Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: /JuuH6TSlMg8g8C5cXnyZTcaXpQxNQ3YKJ4ZBkEjQg8=
Subject key identifier: 60:15:6B:1E:D2:7C:06:EA:2D:A4:E2:C4:73:FC:CE:3D:F3:94:62:4B
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 317033CBC1B9FF52238006218866658DD7DD5E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 01A0
Signing time: Tue 08 Sep 2026 14:03:03 +0000
Manifest this update: Tue 08 Sep 2026 13:58:03 +0000
Manifest next update: Wed 09 Sep 2026 14:04:03 +0000
Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: R/a9nfYN8Lnc74uMMiupivb/pdFNUn7uPuAOd2Qq9rk=)
2: AS202939.asa (hash: UvZJyCl32sjR2hersPnz8KdOU6cEiBPVyANdVZ/Z0kQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:70:33:cb:c1:b9:ff:52:23:80:06:21:88:66:65:8d:d7:dd:5e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Sep 8 13:58:03 2026 GMT
Not After : Sep 9 14:04:03 2026 GMT
Subject: CN=60156B1ED27C06EA2DA4E2C473FCCE3DF394624B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:f3:2b:8a:57:ac:f3:93:a5:e3:6b:f5:f6:
f6:96:24:27:2d:f8:f7:a7:d3:c9:dc:22:42:3e:75:
d7:30:4a:32:01:80:0d:f8:cc:20:d1:00:38:c6:1b:
fb:15:8a:21:2a:b3:bf:49:12:98:09:cd:db:1a:d6:
1e:d4:cf:13:f5:55:09:b1:8a:fb:33:6b:17:7a:38:
7a:63:e1:19:fc:a5:8d:12:58:0a:d8:65:b6:44:fa:
7c:97:e9:01:2d:b1:ce:99:c0:2f:87:12:1f:ba:f0:
3e:b3:ee:1e:51:cd:65:39:68:0c:ae:7a:b1:3c:83:
fb:e0:91:d8:f6:ea:69:7c:c0:1c:e9:04:9d:c5:dd:
93:aa:32:53:c3:a9:cf:c2:54:a4:d5:39:53:04:12:
fa:af:9b:4b:89:fb:f9:49:86:2d:c3:66:84:7b:70:
9c:f7:5b:06:6d:96:06:a8:c5:07:09:26:b5:84:21:
79:de:3c:63:ab:4d:5b:a1:c2:e8:f8:40:05:5f:06:
64:3a:8b:8b:e6:f8:cb:b1:4b:38:d0:0d:d4:8f:f0:
40:51:a0:3f:62:3a:e6:e3:82:d2:53:03:94:6e:35:
cc:9d:ec:97:7b:5e:ca:dc:e2:cb:0c:7f:a2:58:7b:
94:53:3f:87:37:0e:db:00:a1:35:17:89:19:9e:d0:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:6B:1E:D2:7C:06:EA:2D:A4:E2:C4:73:FC:CE:3D:F3:94:62:4B
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ed:4a:a4:84:91:a9:70:da:63:a0:5b:09:08:9e:6d:f9:d8:
0f:27:4f:98:b8:16:8c:31:35:31:3c:24:49:75:1c:7e:af:20:
43:e6:bb:01:4b:ab:d1:c7:9a:d6:fd:6a:85:9e:6b:8f:4a:7b:
44:2b:6f:29:db:0c:e0:f6:58:62:26:22:40:89:8f:6b:67:58:
6a:60:ab:71:b9:fd:be:04:7d:c0:47:17:cf:bf:00:75:15:ed:
aa:8e:5e:b3:99:ec:24:24:a3:6f:09:86:2f:d0:3e:36:2e:7b:
b5:90:81:b3:a6:20:f3:f0:99:1c:a0:c6:60:d6:46:6c:7f:ce:
00:c0:3f:a5:a4:78:7a:f6:b1:bc:bb:c9:2f:e0:f5:33:5d:f1:
bc:ed:6e:6f:14:c0:94:95:70:d3:a9:13:9e:34:2e:24:ed:bc:
24:aa:bd:1e:82:65:65:45:29:3e:a5:0d:9a:a3:d9:c9:cc:2b:
a0:58:ef:c4:17:0f:47:06:c6:22:4a:b5:1e:02:cb:ce:b2:6e:
24:37:38:06:df:f4:97:d2:09:0a:2b:b1:ec:8a:94:3c:9b:50:
a5:b2:2f:a1:07:7c:60:dc:e8:19:ae:be:a7:53:96:24:45:d3:
66:7d:16:7f:43:7a:d7:c0:9d:f4:38:bf:43:1e:c7:b9:0b:93:
6d:0c:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:42:38 2026 by rpki-client