Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File: 40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier: oTDZshFZLirOuSAbdu/22TYFPWrxL4K59bN6JBI2d0o=
Subject key identifier: 90:62:18:C1:A5:AF:59:E0:2C:AE:27:E1:DF:39:B7:46:04:79:CE:D7
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer: /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial: 2EDE331D9EA18D709AFD0E05D6F9B1A491949306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number: 0643
Signing time: Mon 27 Jul 2026 20:32:57 +0000
Manifest this update: Mon 27 Jul 2026 20:27:57 +0000
Manifest next update: Tue 28 Jul 2026 23:31:57 +0000
Files and hashes: 1: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: 82mkN02O/f6YHGRsNPjqYGcYe9Wh0vMjUOro4QBU8tM=)
2: AS199518.asa (hash: UjsTQkFyzneCZAgmxxkBo3fJbyiLuWpxsRULuHv/LHY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 23:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:de:33:1d:9e:a1:8d:70:9a:fd:0e:05:d6:f9:b1:a4:91:94:93:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
Validity
Not Before: Jul 27 20:27:57 2026 GMT
Not After : Jul 28 23:31:57 2026 GMT
Subject: CN=906218C1A5AF59E02CAE27E1DF39B7460479CED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:34:6c:6e:c8:c4:9a:1b:b7:9e:a7:2c:e1:
66:c7:6c:d1:d9:20:b8:b9:0c:62:9b:15:93:c5:43:
d2:da:6d:b3:8e:af:28:d7:cf:22:99:ed:c6:fc:99:
9c:19:38:6c:97:b8:bf:40:13:6e:89:7f:04:c6:ff:
38:00:ba:0f:24:62:60:7b:ff:df:b3:6b:95:b2:45:
a5:83:f7:ad:31:74:b7:15:fe:ea:66:7f:bd:c3:cf:
04:66:6e:c0:44:a3:e9:09:56:62:c2:38:a0:8f:03:
72:24:c6:da:28:85:9f:e1:ba:58:37:08:03:8f:2d:
43:ae:7f:1e:da:81:3f:9e:45:2a:70:d3:f6:ea:ae:
60:35:26:da:0e:2d:2b:58:52:13:36:9b:21:00:c1:
de:d4:d3:4d:66:84:19:10:71:98:05:72:61:d9:6b:
f7:82:5a:75:da:b4:21:44:2d:e8:9e:96:99:55:b2:
a1:a3:19:47:83:e2:36:39:bc:f2:ca:6b:6d:40:5c:
ac:ef:74:48:f4:15:78:cd:74:20:50:2a:83:21:76:
e3:59:5a:cd:10:e9:d7:a1:5f:9d:57:06:06:2f:13:
a9:10:b8:a7:e8:93:28:d1:3c:80:ce:16:dd:01:cf:
f9:d9:a7:ed:a5:a1:97:d0:1c:ed:aa:61:71:17:d6:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:18:C1:A5:AF:59:E0:2C:AE:27:E1:DF:39:B7:46:04:79:CE:D7
X509v3 Authority Key Identifier:
keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a8:5c:6f:ad:fe:10:2d:c7:c2:2a:e8:8f:68:b8:18:ac:5a:
5e:a8:f0:c5:96:8a:34:cb:b6:87:fe:b0:75:be:3c:24:06:ce:
38:67:95:b0:8b:2d:34:2d:29:d2:bb:b1:01:10:30:6c:43:af:
5b:9b:20:d1:52:bd:c2:84:77:bc:be:c5:1b:bd:8f:11:49:51:
5a:80:f4:5d:11:fe:d6:38:65:1f:b3:57:a5:dc:63:ee:20:af:
81:0e:68:87:96:59:9e:ce:44:31:55:c5:f5:18:fb:1a:7f:08:
98:c9:8c:33:6d:d4:e6:ff:41:dd:20:d9:19:73:45:6a:e9:bb:
d0:64:58:2f:7d:f4:89:90:d9:c4:2a:8b:fe:f2:91:c8:41:e6:
30:07:5b:98:8a:af:d4:fe:5e:49:88:9b:3b:92:08:1d:4e:5c:
b5:b9:c6:70:94:52:fe:df:91:a0:9f:fc:9a:dc:b0:cc:03:ff:
f4:5d:73:9f:bc:5a:cf:84:74:31:cb:4a:1a:e3:5e:fa:46:a3:
c5:84:b9:74:10:00:10:74:24:4c:c0:46:66:20:5d:a8:6a:e6:
ab:6b:24:e9:a9:84:11:8f:c2:10:b0:bb:66:d2:f1:a9:39:69:
3f:3c:ff:d2:2b:d9:ed:74:f5:af:60:e2:18:f5:c8:21:0c:15:
97:3b:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:47:07 2026 by rpki-client