Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: jtbaz3MqjMbMBW5LDibWJWaOoTKXYJXWjoqk8uFYidE=
Subject key identifier: C9:98:E5:88:D3:EE:E1:15:70:E3:BF:66:06:F8:4E:41:66:EB:CE:44
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 6D6982A08B5D7AD5C615E00FBE3D06C9C42FECB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 0127
Signing time: Fri 12 Jun 2026 17:32:25 +0000
Manifest this update: Fri 12 Jun 2026 17:27:25 +0000
Manifest next update: Sat 13 Jun 2026 20:16:25 +0000
Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: 7J2fAZJLR51OACl2UXbaOqWar/eIgwvv7Db7xdEJMK4=)
2: AS202939.asa (hash: hs9C4v21AvxlqBtXfOpTqG6uAT4nHdx2tRebfLXi/gA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:69:82:a0:8b:5d:7a:d5:c6:15:e0:0f:be:3d:06:c9:c4:2f:ec:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Jun 12 17:27:25 2026 GMT
Not After : Jun 13 20:16:25 2026 GMT
Subject: CN=C998E588D3EEE11570E3BF6606F84E4166EBCE44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:32:c3:8d:13:ae:82:7c:6b:cf:78:fd:0c:
1b:6b:e3:3e:35:db:5c:21:37:32:04:a6:18:36:fb:
8f:89:59:f5:47:a3:61:f0:00:7d:b3:29:7c:a6:63:
6f:0c:fa:70:0e:e7:fe:1e:cb:91:a7:ba:5b:1e:af:
b2:e3:f1:ba:81:3a:d6:5d:b9:73:cd:15:da:53:93:
de:76:51:53:11:6f:19:8e:de:f9:4a:05:6d:f8:b6:
ca:bd:8c:0a:96:b2:a8:97:03:6b:c8:2c:22:dd:18:
11:1d:a5:16:9f:c5:0a:a6:0f:b1:e8:da:64:ad:9f:
7e:ed:05:77:06:35:82:c7:5e:6c:b5:72:dc:c7:f1:
bc:27:f8:c6:64:05:f9:54:16:a6:21:f4:46:41:bb:
23:2f:48:81:72:03:fc:31:29:e2:d8:84:53:0c:27:
be:cf:5f:d2:fb:1a:f7:b9:c5:75:e7:7d:8e:b4:46:
d7:1f:18:46:c6:e4:79:1c:47:72:48:23:40:b4:1f:
c0:e1:8c:96:99:e3:73:7d:f1:49:da:a4:9b:a0:33:
62:ce:56:a4:7a:0a:c5:aa:47:84:67:16:3b:d2:1d:
23:49:e3:7f:2d:84:c3:57:fb:4b:6d:df:21:fe:96:
83:4d:33:89:08:07:3c:0d:e6:5e:28:8b:c6:f8:42:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:E5:88:D3:EE:E1:15:70:E3:BF:66:06:F8:4E:41:66:EB:CE:44
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6b:f8:eb:db:dc:f0:da:0c:28:0b:48:76:2e:31:3d:ad:f6:
ba:6b:ca:d5:a5:e8:ab:3c:85:4e:45:75:61:07:5f:30:f3:29:
9e:1f:74:22:54:9f:1e:a5:ce:13:6b:b3:a3:87:57:d1:4c:b8:
8b:39:47:56:62:c1:77:d9:e4:49:f6:68:42:9f:f7:39:c3:f0:
a3:51:28:29:7b:40:2e:e1:8f:63:11:45:bd:79:ad:34:80:07:
90:47:49:03:62:b1:0e:85:a9:56:e2:21:97:71:77:b1:4a:6b:
a2:6d:75:00:7f:3b:47:37:f5:b2:49:57:2f:da:b1:bb:82:4e:
71:74:cd:05:08:c1:16:dc:2e:f0:e4:05:3d:ac:00:71:38:d1:
19:f9:a2:eb:5e:a1:30:f7:ed:3b:6b:a1:d3:92:6f:67:e5:58:
70:ad:3a:1f:37:99:0d:5c:2d:14:ac:82:cd:3e:b7:5d:1e:d9:
63:3e:0e:e1:31:50:fd:a0:11:a9:27:29:9e:1c:94:40:02:32:
73:b3:c8:20:35:8c:ca:12:76:1e:e8:70:51:d6:70:09:d7:d2:
5f:ad:23:32:fc:ee:a6:ad:b5:04:f8:20:e3:2a:82:17:27:8f:
96:5a:07:7c:3e:2a:74:30:5a:96:75:f6:65:31:c5:2b:09:60:
08:6d:ef:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:31 2026 by rpki-client