
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier: P542EeoblxQoG8IIwmu354owHDVU+aKBfUUTt6tv3wo=
Subject key identifier: F9:C2:BD:9A:FE:F2:39:E4:7A:36:F4:06:ED:4F:FD:B8:F8:A1:B6:70
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer: /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial: 584370EC7F6814FDEB2026171F5C130DD4A83524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number: A0
Signing time: Tue 12 May 2026 21:48:11 +0000
Manifest this update: Tue 12 May 2026 21:43:11 +0000
Manifest next update: Wed 13 May 2026 23:43:11 +0000
Files and hashes: 1: AS199310.asa (hash: LBWamUCbK1O722rXmKftUcs7o+T5UF9gLBEoV0j8QV4=)
2: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: sy2aJFXuDdsLeyeMxjggY1iA/sYSb3zV+BSJe3Zi7Uw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:43:70:ec:7f:68:14:fd:eb:20:26:17:1f:5c:13:0d:d4:a8:35:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Validity
Not Before: May 12 21:43:11 2026 GMT
Not After : May 13 23:43:11 2026 GMT
Subject: CN=F9C2BD9AFEF239E47A36F406ED4FFDB8F8A1B670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:2b:f4:3e:09:2b:83:9c:50:e1:1c:75:06:
49:a8:6d:62:9f:04:7d:57:79:73:cb:86:f6:37:0e:
d0:ed:44:51:b0:0d:ec:f4:ac:76:98:56:36:a7:cd:
c6:a1:dc:b8:e8:2c:95:78:a7:d3:df:52:d1:f4:44:
b2:dc:e8:76:43:5e:a4:91:4b:7e:ed:b3:97:38:42:
96:f1:b0:6b:9f:f3:b4:31:bd:f7:66:1d:22:18:60:
64:1d:98:bc:f6:d4:fb:c2:75:de:66:67:51:68:14:
13:32:e7:0c:ab:49:a1:23:4a:67:cc:a4:ae:a7:a8:
6e:84:ab:dc:48:27:3b:aa:d4:b5:e5:2a:e5:2c:b1:
b1:e6:26:55:4e:34:11:34:16:4e:06:41:6f:db:24:
85:82:84:96:ed:32:42:e1:8a:8b:a7:b7:08:8b:03:
57:a8:4f:62:65:84:47:56:6f:c5:5b:84:13:96:6f:
53:04:1a:85:2b:ba:c4:1e:1a:50:de:50:f1:bc:f7:
df:40:bf:48:2b:6d:91:97:d0:d0:5f:fd:81:32:59:
b8:33:0d:25:83:ac:08:2c:4a:a9:0e:e0:3c:a1:91:
3d:3a:fd:66:e8:a8:81:62:1d:ab:42:f5:cc:e7:d3:
ce:45:4e:cb:c3:37:13:5b:c9:c7:da:aa:d9:27:6d:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C2:BD:9A:FE:F2:39:E4:7A:36:F4:06:ED:4F:FD:B8:F8:A1:B6:70
X509v3 Authority Key Identifier:
keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:95:8a:d3:8d:ff:d3:84:5d:d2:58:e7:1f:39:ee:a2:b5:
b8:b5:be:e4:07:6c:99:5f:7c:96:74:b6:07:fa:ed:3b:4d:71:
fe:3a:18:d4:01:ae:eb:16:29:7e:c3:b4:4d:15:69:c9:60:69:
c6:c9:dc:84:39:d5:25:86:82:90:7c:0b:dd:5f:35:eb:79:12:
f5:d6:67:30:a1:66:b8:26:4c:2a:f6:01:9f:64:d5:d4:22:65:
f9:2f:8f:af:f6:ed:a8:bf:3d:19:be:05:6d:aa:b7:c6:9c:b9:
02:e7:98:3f:db:27:b0:16:17:aa:03:9b:f7:fa:b7:47:b7:87:
c5:36:12:c3:47:30:1e:1e:e0:3d:c0:cc:cf:7b:54:92:d8:8f:
b3:40:2b:bb:e6:09:b5:0d:e2:04:a7:e9:d5:04:2b:47:a7:8e:
59:a0:06:3b:46:97:33:3c:fc:75:4f:b7:60:af:32:80:f7:08:
68:8a:6b:83:51:aa:3f:4c:b7:5c:20:13:cd:2f:ac:df:32:f4:
55:4f:ae:6a:82:93:57:e0:e7:e2:27:cc:ee:73:b1:96:60:37:
c3:0d:d5:4e:17:bd:63:44:f7:1e:8f:3d:09:ac:71:f1:e2:4f:
2c:23:8e:44:08:1b:00:e6:ab:5c:dd:26:b6:6b:d0:b2:08:60:
1a:4d:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:33 2026 by rpki-client