Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File: 40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier: WmgRqEXHG1N08VxoWALdUCNkvYFItRN9HX7XC15ym+c=
Subject key identifier: D9:AF:9A:45:4A:91:DA:7A:7F:58:95:F0:9B:0D:AD:AF:BC:B3:22:8A
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer: /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial: 414B876C1ABC834EE381E1517C3AFD562B315206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number: 063C
Signing time: Thu 23 Jul 2026 10:00:48 +0000
Manifest this update: Thu 23 Jul 2026 09:55:48 +0000
Manifest next update: Fri 24 Jul 2026 10:35:48 +0000
Files and hashes: 1: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: 2bKHzQctd7YakF1pZrCC/A55rmPCJ/sz6M633or7QTQ=)
2: AS199518.asa (hash: lSxcCKOXagIGoQ//ANIqfhjZiXtRFzeKL4Djt6hu0Jk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4b:87:6c:1a:bc:83:4e:e3:81:e1:51:7c:3a:fd:56:2b:31:52:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
Validity
Not Before: Jul 23 09:55:48 2026 GMT
Not After : Jul 24 10:35:48 2026 GMT
Subject: CN=D9AF9A454A91DA7A7F5895F09B0DADAFBCB3228A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:6c:65:69:1a:33:e6:64:40:d1:c9:3f:85:
3e:cf:f4:d0:f5:70:07:06:90:93:37:18:fb:27:81:
61:3f:49:fa:aa:aa:50:e6:78:89:3b:85:aa:11:f1:
99:5f:50:01:13:e5:3e:29:8f:73:40:c1:40:83:32:
67:3c:ce:7a:f7:d4:f8:97:ce:ae:58:7f:5c:d7:a4:
b1:47:b4:38:04:47:ac:0e:cb:b4:4d:1f:29:23:87:
5d:bb:0b:d5:1e:a2:6a:8e:48:c4:7f:11:b2:a2:f2:
b4:7b:b3:3a:1b:9e:12:48:4a:31:c9:12:d5:5c:fd:
e0:e9:0e:38:3d:3b:bb:d3:97:22:bf:04:d0:3e:6a:
1c:65:c7:a3:c0:97:13:7f:9d:61:d8:fa:23:6c:70:
d7:bf:f8:b8:ed:13:b1:c2:22:ce:a4:9f:b8:8c:5f:
bf:36:d0:4f:b6:51:ac:cf:27:ac:bc:15:f4:9d:cf:
9b:c8:63:ff:01:42:1a:02:9c:88:1e:31:f5:5f:58:
e4:e6:32:db:1b:ab:18:a6:48:02:d0:99:ea:0f:90:
9a:a7:a0:34:d6:38:d7:4d:18:6e:21:f4:73:15:aa:
60:52:ed:21:f2:42:9d:a2:33:be:00:a1:4c:41:67:
a2:07:5a:e2:28:35:b1:65:df:f0:0d:7b:f0:de:af:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:9A:45:4A:91:DA:7A:7F:58:95:F0:9B:0D:AD:AF:BC:B3:22:8A
X509v3 Authority Key Identifier:
keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:5f:f6:8f:6c:5e:a9:b8:15:45:5c:bd:e4:6d:23:8a:7e:
1e:f6:87:7d:c7:de:bc:53:75:96:2f:31:83:84:a9:18:cc:c1:
7c:ce:b5:24:bb:8a:19:6a:1f:c0:bd:3a:1e:74:91:4f:f5:18:
ff:fa:9e:3a:0a:ea:8b:67:b2:af:e1:76:3a:13:cf:bb:18:3b:
af:96:63:bc:19:64:09:40:54:8b:ee:66:a2:e8:63:bb:91:34:
75:c5:fd:66:67:60:86:27:cf:d8:88:c0:ef:23:f6:92:a7:8d:
be:01:00:34:f8:f1:42:d0:b7:d9:1d:bc:54:f8:f2:34:ee:3d:
6d:44:e1:07:73:6b:c0:7d:48:f1:d2:d5:3d:56:bc:5c:f3:40:
64:b6:43:b5:f1:c8:b1:49:98:87:cb:bf:77:16:a4:03:8f:ec:
d0:13:87:10:ed:3a:17:b4:4a:95:00:62:91:5f:e0:de:77:23:
d9:f3:b3:5b:16:86:98:80:ed:73:af:b5:09:de:5e:77:3e:b1:
02:6d:f9:7b:72:0e:ab:82:cb:a0:db:42:31:eb:ae:82:a1:d4:
db:4e:d0:21:ba:8c:ac:80:bf:80:dd:fa:e8:27:4a:16:a1:44:
1d:1d:c3:5f:d5:0f:d9:d6:c5:84:a2:d4:b5:af:66:3c:b5:f1:
0f:00:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:58 2026 by rpki-client