Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: RAZVJRxH+Tc961vU+Sj7eWvuKWsOv+IkxEUsb9qeNVQ=
Subject key identifier: 6C:54:88:1C:E1:72:68:A2:0A:E0:62:99:9E:9C:D3:E9:D7:02:56:AC
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 244DF589E63A0F7A4121F35087169D3C022BA4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 01B0
Signing time: Sun 20 Sep 2026 17:33:03 +0000
Manifest this update: Sun 20 Sep 2026 17:28:03 +0000
Manifest next update: Mon 21 Sep 2026 20:57:03 +0000
Files and hashes: 1: AS202939.asa (hash: UvZJyCl32sjR2hersPnz8KdOU6cEiBPVyANdVZ/Z0kQ=)
2: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: ofzitlyfbNedNn+dpbnaKO+jfugS3hpQ3UasyImyDAs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4d:f5:89:e6:3a:0f:7a:41:21:f3:50:87:16:9d:3c:02:2b:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Sep 20 17:28:03 2026 GMT
Not After : Sep 21 20:57:03 2026 GMT
Subject: CN=6C54881CE17268A20AE062999E9CD3E9D70256AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:be:be:2d:b0:a9:25:6a:9f:95:9b:15:83:
14:52:4a:e9:fd:6a:c0:cd:89:b9:89:0f:d1:99:b7:
7f:e8:b5:b8:04:db:03:e0:85:15:dd:61:60:da:78:
75:eb:57:75:2b:00:42:65:05:c8:58:70:27:7c:43:
d5:b3:ac:d4:a2:05:00:7e:3d:0b:b4:0c:bc:eb:10:
40:bc:f9:9c:cb:b2:71:23:a2:b9:4d:28:d9:c0:f3:
82:a2:0a:cc:53:71:6b:05:30:6d:f0:8e:d0:29:1d:
d0:6a:4b:16:d1:4a:9a:d1:b0:f9:30:1f:c3:2c:a1:
0b:dd:0b:aa:2f:14:f3:ce:3b:a4:4f:f0:11:19:37:
93:aa:0b:fa:68:6f:39:41:f6:5f:83:b3:af:dc:ed:
fb:3f:c4:ec:9b:43:18:17:8e:f2:2f:25:e3:2d:a5:
7e:8d:ab:3e:3b:2c:f9:b0:a0:d2:ab:36:a7:81:90:
4e:74:54:7d:97:8e:04:e5:cd:9c:68:df:74:3d:0f:
95:a7:6f:6a:f5:c1:f2:29:a4:0f:f2:23:20:dc:33:
6e:1e:f5:b9:ee:e8:6a:4a:ab:4b:9c:b5:32:5e:7a:
46:35:54:db:6b:e4:b8:f1:42:53:70:18:23:05:d0:
0e:17:0f:cb:a2:af:f8:3e:4c:a6:f2:ae:01:b6:09:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:88:1C:E1:72:68:A2:0A:E0:62:99:9E:9C:D3:E9:D7:02:56:AC
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a7:49:ce:2a:a7:eb:fc:ec:2b:2b:ba:29:e9:09:2a:fe:68:
a2:8a:7c:eb:39:d0:89:62:c1:f6:4c:6c:ee:09:17:a6:18:03:
cd:e2:cb:ce:44:93:9b:91:55:65:c4:f4:17:c3:d0:13:63:cb:
e4:6e:a5:12:4f:8d:c6:8b:d8:27:a0:f6:8d:75:f1:1d:34:ed:
83:e7:8b:d8:05:6a:7f:b0:e8:45:b4:b3:b3:a3:28:f4:5f:c9:
28:07:fc:27:ec:f3:94:47:90:49:fb:90:8c:7d:bb:ff:20:6e:
e4:16:68:7d:5c:b2:8b:4f:d0:a7:1a:e7:46:03:2b:8a:79:a4:
dc:08:8d:f4:9e:ea:79:72:d8:71:fa:a4:91:f9:a2:5f:35:1d:
98:23:2d:f2:d4:e4:75:3f:c0:27:56:84:ae:d2:df:86:91:a2:
51:b2:28:ef:b2:bf:12:ee:35:0d:4c:47:16:00:8d:73:bb:21:
82:85:57:cc:b9:2c:e4:4c:37:5d:bb:a7:0d:7f:82:7d:05:ba:
cd:01:0d:d6:22:b4:70:ec:1f:55:10:3c:7b:f5:74:53:41:64:
dd:87:b1:59:dc:a9:40:da:44:ed:35:d7:7e:f8:6e:37:dd:18:
d3:41:09:2b:06:85:26:3b:64:be:a9:d0:7b:7b:1e:eb:7b:88:
3b:54:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:26:55 2026 by rpki-client