Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json)
Hash identifier: ilqWyWnm323Ay4oXHxWnxVcEErDuJvEXR9iHuvvyVrc=
Subject key identifier: 30:2F:E5:3D:A0:40:9F:DB:8F:3B:AA:69:D6:60:32:6B:9D:EB:66:2C
Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Certificate serial: 1CD5C31F7C9EEDEC403E60C77D2F1E7942DE4E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
Manifest number: 95
Signing time: Sun 29 Mar 2026 07:06:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 08:09:52 +0000
Files and hashes: 1: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: ngnzS7F5z3O9qpvaLesvoc32nCuB1nhhG00JYr03wyQ=)
2: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d5:c3:1f:7c:9e:ed:ec:40:3e:60:c7:7d:2f:1e:79:42:de:4e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 08:09:52 2026 GMT
Subject: CN=302FE53DA0409FDB8F3BAA69D660326B9DEB662C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:eb:f2:fa:cc:9b:9c:06:9c:6a:f7:58:45:
e3:20:04:78:70:c3:c8:64:31:11:2a:0a:35:df:aa:
18:b6:d8:0f:b5:6a:6b:1a:f0:f9:c1:66:58:1e:a1:
79:13:d2:27:6f:2c:b4:4b:06:75:14:37:21:97:33:
4b:13:0d:8d:c8:42:c0:ec:af:4d:1a:33:ac:9b:29:
c8:38:83:c6:33:77:ca:bf:5a:a6:3f:6a:52:d5:57:
30:55:aa:a1:72:fe:02:5b:25:ec:af:e1:e0:22:56:
ed:da:f4:4f:c8:f6:f7:14:e7:41:df:3f:42:9e:d0:
76:ce:9d:17:a3:83:41:f1:84:2e:b7:3f:e5:03:b3:
c6:ed:cd:18:3e:a4:d6:57:50:49:7e:b4:b9:7f:7d:
f9:65:8c:d1:6b:78:d7:27:32:65:98:57:f1:37:ae:
69:60:02:46:cf:87:28:84:01:6c:84:c2:5a:ed:c9:
53:b6:fd:00:aa:79:b2:53:16:45:88:8d:54:32:ae:
36:4a:cf:16:13:5c:46:d3:31:6e:b0:07:58:e9:10:
0e:21:10:84:2f:9e:81:32:8f:a6:e9:48:39:fa:f2:
26:87:6d:95:d1:3d:02:99:40:a5:b8:53:92:36:b8:
15:25:f5:bf:cc:7b:c4:03:4f:6a:8e:7c:d8:9a:ce:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:E5:3D:A0:40:9F:DB:8F:3B:AA:69:D6:60:32:6B:9D:EB:66:2C
X509v3 Authority Key Identifier:
keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bf:be:86:8a:fa:b9:22:9d:6a:70:3d:f8:6d:b6:19:dd:d3:
0f:cc:1e:8b:ed:9b:4a:93:22:ac:22:9a:69:34:4d:b5:ea:18:
0b:f6:14:cc:f8:47:ef:08:2d:42:d9:f5:ab:a3:93:43:8c:91:
e8:ca:9a:87:81:6f:7d:f5:06:3e:da:cd:13:d6:49:c3:66:cd:
d7:4d:da:41:d0:8a:38:27:90:25:5b:13:a5:20:21:e3:17:46:
09:95:51:6e:fb:bc:e1:54:68:57:1a:c9:70:df:49:09:76:8e:
df:31:e2:cf:9f:a0:41:3d:c2:23:44:38:9a:68:18:5d:07:d2:
3b:e2:ea:d1:90:a6:aa:f6:11:16:08:4b:e8:19:a8:3d:f6:90:
02:55:fd:e8:17:d7:cf:11:18:45:b3:a2:04:c3:e1:7e:9a:e3:
27:4e:6b:b3:96:c6:1b:bc:65:dd:b0:d3:ed:50:68:58:bc:21:
b2:f6:a5:14:0b:56:36:58:0f:19:97:b2:f6:fc:aa:f7:40:95:
21:4e:fc:bb:c3:79:64:41:b3:e3:11:c3:0b:b1:4b:64:dc:b1:
53:ab:c0:2d:18:2c:fd:6e:d7:88:2f:c2:b0:88:76:97:f1:d1:
85:02:47:c2:da:6f:41:ac:8c:c0:1b:e0:84:9e:d7:25:d2:68:
e6:df:99:e4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHNXDH3ye7exAPmDHfS8eeULeThcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZkZDI3ZWFjMzZkZDIyOTljMjg4OWFhMzc2Zjk2M2Rh
ZTcyZjQyYjAeFw0yNjAzMjkwNzAxNTJaFw0yNjAzMzAwODA5NTJaMDMxMTAvBgNV
BAMTKDMwMkZFNTNEQTA0MDlGREI4RjNCQUE2OUQ2NjAzMjZCOURFQjY2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjZ+vy+sybnAacavdYReMgBHhw
w8hkMREqCjXfqhi22A+1amsa8PnBZlgeoXkT0idvLLRLBnUUNyGXM0sTDY3IQsDs
r00aM6ybKcg4g8Yzd8q/WqY/alLVVzBVqqFy/gJbJeyv4eAiVu3a9E/I9vcU50Hf
P0Ke0HbOnRejg0HxhC63P+UDs8btzRg+pNZXUEl+tLl/fflljNFreNcnMmWYV/E3
rmlgAkbPhyiEAWyEwlrtyVO2/QCqebJTFkWIjVQyrjZKzxYTXEbTMW6wB1jpEA4h
EIQvnoEyj6bpSDn68iaHbZXRPQKZQKW4U5I2uBUl9b/Me8QDT2qOfNiazrf3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMC/lPaBAn9uPO6pp1mAya53rZiwwHwYDVR0j
BBgwFoAUht0n6sNt0imcKImqN2+WPa5y9CswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzIvODZERDI3RUFDMzZERDIyOTlDMjg4OUFBMzc2Rjk2M0RBRTcyRjQyQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2h0MG42c050MGltY0tJbXFOMi1XUGE1
eTlDcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0z
YzJhLTQ5MzktOTVlOS0wMDc3YjgwYjRmMGUvMi84NkREMjdFQUMzNkREMjI5OUMy
ODg5QUEzNzZGOTYzREFFNzJGNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7++hor6uSKdanA9+G22
Gd3TD8wei+2bSpMirCKaaTRNteoYC/YUzPhH7wgtQtn1q6OTQ4yR6Mqah4FvffUG
PtrNE9ZJw2bN103aQdCKOCeQJVsTpSAh4xdGCZVRbvu84VRoVxrJcN9JCXaO3zHi
z5+gQT3CI0Q4mmgYXQfSO+Lq0ZCmqvYRFghL6BmoPfaQAlX96BfXzxEYRbOiBMPh
fprjJ05rs5bGG7xl3bDT7VBoWLwhsvalFAtWNlgPGZey9vyq90CVIU78u8N5ZEGz
4xHDC7FLZNyxU6vALRgs/W7XiC/CsIh2l/HRhQJHwtpvQayMwBvghJ7XJdJo5t+Z
5A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:43 2026 by rpki-client