Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: tXfaBYzOEq8ffO4huV4EcC6ndeIaXGbrAAifn0icd5E=
Subject key identifier: 2E:08:B6:06:E9:C4:4D:D1:F5:B4:73:92:37:0D:6A:DA:4D:FA:57:56
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 43442E2D32B4773426B156AD6DBED9156222D4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: DD
Signing time: Sun 19 Apr 2026 02:21:58 +0000
Manifest this update: Sun 19 Apr 2026 02:16:58 +0000
Manifest next update: Mon 20 Apr 2026 05:33:58 +0000
Files and hashes: 1: AS202939.asa (hash: 0dd8SoTnw25HOjFHy4rDiK2vYwlxqU7plZvDPIVRf/I=)
2: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: W9IKrT8t9Vj69C5me3VQs/1C63q99HCXQb5y7b6/VJI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:44:2e:2d:32:b4:77:34:26:b1:56:ad:6d:be:d9:15:62:22:d4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Apr 19 02:16:58 2026 GMT
Not After : Apr 20 05:33:58 2026 GMT
Subject: CN=2E08B606E9C44DD1F5B47392370D6ADA4DFA5756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:8f:5b:5e:cf:4e:62:98:c5:e7:ba:9c:d1:
bf:a2:90:d3:5e:35:fc:f5:64:f3:82:7b:3d:f0:72:
c3:43:e6:e6:8e:98:df:61:8a:40:c4:1a:e6:78:b9:
ed:34:35:20:40:7a:1c:92:9d:a7:35:d3:e7:ca:30:
6f:e1:00:2d:de:d4:4a:09:00:7a:90:72:bc:8f:af:
aa:b2:9c:77:25:37:42:6c:aa:c7:e9:07:01:8c:02:
f3:0e:1a:3e:63:b5:2a:f5:e0:f6:c8:80:11:48:f3:
dc:d8:35:fa:bb:3a:ac:49:47:b7:62:2e:6f:ed:3a:
f0:67:fc:79:3f:6c:6f:61:e5:38:38:25:08:8d:9b:
91:29:26:ea:8e:da:0d:a0:05:49:36:23:a9:74:6d:
9c:0d:3a:a7:11:46:f6:f7:2d:07:c1:56:d7:75:33:
b1:b0:29:a0:f9:88:20:b7:18:e7:0a:2b:d1:36:f2:
b0:65:fc:a1:e0:a6:1a:d4:ff:61:36:a4:2d:1e:b7:
31:e2:54:74:e9:27:4c:52:26:38:39:73:f8:b6:cd:
10:4d:87:98:43:63:0c:0a:3c:86:43:19:cb:65:d7:
ff:38:fb:00:12:c9:c3:ec:9d:eb:7a:94:94:17:ea:
18:06:1d:58:03:91:58:68:34:86:d8:e8:07:c0:60:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:B6:06:E9:C4:4D:D1:F5:B4:73:92:37:0D:6A:DA:4D:FA:57:56
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c2:e8:64:98:dc:cf:b0:d1:c7:17:db:75:25:f9:a1:be:76:
74:46:4c:b4:9a:8d:54:34:c5:2f:45:74:fa:d0:14:28:17:2f:
a7:70:a4:0a:ab:b7:5c:46:64:91:c6:00:70:f0:74:ad:c1:d0:
04:60:0b:32:91:7b:3d:b1:87:20:a9:15:55:01:88:ee:86:16:
68:0e:43:f8:84:b3:f8:e7:32:81:de:2b:fd:56:7d:1a:c2:a9:
da:af:89:4d:97:d2:ed:8f:94:56:d5:ec:b2:6d:ab:99:ff:97:
4c:2d:9c:b3:7d:98:7a:3a:48:38:40:9f:ce:35:8b:bd:59:33:
89:62:89:a9:4b:02:5a:95:de:6d:ff:9d:c7:60:63:18:6e:8c:
7a:fe:86:ed:f4:93:70:8f:fb:2b:b9:9e:f4:ef:91:3b:c8:2e:
34:ce:c5:da:9c:fc:8d:3e:44:7a:15:56:87:7e:10:11:1b:a8:
23:0b:e9:09:67:28:10:2c:74:65:5c:35:e4:a4:95:94:4c:72:
c4:7b:a5:83:e7:62:33:7b:53:18:02:a5:f2:3f:bd:bf:4f:1a:
6a:1e:c8:21:04:37:d3:e1:53:53:ac:68:c7:4b:63:c4:aa:da:
17:21:38:81:f2:32:98:94:08:31:a4:b9:4d:50:fb:c3:44:58:
7f:5e:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:33 2026 by rpki-client