Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: RyIBuxEcj+st9nucp8RwTzrtoOZpvkdkqBPIYGENX5k=
Subject key identifier: AD:D1:3F:3C:67:BE:E2:A2:AA:F8:89:61:52:B3:D4:35:25:A0:D8:04
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 3798EA45E3053D925595202DE6B441B0BF2B1D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 011F
Signing time: Sat 06 Jun 2026 21:57:25 +0000
Manifest this update: Sat 06 Jun 2026 21:52:25 +0000
Manifest next update: Sun 07 Jun 2026 22:36:25 +0000
Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: h8Cs1/z2zrXk6IuXLKe9X2iNrfSA+Q39U++3AIk7rlY=)
2: AS202939.asa (hash: hs9C4v21AvxlqBtXfOpTqG6uAT4nHdx2tRebfLXi/gA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 21:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:98:ea:45:e3:05:3d:92:55:95:20:2d:e6:b4:41:b0:bf:2b:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Jun 6 21:52:25 2026 GMT
Not After : Jun 7 22:36:25 2026 GMT
Subject: CN=ADD13F3C67BEE2A2AAF8896152B3D43525A0D804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:ae:5b:9e:30:37:62:95:23:07:2f:da:3c:
17:8d:2e:f1:d5:2a:75:ac:19:2f:1f:a6:ba:68:85:
61:0d:0e:4d:55:f2:20:6c:69:12:a3:38:5a:97:69:
d5:80:58:2d:9d:af:26:10:a3:0f:0a:35:c9:2b:d0:
a6:d4:af:ca:a3:c0:1d:09:c3:30:87:f7:50:b6:0b:
8b:01:e3:0a:80:31:ea:79:70:ba:f0:20:82:bc:ea:
19:ee:d5:a0:23:9c:ce:b2:fa:d1:6a:3d:bd:c5:20:
92:70:4c:a3:07:ac:e5:bb:8f:40:00:5f:a4:59:e8:
58:d6:fc:c9:67:57:55:3b:1d:7f:ba:e6:1b:9a:af:
dc:fe:8c:77:b2:27:16:8a:26:de:ca:da:a3:76:29:
97:42:92:29:c0:a8:66:f1:7f:7e:75:67:54:f2:1d:
65:0a:b8:ac:13:1d:25:02:f4:d2:cd:5a:43:f8:0e:
f3:da:09:9d:26:3e:93:d7:7c:64:cc:ee:fd:46:85:
0b:94:dd:fa:01:6f:32:d5:2a:2b:41:a7:1e:28:0b:
44:21:4d:4c:c1:88:c0:69:be:51:c9:40:a9:a0:ee:
32:1c:f6:27:98:11:bb:e7:a8:26:59:18:74:cb:da:
b4:c0:11:da:74:ae:2a:c6:15:55:42:6e:93:d6:a8:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:3F:3C:67:BE:E2:A2:AA:F8:89:61:52:B3:D4:35:25:A0:D8:04
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c7:3b:b1:3d:3f:83:ab:cd:03:4c:74:bf:52:c2:9e:ce:73:
4c:ac:26:94:b4:48:57:8f:29:37:b0:a3:f2:2b:f7:d7:39:fd:
e8:4f:bb:2f:54:84:36:9a:ee:99:85:77:77:f7:64:8a:96:02:
38:dc:e3:95:08:38:7c:fa:ef:09:09:c0:7e:3f:78:ab:ca:47:
7b:1b:19:cd:8f:95:1f:0c:f9:2e:b1:ed:bf:fe:0c:c6:9d:aa:
30:37:8e:6b:27:a5:c1:77:c8:f5:63:ca:6f:37:62:bf:97:aa:
75:70:94:80:37:b1:75:ed:7c:42:a0:0f:c4:df:b7:75:8f:b0:
f6:af:fb:ab:29:7f:59:20:5b:cf:1f:51:29:a0:5f:d9:16:cc:
e8:86:fa:cb:c7:27:ec:e1:d0:0e:8f:11:15:dc:3f:cb:6c:87:
fd:55:88:29:e6:ed:9a:a3:b0:18:95:92:e5:15:f9:bf:f5:f1:
4f:d2:93:55:86:3d:cd:8e:49:d6:52:12:f7:df:30:d7:b1:3a:
cd:ea:ae:ff:60:ab:bc:7c:17:7f:4b:54:38:2b:cd:d1:7a:bf:
21:23:26:d4:02:82:c7:0b:b8:d2:2c:f6:cf:e9:a6:d6:e0:de:
69:ee:ee:dc:94:18:da:03:ea:00:62:0b:27:5b:e0:65:77:4f:
7a:4f:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 04:12:44 2026 by rpki-client