Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json)
Hash identifier: hd8xewJY4M3SVaGbXlUHor8mZoY/GabU6t6O2QfNg74=
Subject key identifier: F4:F1:4E:DA:C3:12:75:21:38:B3:1E:FC:1B:7F:6F:68:64:76:85:43
Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Certificate serial: 3CB12D5B6A33A34B19C1D155ED2ED4B945F4EAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
Manifest number: 8F
Signing time: Wed 25 Mar 2026 08:30:33 +0000
Manifest this update: Wed 25 Mar 2026 08:25:33 +0000
Manifest next update: Thu 26 Mar 2026 10:06:33 +0000
Files and hashes: 1: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: GepD9KkVhnwRot2M9M8PLFpS0e2bFuw1Rx9ZDPWDToI=)
2: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b1:2d:5b:6a:33:a3:4b:19:c1:d1:55:ed:2e:d4:b9:45:f4:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Validity
Not Before: Mar 25 08:25:33 2026 GMT
Not After : Mar 26 10:06:33 2026 GMT
Subject: CN=F4F14EDAC312752138B31EFC1B7F6F6864768543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:f6:61:94:2b:fe:a9:90:37:00:2b:dc:a7:
c7:db:59:3f:e1:1e:11:00:87:cf:f2:d4:6d:4f:d7:
84:f2:e3:87:fd:ce:76:72:74:c0:6d:31:f3:12:75:
6e:9f:a2:4f:0d:3d:3c:ce:d6:cd:c2:96:b2:4b:f0:
15:25:dd:b7:79:7c:55:58:b0:91:c4:ab:8c:f3:28:
3d:90:0e:29:ed:a4:1d:d9:38:8c:6d:8a:8d:60:ac:
3f:7d:b7:d6:e3:f6:10:d0:45:09:5c:77:05:7d:52:
11:0c:ba:88:63:88:0c:85:b2:17:94:90:4b:e9:e8:
41:21:26:a9:8f:ca:5a:49:f4:a0:b5:71:6a:0f:d0:
f0:b8:df:96:47:62:8a:7e:ef:72:a1:6e:2f:05:32:
96:05:94:c2:69:ea:7b:d9:05:f9:5b:b0:55:66:10:
0e:92:f9:27:6d:f7:7e:04:2b:e2:bb:8d:83:a2:bc:
bd:05:15:39:8b:11:c0:fc:fe:0a:21:ee:f9:9c:c2:
de:cf:ed:92:6e:df:5a:35:e0:62:73:ae:5c:7a:f2:
80:bd:41:ef:47:dc:bf:95:43:bd:2e:d5:ba:90:44:
22:2a:49:1d:98:fb:3d:5d:dd:48:2c:0f:80:94:64:
46:d0:c5:aa:cf:d8:7a:05:2f:77:e2:a0:98:4a:d6:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:4E:DA:C3:12:75:21:38:B3:1E:FC:1B:7F:6F:68:64:76:85:43
X509v3 Authority Key Identifier:
keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:d6:0f:66:fc:89:76:bd:9c:06:96:a4:9e:09:8f:38:75:
ad:bb:6f:f9:78:79:92:9b:67:ad:81:07:58:99:88:82:03:56:
aa:bf:0d:24:f8:17:bd:38:ea:33:dd:6f:fa:0b:d6:7d:47:cf:
c4:37:78:22:83:da:2d:ed:98:2b:ab:3a:02:e1:a5:f9:b1:46:
ef:d4:f3:8a:6e:e2:77:2f:4e:32:6f:e2:a1:2e:33:d7:28:b6:
98:e3:31:35:cd:4a:81:27:eb:75:59:ee:1f:66:d6:5e:48:68:
e5:0e:13:76:a5:a7:6e:38:7c:ad:11:a8:5c:60:28:92:9c:11:
67:77:33:c5:02:17:cf:38:2a:04:a6:4f:48:34:6f:9f:29:c7:
62:ef:ed:5b:6a:8a:a7:6b:11:f4:5d:97:8f:0d:79:06:ae:b3:
f6:a1:46:30:65:a1:21:54:ef:17:88:05:fd:8c:52:ce:cc:d0:
5a:e6:72:72:67:a5:0e:4d:8f:8f:ba:9e:dd:a9:52:8f:c0:3e:
dc:b9:db:06:25:75:fa:df:b9:62:d1:b3:f8:dc:9c:63:2b:99:
1d:3c:7f:eb:e0:ae:1f:4e:3a:00:52:56:94:10:9e:ee:e2:6d:
df:f7:f6:53:cf:a8:c7:f1:77:2d:b8:92:80:09:66:c9:bd:5a:
94:f8:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:33:08 2026 by rpki-client