Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File: 40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier: xQbPkRIcXKMEcOBtFOxokH+i1+9P/ZXRoZ6/n2uKTts=
Subject key identifier: C7:1F:29:50:60:83:D3:44:76:ED:88:27:2C:3A:13:A3:60:22:8E:B7
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer: /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial: 401309DE015132438C5B5063017C0AB4A939F80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number: 0639
Signing time: Tue 21 Jul 2026 03:00:45 +0000
Manifest this update: Tue 21 Jul 2026 02:55:45 +0000
Manifest next update: Wed 22 Jul 2026 06:04:45 +0000
Files and hashes: 1: AS199518.asa (hash: VTKWA+vd30hrjskJ8N23AzP1MafyTquYD6wq/sjvBmM=)
2: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: b24+zRISzYCw3UcwZ45Cm65KmjAvly5zMNWdEQP9i64=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:13:09:de:01:51:32:43:8c:5b:50:63:01:7c:0a:b4:a9:39:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
Validity
Not Before: Jul 21 02:55:45 2026 GMT
Not After : Jul 22 06:04:45 2026 GMT
Subject: CN=C71F29506083D34476ED88272C3A13A360228EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:14:1d:70:60:e5:51:3c:08:dd:68:9a:65:
22:99:24:58:f1:ab:4a:d1:91:b2:80:99:65:b5:28:
5d:8a:09:27:f7:44:5b:fc:13:b6:65:db:71:3b:6a:
c9:4b:f5:5b:5b:b8:a1:50:d2:bb:30:1c:b4:4c:15:
a5:5a:da:56:33:ee:01:54:6b:84:58:f3:e8:c5:d6:
46:ea:1d:2b:c1:b8:ee:83:e9:88:2a:a8:6f:4a:0d:
b5:20:5e:e7:bb:ed:5e:7e:1e:ef:6a:e5:3f:e8:10:
61:46:9b:c2:81:0e:7e:80:8a:97:85:ba:a8:6f:8e:
65:9a:18:fa:3d:28:ed:9a:74:56:76:03:d3:c5:c1:
2c:7a:c5:76:7f:de:6e:34:40:ca:c6:e0:3e:1e:c2:
54:03:29:9b:50:9b:c7:cd:41:be:34:0f:13:62:a6:
de:b9:69:e4:16:23:7e:3d:fd:de:65:75:34:19:65:
9b:1e:53:59:9d:90:3d:42:a2:42:75:bc:bd:62:9f:
b5:2f:6c:f0:96:24:03:5f:fb:37:90:e2:62:87:a8:
90:56:25:8c:5e:7f:62:de:a8:c6:e8:13:1c:79:e9:
cb:f5:ca:30:59:56:a3:ae:f9:2d:76:6c:58:a1:9c:
6f:28:44:7d:f2:9a:53:43:fc:87:88:04:47:8f:6f:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:29:50:60:83:D3:44:76:ED:88:27:2C:3A:13:A3:60:22:8E:B7
X509v3 Authority Key Identifier:
keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:43:c3:72:fd:78:3e:4a:26:e4:e7:e7:04:6b:48:ea:f4:7a:
6e:e4:c6:d5:1c:3a:b4:e6:ca:72:d0:87:cd:1d:f9:48:aa:ed:
b9:6d:3f:05:a4:25:27:50:f0:6f:57:d2:e0:e6:17:ca:bc:af:
cf:82:6e:52:11:fa:4d:28:46:21:f2:53:ec:64:b4:73:ee:53:
72:d0:77:17:ec:b5:0f:05:bb:02:0d:d8:0e:e5:75:2b:63:e8:
33:38:c3:bb:52:0e:7a:fa:ed:ea:68:65:62:8f:9f:9c:84:a7:
ba:6e:4b:a2:10:9f:b6:02:bd:39:51:03:e0:33:5c:a0:c5:9b:
58:a4:12:7a:80:72:ec:bc:6b:c6:68:35:77:1a:ee:e6:8e:3f:
50:b6:0f:1f:2f:85:3b:51:55:b9:b8:51:4a:d8:72:0e:32:4c:
78:d6:1a:2e:79:21:3e:02:6b:2c:1c:7d:c6:91:15:ca:9d:66:
6d:b5:49:a7:60:70:9d:73:04:db:4f:4e:a0:28:e1:db:ba:c5:
ce:7d:e9:5f:c8:43:ac:0c:a0:b2:91:cc:7f:a1:76:cb:93:65:
00:ad:1e:76:35:99:7b:c5:58:72:2f:11:1a:d6:f7:54:71:89:
50:de:62:48:e8:c7:2d:5f:a6:31:46:77:ec:c0:c3:07:db:c2:
af:03:c2:be
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQBMJ3gFRMkOMW1BjAXwKtKk5+AswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBiNTIwOGJlNTAwZTM2ODcwNGFiY2Y1MTAzYzZlNzFl
ZDM2MzNlZTAeFw0yNjA3MjEwMjU1NDVaFw0yNjA3MjIwNjA0NDVaMDMxMTAvBgNV
BAMTKEM3MUYyOTUwNjA4M0QzNDQ3NkVEODgyNzJDM0ExM0EzNjAyMjhFQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEPhQdcGDlUTwI3WiaZSKZJFjx
q0rRkbKAmWW1KF2KCSf3RFv8E7Zl23E7aslL9VtbuKFQ0rswHLRMFaVa2lYz7gFU
a4RY8+jF1kbqHSvBuO6D6YgqqG9KDbUgXue77V5+Hu9q5T/oEGFGm8KBDn6AipeF
uqhvjmWaGPo9KO2adFZ2A9PFwSx6xXZ/3m40QMrG4D4ewlQDKZtQm8fNQb40DxNi
pt65aeQWI349/d5ldTQZZZseU1mdkD1CokJ1vL1in7UvbPCWJANf+zeQ4mKHqJBW
JYxef2LeqMboExx56cv1yjBZVqOu+S12bFihnG8oRH3ymlND/IeIBEePb1LZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxx8pUGCD00R27YgnLDoTo2AijrcwHwYDVR0j
BBgwFoAUQLUgi+UA42hwSrz1EDxuce02M+4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzAvNDBCNTIwOEJFNTAwRTM2ODcwNEFCQ0Y1MTAzQzZFNzFFRDM2MzNFRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FMVWdpLVVBNDJod1NyejFFRHh1Y2Uw
Mk0tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1l
ZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUwZTgvMC80MEI1MjA4QkU1MDBFMzY4NzA0
QUJDRjUxMDNDNkU3MUVEMzYzM0VFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEPDcv14Pkom5OfnBGtI
6vR6buTG1Rw6tObKctCHzR35SKrtuW0/BaQlJ1Dwb1fS4OYXyryvz4JuUhH6TShG
IfJT7GS0c+5TctB3F+y1DwW7Ag3YDuV1K2PoMzjDu1IOevrt6mhlYo+fnISnum5L
ohCftgK9OVED4DNcoMWbWKQSeoBy7Lxrxmg1dxru5o4/ULYPHy+FO1FVubhRSthy
DjJMeNYaLnkhPgJrLBx9xpEVyp1mbbVJp2BwnXME209OoCjh27rFzn3pX8hDrAyg
spHMf6F2y5NlAK0edjWZe8VYci8RGtb3VHGJUN5iSOjHLV+mMUZ37MDDB9vCrwPC
vg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:32 2026 by rpki-client