
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File: 40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier: kOHCcU5XSOrnc2nxi2dUI8pY3PE2b6ZFxhX0YUWwBDk=
Subject key identifier: E2:D6:90:88:BF:D2:33:F1:88:21:E2:1F:3C:62:6F:34:89:EE:D4:52
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer: /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial: 6963BDE3969623BB06C31EF3B3E6E3E0AF69179B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number: 06BC
Signing time: Fri 23 Oct 2026 07:40:02 +0000
Manifest this update: Fri 23 Oct 2026 07:35:02 +0000
Manifest next update: Sat 24 Oct 2026 08:33:02 +0000
Files and hashes: 1: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: YZxdBxj7pwoqvQTJ+ZKNp5lOYFDd38PC9mduO8OZiSk=)
2: AS199518.asa (hash: hznEb1n74Lzeb6/+cOs6BR+UZzQbqQszEUckTSKxpzE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 08:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:63:bd:e3:96:96:23:bb:06:c3:1e:f3:b3:e6:e3:e0:af:69:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
Validity
Not Before: Oct 23 07:35:02 2026 GMT
Not After : Oct 24 08:33:02 2026 GMT
Subject: CN=E2D69088BFD233F18821E21F3C626F3489EED452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:1e:db:21:a3:a6:09:bc:d9:f4:7e:dd:15:
aa:7e:3f:4f:ac:e4:e3:c9:47:e4:db:4a:30:22:75:
25:1b:c2:3a:87:10:7f:7f:1b:04:39:8e:cc:b1:c5:
b5:24:f3:57:b7:47:9b:d4:41:d9:87:ce:92:8e:ff:
fd:44:c3:2e:98:13:0a:fe:a3:f0:e8:20:5e:ed:74:
5c:00:90:13:49:ba:8c:6b:ae:1d:e0:e5:07:78:69:
b0:3d:56:15:b5:da:f3:7f:a6:32:7e:0a:6b:7a:f7:
37:bd:dd:b6:38:0d:41:b6:21:f7:db:ef:9f:6e:19:
7f:93:46:7f:79:77:02:e1:90:03:2c:66:38:09:0a:
2c:6d:83:2d:87:ea:a2:c4:0d:a7:da:29:44:3f:e4:
91:87:f3:47:b3:55:04:ba:dd:0b:20:ad:1b:d3:f4:
17:bc:e5:a3:29:46:1c:e2:9f:6b:65:1b:db:78:d2:
45:25:99:ac:86:92:cf:fb:99:70:20:9f:f3:96:aa:
c1:39:f0:6d:d3:ca:4c:f8:d2:c9:a2:f2:c5:34:21:
f7:a7:fb:9f:d9:a0:82:70:06:0e:17:8a:bb:e5:b4:
92:ed:71:ab:3e:11:4c:aa:05:80:c1:15:e5:0d:e1:
3d:39:0d:de:0c:81:bf:75:49:5e:55:73:55:46:ac:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:90:88:BF:D2:33:F1:88:21:E2:1F:3C:62:6F:34:89:EE:D4:52
X509v3 Authority Key Identifier:
keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:68:a2:9c:e5:ad:01:36:0d:06:7c:af:3c:34:ba:63:ef:e0:
e6:cd:6a:de:5e:46:a0:30:f1:f2:da:ae:50:8f:39:e5:b6:f6:
98:ce:ee:fb:cf:8d:7d:a7:b5:44:f9:25:0f:dc:b2:28:6a:ac:
8c:33:93:d6:cc:5e:83:f9:3d:dc:7b:dd:85:ab:a3:79:1d:6a:
f3:3a:70:8a:b4:a5:3a:32:55:d8:70:3d:95:2e:03:1c:a4:6d:
96:6a:be:cb:87:5e:4a:15:ec:d2:20:ea:60:f0:cc:05:dd:0f:
6b:83:6c:53:31:9b:5b:d4:5b:52:17:59:0c:9e:d3:f8:37:63:
57:99:65:15:aa:82:59:41:e7:99:17:33:dc:90:33:da:35:48:
a3:16:f3:1c:a6:0c:85:61:49:45:c9:60:05:6f:47:55:bc:f3:
7b:72:fd:2b:3b:25:66:9e:02:68:c3:78:0f:8d:ca:68:41:50:
42:81:f3:a5:61:c1:ff:2d:1c:17:c3:11:c3:f6:16:01:9e:76:
02:0a:03:b4:c7:11:30:df:fd:6f:4f:b3:59:da:53:5d:ac:81:
b2:59:5e:ff:b3:e2:d4:20:c8:ff:c1:96:3f:ae:9c:f4:dc:98:
d6:26:87:5b:6d:1f:ff:aa:d3:72:c2:89:46:f4:0e:8c:7b:d7:
cd:9a:1a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:57:04 2026 by rpki-client