Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File: 40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier: sCpR1Drwh/vEVlBj35JefXL7lVLbnSzGT2Txq+g86vM=
Subject key identifier: 11:EA:A3:7B:76:FD:1E:6E:B3:4C:A1:B1:F6:48:02:EB:A4:A2:32:26
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer: /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial: 3AAEBFEC8989E2AC1E48FB79187EE74CFA472350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number: 0678
Signing time: Fri 04 Sep 2026 15:17:45 +0000
Manifest this update: Fri 04 Sep 2026 15:12:45 +0000
Manifest next update: Sat 05 Sep 2026 15:56:45 +0000
Files and hashes: 1: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: F2BtRA2w+vEU84A8ybytDn8+BpvOimxnPF8JoTftsO4=)
2: AS199518.asa (hash: KomxC2j9N3Sb13WmTHClWdRsjYelfDWArnHo/XtFiAc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ae:bf:ec:89:89:e2:ac:1e:48:fb:79:18:7e:e7:4c:fa:47:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
Validity
Not Before: Sep 4 15:12:45 2026 GMT
Not After : Sep 5 15:56:45 2026 GMT
Subject: CN=11EAA37B76FD1E6EB34CA1B1F64802EBA4A23226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:f9:09:bd:88:ba:c0:9f:65:ad:01:68:f7:
b6:b7:92:67:00:1c:f6:99:3c:ad:91:f8:22:d2:9d:
f8:92:41:31:52:81:f6:43:96:94:b1:a4:d3:59:c7:
3d:49:79:85:8c:d9:9a:e4:8d:93:b0:0e:df:b6:76:
05:57:3d:8a:ac:20:02:19:fc:b4:17:45:41:a1:b7:
bf:b2:92:68:c2:81:bc:19:8a:14:32:96:41:76:00:
56:76:b3:31:f0:94:9b:d5:1d:e5:f2:80:51:55:b2:
6c:a6:f8:bb:b0:d3:20:4b:b7:f9:a0:44:2a:f9:0d:
85:f2:3f:c5:17:46:15:7b:bd:d1:87:ff:87:4b:77:
e7:c4:17:4c:bc:e8:a9:f4:a0:d6:e7:b9:fd:48:f4:
40:d6:f9:2b:ef:08:1b:ab:f1:fe:0b:b3:12:ca:da:
3c:47:df:d6:99:6d:5d:91:1d:dd:d7:7e:17:a0:00:
0c:64:25:79:36:ac:8f:46:45:0d:8b:bd:da:59:c7:
af:eb:a7:79:de:d7:d0:0c:84:fe:9d:c6:85:6e:ef:
f9:d7:6a:3d:a0:9c:56:40:1f:b5:a5:eb:b6:c0:19:
79:aa:f6:23:77:b9:5b:45:8e:bb:41:99:ec:ca:5e:
2a:f6:80:a0:f8:01:72:c8:ad:ca:7c:b7:0d:62:18:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:A3:7B:76:FD:1E:6E:B3:4C:A1:B1:F6:48:02:EB:A4:A2:32:26
X509v3 Authority Key Identifier:
keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4a:99:56:34:fa:6e:a6:b8:88:02:e5:4e:b2:51:65:1c:16:
5a:b5:92:d3:a0:48:e6:1f:fd:f6:4b:13:a9:9d:d3:7f:fa:5d:
49:cc:21:b7:ee:ff:1a:8d:47:d8:01:c8:1e:01:3e:af:86:4d:
f0:b5:c6:22:95:8b:96:8c:88:14:57:26:c3:18:1f:1d:49:fc:
fd:f1:8b:85:19:53:1e:3d:6a:db:e6:7b:0a:83:d6:d2:51:e0:
25:e8:fe:d2:e6:e0:24:6f:ab:ec:fe:23:ff:8d:7b:10:39:75:
e2:0a:67:a8:5b:d5:18:27:e7:af:a3:b7:54:1d:46:76:c8:30:
9b:be:d1:ef:77:49:8b:00:f1:c8:80:44:8a:7a:09:89:9e:b9:
bb:03:03:3d:c1:ab:6e:33:ba:fa:ca:a8:89:dc:b2:ca:b4:7c:
fb:59:01:80:72:c0:f6:9b:95:a5:d3:8c:ea:8e:8b:d7:66:ac:
fe:7b:d3:ca:a4:7a:31:e5:b4:99:a8:9b:32:2d:95:d0:3b:c8:
67:c4:00:80:38:39:85:79:b3:3b:81:de:23:a1:72:90:c6:96:
9d:ef:b7:59:c8:ea:d3:98:79:94:9f:91:09:9e:85:29:bc:10:
1d:85:65:28:1e:1b:92:f0:69:4d:e3:d2:e6:b1:db:3f:f7:09:
4f:03:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:28:48 2026 by rpki-client