Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier: lmoDxdLkwP/NLJrjy6vAE3YhuyQgOZO+KaUc93yM/M8=
Subject key identifier: 8B:35:DF:E9:FA:56:F9:ED:05:76:6E:7E:34:23:0E:41:4C:BC:E4:E4
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer: /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial: 43266AF0897283B17869134101263BD1944AA7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number: CA
Signing time: Sat 13 Jun 2026 05:15:24 +0000
Manifest this update: Sat 13 Jun 2026 05:10:24 +0000
Manifest next update: Sun 14 Jun 2026 07:29:24 +0000
Files and hashes: 1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: QbjxuaPWps6tsI3EW3FGxhJzqpahQ9263fgPy4P/H9o=)
2: AS199310.asa (hash: LBWamUCbK1O722rXmKftUcs7o+T5UF9gLBEoV0j8QV4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:26:6a:f0:89:72:83:b1:78:69:13:41:01:26:3b:d1:94:4a:a7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Validity
Not Before: Jun 13 05:10:24 2026 GMT
Not After : Jun 14 07:29:24 2026 GMT
Subject: CN=8B35DFE9FA56F9ED05766E7E34230E414CBCE4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:94:8a:2c:39:1a:61:ea:92:57:49:64:5e:
ae:00:0d:76:e4:17:f7:7c:85:74:57:e3:41:e5:69:
8b:cb:57:74:47:73:45:7f:06:1e:29:f8:c3:68:a3:
97:15:2e:7b:44:3b:22:76:c9:d0:42:8e:34:66:ad:
b0:7b:4d:dd:e5:58:99:81:08:bf:4a:38:f6:a5:fa:
7b:53:3b:bc:e1:38:48:c0:e0:d7:c0:f5:9e:a6:2d:
31:69:9b:78:16:6b:78:7d:44:3a:da:b9:d8:e2:fe:
30:9c:a7:40:92:e3:96:87:f1:81:58:65:c7:21:37:
c7:63:34:2e:4e:5f:e9:95:c0:3e:20:c7:45:da:c5:
cb:02:4b:cc:41:7d:e2:dc:16:01:11:7c:d6:a6:3c:
8f:ff:c7:f7:76:0c:45:b5:22:58:8f:88:e8:c4:f4:
b1:3e:59:dc:19:87:96:80:48:6e:45:0b:e9:1f:e8:
42:b5:5c:31:c2:9c:ad:89:d8:0a:e7:e2:50:8e:3f:
b5:95:30:3b:b1:7a:d0:c4:fc:2b:9e:61:3c:90:b1:
2d:94:9a:1e:ac:1c:c0:8c:9b:82:db:c9:ff:72:8d:
5c:be:31:a1:ea:e7:3d:6b:c3:93:7d:71:6d:3e:72:
82:03:cc:89:f1:94:b0:04:c6:5f:43:be:52:41:07:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:DF:E9:FA:56:F9:ED:05:76:6E:7E:34:23:0E:41:4C:BC:E4:E4
X509v3 Authority Key Identifier:
keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:91:1a:97:77:98:2a:93:75:ca:26:da:ac:72:a7:9b:b7:fd:
84:7d:f8:a1:77:ff:88:f8:4f:49:cf:07:96:c6:52:1a:50:f6:
0f:a3:2e:1d:97:a3:8c:44:05:61:e9:cd:7e:62:df:e1:bf:c8:
98:c1:c8:13:eb:81:1f:c7:3b:68:fc:8c:4c:8d:2a:c6:37:73:
e6:a9:00:70:5a:8b:15:fb:a0:fe:24:f4:d3:97:1d:43:e8:34:
b5:4b:5f:a2:27:ea:54:7b:41:7d:77:a0:13:e9:76:ac:cb:80:
52:59:b1:21:25:5a:1c:30:e4:0e:a0:38:75:72:58:1d:0d:08:
f0:96:da:6c:cb:c2:ed:8f:e1:de:6c:09:8b:0d:6f:f4:b6:a1:
5b:93:e0:2a:2c:68:0d:1f:73:59:07:d6:ac:3c:36:4f:42:43:
7a:2f:83:4b:ff:50:7d:57:68:60:2d:00:7a:9c:db:b5:cb:c5:
fb:b6:c2:d7:15:0e:55:14:28:c7:7d:a3:bb:de:d0:2d:ad:35:
1c:d3:a7:4a:d1:00:b7:6e:9a:18:79:64:be:11:75:73:3f:5e:
e6:c6:36:d2:a8:2a:31:47:41:06:91:ee:47:a2:35:60:21:7a:
57:0e:d3:c8:1d:01:b7:fb:fa:2e:bd:ec:1a:97:08:ae:7e:32:
f1:c3:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:40 2026 by rpki-client