Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File: 40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier: KZJHWuSVfO+SVG6rNj8RN5hPRd1ZeGXLuV41fg7dl1k=
Subject key identifier: BE:74:13:BD:F8:5E:C7:59:C1:1D:80:DE:E7:F3:06:58:24:89:11:6E
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer: /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial: 735A8C998FCED7255BC7084C1E2E39920880772C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number: 0691
Signing time: Mon 21 Sep 2026 22:54:21 +0000
Manifest this update: Mon 21 Sep 2026 22:49:21 +0000
Manifest next update: Tue 22 Sep 2026 23:07:21 +0000
Files and hashes: 1: AS199518.asa (hash: hznEb1n74Lzeb6/+cOs6BR+UZzQbqQszEUckTSKxpzE=)
2: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: 05POjekloT9NKrex8fiUXesGx97US46jLoYrCxmlvPM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5a:8c:99:8f:ce:d7:25:5b:c7:08:4c:1e:2e:39:92:08:80:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
Validity
Not Before: Sep 21 22:49:21 2026 GMT
Not After : Sep 22 23:07:21 2026 GMT
Subject: CN=BE7413BDF85EC759C11D80DEE7F306582489116E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:bf:1e:3d:d5:35:c8:91:73:92:69:da:e1:
a9:7b:78:13:81:2e:fb:88:cb:ef:f5:27:aa:18:8a:
02:9f:46:dc:0f:5a:ac:fa:00:85:5a:ba:3c:b6:59:
3f:93:de:08:6f:bf:eb:b7:f5:33:30:fd:73:56:b4:
82:96:7d:5a:c2:8d:2f:61:52:eb:d2:5d:74:ac:ed:
0b:bc:9a:eb:fe:5e:cc:de:f0:16:fa:66:03:91:af:
08:21:ad:ca:b5:3d:4f:79:17:74:6c:05:00:e3:5a:
6c:64:12:7b:56:68:58:de:da:57:d0:2b:46:b0:9d:
82:cc:70:c3:cf:b8:bc:d6:88:a5:c3:50:d1:c8:f3:
a8:66:6d:10:1a:d1:06:6a:f0:e5:0b:c0:e5:6e:01:
54:e2:35:82:3f:c3:6f:d2:cd:91:23:3f:75:d3:0a:
cc:ef:c5:1e:6f:b4:b3:10:28:7f:50:3f:a1:eb:a7:
11:95:16:1f:d9:5c:5b:e9:99:b8:7a:78:c7:98:7e:
d6:50:d5:f0:7a:e5:58:3a:e3:7a:6e:15:a2:6c:4a:
54:3a:dd:e1:6b:f4:d6:c3:29:1a:44:d8:90:a8:46:
a3:b8:16:13:9e:57:1b:6e:2a:2f:b3:2d:4a:29:f0:
50:d2:78:eb:b5:dd:45:44:bc:bf:e2:de:72:bc:00:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:13:BD:F8:5E:C7:59:C1:1D:80:DE:E7:F3:06:58:24:89:11:6E
X509v3 Authority Key Identifier:
keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:99:f6:5b:ad:2a:3a:ca:7f:eb:f9:1a:84:5c:9a:2c:0b:
00:1d:33:c6:36:fc:7d:19:61:c0:c4:60:62:a2:1d:4e:8d:c2:
f3:0c:68:c9:39:7d:ad:84:77:1a:5f:4b:58:84:83:64:e3:e5:
09:c5:42:e9:0a:2c:81:91:da:d1:bc:d6:39:95:86:94:a9:3b:
55:4f:db:be:1b:77:8a:b2:d8:ea:07:dd:9e:0f:4d:6a:5a:93:
a3:f8:59:42:d8:c3:1b:86:14:e5:e1:f1:cc:f7:df:7a:8f:73:
42:9d:5f:dc:64:ab:ad:5a:7d:d6:8e:a3:37:23:23:9c:5b:ed:
70:58:fb:e4:7d:49:e1:12:71:7c:21:d6:a0:b4:65:5d:52:dc:
96:80:de:68:66:0b:a5:26:da:a6:ae:f2:6a:6d:d5:bf:f2:09:
d4:65:72:e2:bf:32:8c:9d:64:81:49:16:4f:bc:e3:4a:b3:48:
a9:9c:b0:04:8c:2f:c8:d9:1f:b1:11:18:e5:4f:37:e4:5f:7c:
70:c7:d1:a8:14:40:aa:0d:df:66:ec:b4:2e:73:da:ae:bc:55:
fc:1b:ca:ba:23:01:23:16:ca:17:bb:5a:23:e1:b4:08:f4:6a:
48:0d:4e:9f:26:85:e5:8b:17:b6:cd:3b:a5:44:aa:55:98:46:
61:a8:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:13 2026 by rpki-client