Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json)
Hash identifier: 8q3zod41KAb0fKBE32SJOJJz9ZPMWeU3depKLvmyNOE=
Subject key identifier: 36:E3:81:F0:16:82:ED:D9:72:DA:D7:2C:88:87:02:52:AE:96:2C:B8
Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Certificate serial: 4628BA130624D420864524D2FE9E7CBA1C77B42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
Manifest number: DF
Signing time: Tue 12 May 2026 20:59:46 +0000
Manifest this update: Tue 12 May 2026 20:54:46 +0000
Manifest next update: Thu 14 May 2026 00:29:46 +0000
Files and hashes: 1: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: 0iUXAETYpDMPZRGf4TQQv3dAm+UlHDVB3a+WnIzUJlk=)
2: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:28:ba:13:06:24:d4:20:86:45:24:d2:fe:9e:7c:ba:1c:77:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Validity
Not Before: May 12 20:54:46 2026 GMT
Not After : May 14 00:29:46 2026 GMT
Subject: CN=36E381F01682EDD972DAD72C88870252AE962CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:c3:1a:33:92:69:25:8f:f6:38:3b:cc:5a:
9f:5b:47:8c:c2:90:d9:c0:d5:50:99:a0:e0:a2:de:
d3:0f:fb:cd:70:7d:6b:14:e0:58:91:49:c7:bd:2e:
cb:89:96:62:e6:23:f7:9c:b6:75:1a:30:e5:70:7d:
fe:30:1a:9f:29:3a:31:08:36:5d:96:4e:70:62:8b:
ca:8d:4a:b3:ab:49:8c:0f:57:8d:30:5b:15:34:af:
3e:ed:44:23:d8:15:f4:fe:e5:99:0b:f2:2a:9e:7e:
0d:2b:d5:74:e1:5e:8e:68:99:d5:c8:c6:b8:27:de:
17:09:be:62:e5:8a:73:ec:1c:33:2c:ac:6c:f5:21:
8e:47:9b:4a:db:24:6f:98:3b:24:f8:9f:02:2d:3d:
95:f1:e5:ae:0a:30:db:1e:2c:82:31:df:c4:1e:36:
f2:76:6e:22:73:cc:d6:42:fa:0b:6c:72:bd:d7:51:
0b:1f:2a:9b:8a:7d:b7:d4:e2:13:62:1f:3b:d7:6f:
60:21:92:7f:d4:d7:1e:53:d3:c2:99:c0:7a:33:6d:
68:04:a5:03:63:74:fa:cb:dd:d5:62:ae:d9:7e:dd:
bb:f7:e8:9f:f3:da:0c:8a:98:29:06:9d:be:33:a6:
35:5e:c4:c6:b8:75:52:fe:0f:59:52:e3:cb:ca:4e:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E3:81:F0:16:82:ED:D9:72:DA:D7:2C:88:87:02:52:AE:96:2C:B8
X509v3 Authority Key Identifier:
keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e5:af:03:2e:09:20:b6:4f:a7:7b:08:4e:17:b2:7a:99:aa:
76:1a:41:8b:87:94:65:1f:b6:39:20:a1:d0:d5:7d:75:f9:75:
0b:08:c8:65:3f:4f:20:8f:04:81:6c:3f:63:c7:89:41:1f:6f:
23:3c:55:f6:6a:03:87:d4:06:01:1b:3d:89:67:ef:b3:67:9b:
11:89:e6:e8:6c:dc:8e:e3:58:1a:4f:b4:e8:df:a5:20:19:9d:
80:9e:5a:f3:32:cd:13:57:24:6b:32:ad:b4:09:87:c8:72:86:
7f:05:59:9f:01:52:66:78:01:7c:b7:a3:f5:dd:8d:44:76:92:
d0:72:5a:5d:cb:46:ce:35:03:b4:89:34:cc:1a:fb:b1:c5:46:
da:92:b7:62:92:ae:70:d3:d7:2c:47:bc:83:f3:16:92:7b:37:
42:ef:6a:19:91:5a:0b:af:53:d7:39:ae:dd:90:39:63:fe:84:
b6:42:5e:85:49:e6:6c:e1:a4:55:17:4c:88:03:89:9f:98:d9:
12:72:8b:61:8c:e7:c4:82:60:20:41:66:36:0a:fa:e2:48:16:
ef:9b:bb:07:b2:ab:22:ef:ef:af:ec:aa:23:66:12:7c:09:1f:
89:bd:ab:77:a8:f5:2d:0c:8b:f7:6a:b7:d9:e4:e8:f0:92:99:
07:e0:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:23:14 2026 by rpki-client