F:26:C8:5C:EC:DE:D5:E9:95:B0:A5:1C:52:C2:8B:7B:08:99
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer: /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial: 1B9EFC6807B0D8769EA9832487E48CF9611D14B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number: 06DA
Signing time: Sat 14 Nov 2026 20:34:12 +0000
Manifest this update: Sat 14 Nov 2026 20:29:12 +0000
Manifest next update: Mon 16 Nov 2026 00:30:12 +0000
Files and hashes: 1: AS199518.asa (hash: hznEb1n74Lzeb6/+cOs6BR+UZzQbqQszEUckTSKxpzE=)
2: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: PQKVhGuVjzYNRKcGF2aw6VnctUuFVMu+4pFxL/7e9qE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:9e:fc:68:07:b0:d8:76:9e:a9:83:24:87:e4:8c:f9:61:1d:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
Validity
Not Before: Nov 14 20:29:12 2026 GMT
Not After : Nov 16 00:30:12 2026 GMT
Subject: CN=35EB7F26C85CECDED5E995B0A51C52C28B7B0899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:28:55:4c:e3:b0:c6:a9:ef:d1:f9:52:02:
92:b6:17:3a:b6:1a:cc:c6:fd:56:09:1c:86:bf:f8:
89:e3:49:0a:7d:15:0b:22:8e:b9:ac:f3:49:e9:d5:
a1:fe:9b:1f:53:7d:ff:d1:a1:fc:ee:14:86:34:57:
5f:52:8b:2b:bc:9b:5b:d0:f7:1f:90:33:21:b0:14:
77:85:17:8a:50:c5:5f:b3:98:d1:a7:28:7e:95:f5:
26:87:5a:44:a9:28:fd:7d:eb:49:f4:0b:c8:6e:bd:
c4:07:8e:28:67:1f:64:20:97:5d:56:e1:16:fb:ba:
d5:48:49:20:e4:8f:c1:87:8e:09:59:1a:11:78:26:
4e:82:6a:fb:98:0a:fb:21:b0:36:e3:68:7f:3e:d9:
34:3d:38:e7:e5:e2:d7:e9:cc:39:74:6a:2a:5d:40:
dd:90:28:8a:44:8c:f1:33:97:3c:90:fd:a7:b5:cd:
27:8d:5b:53:72:4e:f4:66:4b:ba:60:45:84:59:54:
18:eb:cd:5b:9e:06:5f:3d:a2:55:a1:1f:8d:e4:83:
de:73:33:66:e9:07:87:e6:d7:62:f8:f7:00:7c:f0:
4c:da:bc:f8:d0:2c:7f:e2:af:86:55:dd:09:22:a1:
b2:66:a2:61:10:11:74:9e:f1:49:a8:a8:73:3d:cb:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EB:7F:26:C8:5C:EC:DE:D5:E9:95:B0:A5:1C:52:C2:8B:7B:08:99
X509v3 Authority Key Identifier:
keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:aa:eb:df:bb:f0:db:34:f2:30:87:59:e4:38:eb:86:09:ed:
6a:64:7d:1b:6e:24:d8:fb:ec:d8:95:a9:c1:0b:d8:af:82:20:
33:39:e4:6c:17:48:bb:aa:59:0e:0b:49:b3:af:76:f1:ce:e1:
66:65:e4:c0:69:85:48:bc:49:6d:1a:5a:24:6c:13:a7:16:25:
6a:fd:87:e2:6f:c6:2b:a0:72:45:71:ad:55:00:2b:b0:fd:0d:
15:ec:cc:d6:00:a3:e8:43:8c:a8:2d:68:84:2a:26:ec:d1:ab:
26:ab:1c:4c:02:bf:c4:30:1b:74:f5:e5:ec:98:32:db:d4:c9:
de:63:aa:a7:a2:66:44:68:4c:4d:fe:21:0e:6c:37:38:67:13:
e6:b1:48:37:41:01:6c:26:25:92:14:5f:24:89:4e:1f:38:a0:
24:02:df:8d:c9:73:ad:ab:b0:02:98:6f:bd:09:32:33:d1:30:
6c:9b:80:5c:bc:b2:93:4d:e0:ff:2a:45:2e:06:a7:d4:03:b4:
e4:7b:13:c0:6f:21:65:cf:39:a0:85:9b:9a:7e:fd:f5:df:41:
db:78:ad:f4:6b:7f:fc:c6:98:4d:82:8b:80:f5:96:00:4e:d8:
b3:50:c5:44:63:1e:72:63:eb:25:6e:bf:17:10:a3:a9:c6:3e:
ea:51:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:27:15 2026 by rpki-client