Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier: 6iu7rkG2znH8M1IKfaX+SWRM+3iaqUhWOcGodneRJ+o=
Subject key identifier: 12:7F:53:15:0C:3F:38:50:4A:AE:93:5C:CE:1D:81:3C:97:49:B5:D4
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer: /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial: 69D82BA5B02EC4545889714D2E6091EE31EE7E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number: 3B
Signing time: Sun 01 Mar 2026 02:58:04 +0000
Manifest this update: Sun 01 Mar 2026 02:53:04 +0000
Manifest next update: Mon 02 Mar 2026 04:15:04 +0000
Files and hashes: 1: AS199310.asa (hash: 25JzYDDIlJ0mwy3/bYnCze9Fju0l3kfBOY4vH1sKmnQ=)
2: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: y3KwzhfRw2fdPtWRmshfgq16QrKC8mziqevWq7TZOjs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d8:2b:a5:b0:2e:c4:54:58:89:71:4d:2e:60:91:ee:31:ee:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Validity
Not Before: Mar 1 02:53:04 2026 GMT
Not After : Mar 2 04:15:04 2026 GMT
Subject: CN=127F53150C3F38504AAE935CCE1D813C9749B5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:b3:5d:76:28:f0:a7:67:d9:d3:ce:c0:32:
19:be:0b:cb:a9:52:82:cc:99:0c:0a:36:d0:b2:11:
0d:90:e9:dd:78:e2:a0:4c:d1:05:dd:79:45:d3:0e:
27:40:ea:2c:45:94:76:95:19:0d:bb:9c:0d:e2:5e:
7d:9a:69:3b:ff:18:70:b3:6e:9e:ea:4f:77:7a:e6:
a1:4c:b6:d9:14:2c:7e:6a:7f:b8:2b:9c:75:6b:f2:
92:99:99:2b:0a:f0:16:e6:25:a6:e3:c3:f7:3d:c7:
7e:3a:67:69:44:96:8c:33:79:dc:8e:06:e7:5e:24:
49:7b:05:18:90:ed:3c:4b:e3:8c:ab:a2:a0:57:9d:
37:92:51:3a:f5:ba:d7:a5:e3:c4:9c:a4:09:62:77:
33:e0:75:3c:86:7f:78:de:c8:37:23:5f:76:79:48:
82:3a:2b:2e:36:33:e1:21:54:ed:50:ee:22:13:02:
92:11:4e:1a:b8:43:d0:8c:3f:4a:27:60:48:f5:9a:
dd:15:41:f9:75:16:3a:7f:2c:f7:07:81:d1:4f:de:
5e:9c:d5:27:77:3e:1f:56:ff:49:a9:ba:4f:ff:27:
8c:5c:ae:fb:2f:68:17:b5:b3:21:88:00:3f:be:92:
d6:9c:92:2a:89:b2:98:4d:9c:4a:92:a8:23:ff:ad:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:53:15:0C:3F:38:50:4A:AE:93:5C:CE:1D:81:3C:97:49:B5:D4
X509v3 Authority Key Identifier:
keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d0:19:66:40:c4:7e:cd:88:c8:14:a6:46:05:4b:34:ec:b3:
1b:c8:4f:1f:5a:da:ea:a2:75:3a:46:2a:6d:2b:c0:24:10:d7:
99:4b:97:ac:8f:99:7b:68:80:85:9e:3c:d4:52:93:e9:9f:2a:
b9:22:e0:a3:4e:94:c2:8b:cc:63:b8:7b:1c:3b:de:a0:21:26:
ad:37:22:83:5d:ad:78:37:d8:c0:fe:24:47:88:5f:15:ef:9f:
41:de:7c:8b:ba:ca:b3:ce:75:cb:67:04:2d:81:66:91:b9:45:
6a:57:7d:3c:11:d8:cc:d4:48:9a:e9:22:f7:13:84:c0:e8:4a:
90:c7:d8:ef:68:6b:8b:9b:43:6f:e8:06:e8:f5:be:24:ac:f7:
d1:56:ea:5f:5d:1d:df:ba:4e:e1:2c:77:18:29:a6:b6:3f:27:
dc:1b:4b:0b:54:bf:95:e9:4f:f2:a6:dc:4a:22:cd:25:a1:d4:
09:bd:da:42:e5:91:cb:fb:b1:47:31:1c:7c:1e:ab:cf:73:93:
8d:d3:33:85:35:74:a7:b0:df:ae:8d:54:ca:82:f5:e5:c6:99:
8c:2e:93:2a:4a:90:fb:e1:d9:91:ba:b4:ff:29:e0:f6:56:17:
24:86:bc:ee:98:21:ae:d9:d7:0e:20:ce:0a:09:f0:8a:88:b9:
3f:05:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:02 2026 by rpki-client