Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: XIDvR42yDdAkcl+u1ZJDYVoV51lPRU6vjbgK0y2NqTg=
Subject key identifier: 62:CD:30:B1:D8:F5:CE:98:D0:C7:36:F7:96:7A:1B:F5:5E:8C:37:0F
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 400344ED02532476E021ABF2ACD73EB0F931FBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 01E4
Signing time: Thu 29 Oct 2026 10:53:09 +0000
Manifest this update: Thu 29 Oct 2026 10:48:09 +0000
Manifest next update: Fri 30 Oct 2026 12:16:09 +0000
Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: 2e6RjM+uwlOVK2qlQTd646sTEs5L31DnJeQjqb2/cXk=)
2: AS202939.asa (hash: UvZJyCl32sjR2hersPnz8KdOU6cEiBPVyANdVZ/Z0kQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:03:44:ed:02:53:24:76:e0:21:ab:f2:ac:d7:3e:b0:f9:31:fb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Oct 29 10:48:09 2026 GMT
Not After : Oct 30 12:16:09 2026 GMT
Subject: CN=62CD30B1D8F5CE98D0C736F7967A1BF55E8C370F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:76:bd:e4:0e:64:df:1b:19:dd:3a:48:ee:1b:
0b:0a:60:c9:47:71:6b:a3:ef:93:33:51:76:2a:7a:
48:b6:f8:a9:75:77:d3:92:b1:ef:00:8a:53:50:49:
3e:ba:3e:06:c0:8a:69:4d:fe:07:7f:4a:63:39:a6:
d5:62:50:c5:b3:90:e3:38:21:30:b1:59:bc:4f:c2:
64:f2:a3:11:10:6e:aa:16:2f:41:d3:cf:0f:8e:51:
b1:3e:7c:61:88:c1:f9:24:1a:ff:98:1d:2e:76:7c:
1d:41:f4:35:3f:ef:b1:ff:6c:69:a2:fc:98:7e:e4:
df:5c:bc:ba:8a:36:cf:d3:9d:e7:76:9e:35:f8:67:
2e:25:a2:9c:73:5e:21:cd:cf:72:53:9b:40:38:f4:
af:c5:df:7b:5a:7a:f8:f5:51:9b:20:cb:00:26:18:
38:e4:62:1b:0f:02:47:04:0f:84:96:64:fa:2d:c7:
f2:ee:6f:73:03:8a:92:62:cb:5f:b6:c7:c1:7c:48:
25:ba:f0:0d:e5:e7:3f:b4:5c:0a:80:05:80:b7:37:
02:3d:29:25:c8:ad:f4:44:c2:2d:54:67:09:2d:f4:
c7:9b:3b:1f:9b:a3:20:2d:37:61:83:e5:3b:6b:c8:
13:5c:77:6d:81:86:93:7d:3f:bd:ce:93:05:0d:c9:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:30:B1:D8:F5:CE:98:D0:C7:36:F7:96:7A:1B:F5:5E:8C:37:0F
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e6:fb:50:99:f4:51:3d:60:6e:53:30:61:68:e6:64:26:45:
f3:ba:49:44:e7:85:8c:89:04:60:dd:f0:3e:7b:4a:c4:f9:69:
2b:23:2c:42:ae:ca:48:91:16:9a:95:f0:9d:6f:7f:a6:8c:03:
03:6d:87:73:fb:a3:da:1e:d6:90:e4:81:01:19:fb:e0:33:2d:
9b:cb:21:d7:2a:e7:c9:8b:d9:4c:ef:df:ef:1e:de:08:25:6a:
0b:09:11:5b:7a:60:a0:c9:3c:7c:1f:a3:23:a6:91:32:82:29:
f9:89:02:39:d8:96:6e:34:19:fb:eb:46:54:c2:72:b5:a9:88:
b8:ec:b1:6c:9a:20:8e:18:af:29:71:df:be:43:cb:24:f9:36:
a1:6d:83:2b:7c:e8:93:64:7b:0f:c6:65:61:8e:3e:44:08:08:
12:83:61:07:90:d8:75:41:39:bf:71:03:de:c0:48:3e:d9:8b:
5e:82:7b:b7:c9:91:30:cd:e1:3b:15:28:1e:ed:f5:9a:67:54:
03:e3:87:cd:e8:72:18:67:5f:2c:b6:91:01:d4:00:39:b6:b2:
0f:cd:dc:5f:36:41:0d:9c:01:ee:9e:a2:f1:49:01:6f:00:ec:
4f:1d:68:82:45:d9:6d:c9:78:92:9e:25:b0:f3:b6:e9:39:2b:
8b:2c:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:46:06 2026 by rpki-client