Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: skuxxQozSh9xwtfe1f4DELg+N5ZKkln1DBtPuVKrY2U=
Subject key identifier: C2:4F:09:A1:E9:43:38:86:BB:A8:7B:D8:EE:91:B6:71:05:B1:F9:13
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 4BC2B6C7CF2C52336800D169B67F2793843EAF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 0165
Signing time: Tue 28 Jul 2026 05:17:41 +0000
Manifest this update: Tue 28 Jul 2026 05:12:41 +0000
Manifest next update: Wed 29 Jul 2026 09:11:41 +0000
Files and hashes: 1: AS202939.asa (hash: JPhtYie6fuAUUwZ1e+sArmYU3lPbg/kkUe3K+Rj+oIs=)
2: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: TqDhXHAKPZzvj+yNzo25bnE/kysIfvsjH2WKZI3t+/8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c2:b6:c7:cf:2c:52:33:68:00:d1:69:b6:7f:27:93:84:3e:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Jul 28 05:12:41 2026 GMT
Not After : Jul 29 09:11:41 2026 GMT
Subject: CN=C24F09A1E9433886BBA87BD8EE91B67105B1F913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:8a:cd:69:31:a9:6e:3a:25:11:ec:d9:ec:
1f:7f:3d:7c:b2:a0:d0:65:d7:61:98:c0:3a:0f:86:
c9:71:c8:0d:4b:a0:de:ba:c5:4a:bf:96:b2:8f:c4:
2f:a1:c4:70:cb:fb:22:69:f7:9e:66:be:8e:f9:62:
3c:f6:22:5f:95:92:06:ed:05:cd:6f:9b:60:2c:8c:
97:46:75:dc:11:bb:f5:b9:f5:f7:e7:f6:82:ec:dd:
54:05:76:b8:e2:82:75:62:81:c5:c6:83:41:a1:eb:
87:18:cf:c0:41:d8:e8:14:30:3c:cf:fd:e5:00:e8:
36:a5:06:96:d5:32:86:dd:3e:5f:92:f2:84:d4:3f:
6a:75:75:5a:12:23:db:a2:49:42:5c:88:25:a5:c5:
6f:95:83:95:f2:98:e4:ee:c5:ce:40:21:56:e5:f2:
18:96:c3:d4:a8:13:e5:d4:26:74:fd:15:ec:37:55:
f3:cc:56:91:df:12:88:c0:99:19:65:3d:1e:64:73:
00:9b:da:22:6c:06:2e:21:0b:54:25:86:c8:0b:2f:
71:5c:88:dc:76:0d:1c:29:52:77:1c:93:51:62:c1:
e6:18:55:f2:9b:35:43:c7:92:70:b1:ab:1f:ae:d3:
e9:fa:c9:01:bd:9e:85:75:7b:c9:59:87:75:cc:b6:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:09:A1:E9:43:38:86:BB:A8:7B:D8:EE:91:B6:71:05:B1:F9:13
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:60:73:72:84:4a:20:ac:38:b2:57:19:4a:87:5a:cf:8d:
e8:21:ba:71:a8:73:90:3e:94:a9:cd:34:e8:d5:f5:37:65:5c:
30:62:f6:b9:15:29:f5:02:fc:a2:67:30:0c:e4:30:08:61:1a:
31:d1:9b:c1:ad:42:5e:a8:49:58:90:b9:6c:c2:da:ab:e5:1b:
71:41:c9:a9:45:44:0b:99:23:04:57:dd:4d:88:a5:96:dc:41:
3c:a1:6e:99:d7:cb:09:74:04:0b:fe:6f:c5:66:6c:e5:68:d5:
7c:bb:a1:4f:e3:4e:98:bd:34:1b:4d:97:88:a4:24:b1:c2:4b:
bd:f3:00:f5:61:ee:bb:ee:9b:97:47:52:8c:38:5c:b1:31:83:
cb:58:59:8d:c1:82:63:0b:1e:bf:d3:55:a7:0f:0f:6c:6c:ab:
ce:de:ab:6f:f0:5a:98:12:be:b1:76:9b:4b:c3:90:ed:ee:b3:
02:5b:d6:8a:a5:26:fb:f2:af:6c:ca:b9:8c:26:32:32:c8:19:
13:5e:47:a9:d2:cb:6d:86:c7:4d:61:94:7e:8d:14:df:45:cb:
fc:b4:6c:a6:54:e7:ad:b1:4c:5a:f3:15:17:6b:99:0b:34:80:
67:fe:74:61:13:a6:dc:e5:f6:d2:f8:13:02:b9:8e:14:4d:7c:
b1:c5:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:04 2026 by rpki-client