Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json)
Hash identifier: LfcCiBhU6r6GfmkFKPf1NsgRp1Ds7sFl1ve9VxmSobU=
Subject key identifier: 14:52:AD:4A:32:EC:23:C2:CA:DC:26:F2:B3:9A:25:C6:F9:1B:97:89
Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Certificate serial: 64EC71FF04C9C95F4BC862746765995AF686723C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
Manifest number: E4
Signing time: Thu 14 May 2026 17:44:52 +0000
Manifest this update: Thu 14 May 2026 17:39:52 +0000
Manifest next update: Fri 15 May 2026 21:26:52 +0000
Files and hashes: 1: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=)
2: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: 74AyRpG4jo4Im2UhCZav6+yHFIKKYZ0atOC4CyJUqks=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ec:71:ff:04:c9:c9:5f:4b:c8:62:74:67:65:99:5a:f6:86:72:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Validity
Not Before: May 14 17:39:52 2026 GMT
Not After : May 15 21:26:52 2026 GMT
Subject: CN=1452AD4A32EC23C2CADC26F2B39A25C6F91B9789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:0e:45:39:51:84:59:6a:90:76:31:5d:6f:
72:2c:7f:29:92:b0:2d:89:6a:9e:6f:22:79:f5:66:
52:54:71:d3:9b:74:8b:19:5d:14:4b:64:5e:c9:79:
04:7a:e7:73:6e:27:71:af:46:54:99:f5:21:29:e6:
95:6a:a0:bf:03:69:55:c7:9c:b4:09:0e:9d:a1:a9:
11:92:ad:66:95:24:d6:a8:6f:95:4e:fb:91:e7:73:
5d:63:ee:81:a7:0a:90:1e:dc:fa:47:44:94:e5:31:
aa:b0:a5:2b:04:2c:44:52:e5:a4:81:d7:ed:a1:9f:
1f:04:4b:72:46:20:24:dc:85:af:81:ba:dd:f9:ef:
4d:c5:a7:d7:15:32:7b:a1:fe:22:1e:5c:1c:4b:66:
1e:00:87:d9:97:ca:6a:8b:10:01:13:77:f1:e9:f8:
7a:52:8e:72:73:cc:aa:f6:81:67:59:2d:0b:1e:79:
e8:c7:24:74:f2:c1:76:f7:02:94:b5:26:7d:e2:db:
87:a0:60:f6:cf:86:2f:20:59:81:b3:2c:85:7d:2b:
a1:d0:11:9d:db:c4:24:ed:79:bd:f8:22:eb:cc:36:
b5:c4:58:04:0a:b7:82:90:42:8a:fb:2f:37:de:89:
86:14:90:c7:2b:de:c3:c5:7c:be:55:75:24:30:01:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:AD:4A:32:EC:23:C2:CA:DC:26:F2:B3:9A:25:C6:F9:1B:97:89
X509v3 Authority Key Identifier:
keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c4:b2:32:b8:2d:fd:f1:7c:df:72:4a:c1:bb:02:8a:dc:11:
09:44:17:23:f1:d4:43:56:c0:2b:5f:39:a4:8a:87:3e:aa:ae:
7d:b9:be:4d:a4:5b:3d:ae:99:68:53:a9:ac:2c:0f:eb:c1:f2:
22:6a:f2:e0:04:ba:9b:00:19:9b:29:89:ca:8c:ce:3a:ba:ad:
45:f9:ac:47:b3:e9:fc:19:36:3d:18:8b:2f:93:5b:6b:97:e5:
37:3e:9a:30:e7:f0:86:f7:80:c0:bd:86:e8:63:f9:3a:03:2c:
5d:35:d4:2e:2f:07:a4:aa:a8:38:9d:53:1c:0f:f8:77:c1:52:
d3:13:46:10:b7:83:09:ae:68:07:3f:84:c8:40:e1:e3:24:b2:
be:21:61:fb:dc:3f:57:0c:cd:ac:2a:77:30:8c:4b:85:d9:21:
e6:70:24:86:b0:d6:18:ae:43:c9:87:4d:25:92:1b:5b:94:27:
1a:d0:e8:0e:cb:fe:ca:38:ec:f1:89:1a:0a:d3:13:fa:31:a7:
b8:98:41:8e:84:d8:9a:bc:68:8a:75:d8:60:ef:56:c6:12:eb:
3c:43:bf:8c:e8:4c:5d:df:4c:d2:dd:d5:a4:01:2d:c5:a9:d0:
94:62:30:a4:5f:0e:33:67:22:e7:cf:75:45:50:96:76:ee:7d:
d2:b3:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:30 2026 by rpki-client