Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier: EJdG5MtP9iKF1pDU+FWVSMQtfgKHQVlVqdZoL4pmLS0=
Subject key identifier: 3C:A3:7D:F5:35:99:69:82:19:E8:1C:44:6E:FF:48:D1:11:04:67:0F
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer: /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial: 61BB049806E16B312D3D882C5F071AB5D67849E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number: 5B
Signing time: Wed 25 Mar 2026 07:18:07 +0000
Manifest this update: Wed 25 Mar 2026 07:13:07 +0000
Manifest next update: Thu 26 Mar 2026 07:45:07 +0000
Files and hashes: 1: AS199310.asa (hash: 25JzYDDIlJ0mwy3/bYnCze9Fju0l3kfBOY4vH1sKmnQ=)
2: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: TaRMi0dV0reNEkP37tRjWAgFD1aG8elWZHu/sIrdJpk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 07:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bb:04:98:06:e1:6b:31:2d:3d:88:2c:5f:07:1a:b5:d6:78:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Validity
Not Before: Mar 25 07:13:07 2026 GMT
Not After : Mar 26 07:45:07 2026 GMT
Subject: CN=3CA37DF53599698219E81C446EFF48D11104670F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:ce:82:aa:24:94:be:cf:e9:44:ca:d5:ed:
34:93:5a:17:50:aa:25:ae:00:53:7b:62:ca:4f:27:
1d:f9:e4:99:1b:a1:ce:85:4f:14:40:3d:62:d6:f3:
8f:b9:c5:07:35:54:f3:e2:c1:ba:16:b6:a4:07:af:
8d:27:fc:22:40:da:35:a9:f1:29:46:f8:fa:1a:8b:
bf:e3:33:3f:a1:c4:e7:72:e9:3e:fd:36:a7:2d:99:
85:44:02:4a:80:52:95:e9:d7:45:12:b7:cc:0b:88:
e0:4d:32:51:01:a3:ce:2e:f4:41:a9:59:de:b7:7d:
ae:62:1d:be:65:d1:b3:4d:e3:8a:f7:d5:49:30:e9:
82:43:8b:9d:65:14:04:46:9a:94:00:93:e1:bd:05:
eb:33:5c:5f:6e:53:7e:bb:75:29:8b:fa:60:0b:a1:
e8:fb:72:9c:5a:46:c6:67:15:cc:9f:7e:e8:dd:3b:
c3:0d:20:24:68:f0:6a:0b:af:24:0f:b4:ac:de:a4:
bf:72:34:41:9b:e6:91:eb:b1:82:5e:70:0f:fd:15:
e8:05:2e:87:5f:f8:27:9d:81:6b:cf:ae:75:5f:a6:
93:99:46:5d:69:17:8b:4b:77:c2:0b:03:d8:0f:a9:
77:6e:e5:02:f2:02:ff:fb:58:be:85:c5:09:66:cc:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A3:7D:F5:35:99:69:82:19:E8:1C:44:6E:FF:48:D1:11:04:67:0F
X509v3 Authority Key Identifier:
keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f4:7f:df:3c:99:a7:89:9a:62:ef:87:06:7e:ba:86:71:fb:
81:23:00:c7:78:79:87:30:22:7d:db:ef:78:7b:46:b7:6a:bb:
23:41:ed:5a:17:7c:5e:d9:a9:24:fb:83:15:e0:87:77:a6:2f:
f8:40:4a:6c:0b:78:d4:14:c1:8e:d4:3a:3e:ff:1d:05:71:ee:
fb:1d:3d:f7:ab:65:6a:c4:69:a6:3c:e4:2f:c1:bf:ce:ad:a5:
2e:9c:73:eb:8c:80:33:fb:6f:99:1a:5d:76:0e:e0:c8:0a:d1:
17:4b:a2:80:c4:f0:18:f5:4b:d6:ba:80:48:fe:27:97:25:94:
0d:c2:fb:d6:cf:dd:f8:43:d8:dd:82:69:3a:15:4d:72:f5:15:
53:ad:39:62:27:9d:12:62:26:4e:81:1a:6e:62:26:11:db:71:
77:ab:c8:e7:34:15:45:ba:62:8b:ab:72:31:e4:23:97:2d:c3:
b9:4e:57:ad:5b:21:16:34:23:21:2f:27:93:6d:36:88:a1:28:
31:c0:e1:15:0e:b2:c7:c4:5b:e4:63:e3:08:8a:0c:99:14:05:
34:8a:67:5c:67:fb:13:25:b9:fc:91:07:26:62:0c:5f:b8:7b:
35:16:71:c0:4a:d2:e6:b8:02:d4:0d:b5:e9:cb:d7:ad:f6:fc:
70:a9:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:31 2026 by rpki-client