Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: dghH+LHaIRbC5a0Gr+v03FP1H7krWz2U9xikcIhorwY=
Subject key identifier: E0:20:D5:2F:95:56:CA:2B:F7:8B:CC:5D:7C:44:66:66:79:C2:23:94
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 29FD1D283397029D400E3CDF4646871D09D5F45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 9A
Signing time: Sun 01 Mar 2026 08:36:49 +0000
Manifest this update: Sun 01 Mar 2026 08:31:49 +0000
Manifest next update: Mon 02 Mar 2026 10:20:49 +0000
Files and hashes: 1: AS202939.asa (hash: UoFhxAeLrvUQZiExGnTkSVBc799iEfEg4nDDlsceNNQ=)
2: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: 9lJOBVhyXiDPOJDwf1gHYeEmVsizNf+AAzzkbMyOyuQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:fd:1d:28:33:97:02:9d:40:0e:3c:df:46:46:87:1d:09:d5:f4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Mar 1 08:31:49 2026 GMT
Not After : Mar 2 10:20:49 2026 GMT
Subject: CN=E020D52F9556CA2BF78BCC5D7C44666679C22394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:94:11:87:a9:ea:85:04:2a:c8:41:88:b9:
c0:5d:73:46:32:94:8e:89:62:92:e4:3f:cc:98:ca:
1b:4f:e9:e9:85:02:6a:f9:c5:89:31:d5:8e:cb:17:
60:3a:ff:7f:e8:21:24:81:3f:2f:02:d8:41:63:a8:
98:9f:6f:74:76:dc:6d:3b:32:3f:c7:bf:50:b0:7c:
22:4d:d7:72:b7:da:cf:74:43:98:b4:34:cc:78:67:
f3:9e:20:e9:83:81:c5:7d:ec:d3:06:1e:50:c8:d0:
e0:d2:ca:c9:f0:31:9c:a8:e4:31:d3:02:3c:a3:78:
dc:0f:f3:12:1a:33:a3:62:e5:bd:b8:48:e6:f9:9a:
a1:6c:e8:be:88:f7:95:1e:66:88:40:0c:12:46:3c:
26:cc:a6:12:b5:84:51:b2:22:a9:39:7d:6b:1e:84:
e3:c7:1b:b5:44:30:17:32:b8:0b:c9:22:e9:85:12:
56:88:b0:42:70:7b:f9:c3:79:da:6f:f4:53:76:4f:
53:d5:ce:c6:a2:d8:d2:32:13:09:82:bc:ef:a6:55:
ee:db:bc:dc:59:e6:1e:84:e7:84:bc:58:38:c3:17:
59:fc:6b:b0:8f:cf:4e:b0:ec:5f:47:ed:4a:3b:a9:
cf:8a:b5:d0:2a:68:66:28:47:e6:70:2a:da:98:5d:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:D5:2F:95:56:CA:2B:F7:8B:CC:5D:7C:44:66:66:79:C2:23:94
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6a:57:5f:cc:8a:76:74:91:cc:26:fb:e1:8d:73:88:8b:2c:
7f:db:0a:3a:46:c6:3f:cc:12:57:d4:03:1b:1e:77:e7:cf:47:
8d:01:9a:c2:40:18:87:cb:7b:0e:5d:b5:8d:be:83:18:3f:63:
d1:8e:70:b0:2d:52:7b:1b:20:1b:3e:2b:f0:c7:c5:81:49:1e:
5e:ba:8a:2b:32:c9:11:fa:1d:69:d3:6d:76:0c:eb:1f:e4:ff:
df:a7:d8:9f:14:7a:2d:33:91:b3:2d:7c:45:44:26:7a:2f:e1:
eb:87:80:04:6f:11:fd:02:c7:22:f3:d1:e3:c3:fe:c0:ac:84:
bf:22:dc:72:94:2b:b4:82:3b:d5:bd:ac:ed:58:02:e1:cb:c7:
70:f2:ee:d7:55:81:8e:e7:b2:58:88:66:fd:73:ec:27:63:d0:
9b:e9:0d:81:ed:cd:cc:68:50:fb:26:09:69:07:55:35:23:8b:
87:ec:0b:60:b3:1e:e1:ef:59:bc:10:93:c1:5b:0a:0a:79:61:
49:03:a4:4e:a9:5b:59:18:c2:50:87:9e:3d:3d:ba:52:ea:09:
b1:2c:59:e6:4f:b7:72:a8:0a:6f:0f:a9:5d:10:41:5c:3d:50:
a3:17:08:e7:8a:c8:bf:e1:8a:99:79:1e:e3:94:58:6f:2a:9d:
2d:6d:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:22 2026 by rpki-client