Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json)
Hash identifier: X2F6ij7c2h4vLpLfW09aVdcv3Q8AH0vm6LCr5px2uro=
Subject key identifier: 67:D7:8A:D6:CF:91:0E:07:35:82:92:0D:A1:84:DE:67:51:55:41:40
Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Certificate serial: 2576EE23F46365C05740CCB95E3DCEECC96070FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
Manifest number: 62
Signing time: Sat 28 Feb 2026 19:31:15 +0000
Manifest this update: Sat 28 Feb 2026 19:26:15 +0000
Manifest next update: Sun 01 Mar 2026 22:46:15 +0000
Files and hashes: 1: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: ykSVAOr9WAOm/5w59+/xNUdDrOPa57nxLfSYAM4AXuA=)
2: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 22:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:76:ee:23:f4:63:65:c0:57:40:cc:b9:5e:3d:ce:ec:c9:60:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Validity
Not Before: Feb 28 19:26:15 2026 GMT
Not After : Mar 1 22:46:15 2026 GMT
Subject: CN=67D78AD6CF910E073582920DA184DE6751554140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9a:2f:3c:86:ab:5f:f2:48:5b:02:1f:32:cf:
af:1c:ba:da:b8:1e:94:fd:ca:2f:ad:58:b9:bc:ca:
35:75:13:b7:50:33:91:ae:87:a9:f0:6e:5b:1d:3f:
0d:69:3b:f7:6c:ca:ea:7a:96:8f:31:22:fe:12:aa:
49:43:fc:5d:da:77:8e:c7:bf:5b:9f:d1:6f:47:8d:
6a:3f:b9:39:ca:17:0a:6c:11:26:32:6e:b1:62:5d:
7d:e0:d2:70:68:a4:90:f9:73:a5:8e:c1:bb:4c:9f:
41:d6:38:9e:ba:8e:ef:10:86:7f:ad:e0:4d:43:5f:
33:63:bc:e3:ea:14:71:38:1d:4c:d7:3c:99:a3:5b:
3f:fd:25:15:04:ea:43:c5:82:62:e8:8f:df:9f:8e:
d8:e9:a9:f2:63:a5:18:93:7b:41:c3:1f:26:08:56:
84:e9:b3:79:0b:bc:04:c4:9d:bc:2d:a2:30:08:df:
cc:6f:0b:19:b9:c2:39:be:03:de:c7:7e:b2:45:9e:
2d:d8:d0:36:70:16:a4:bd:88:89:9e:08:6f:19:1b:
e3:99:cc:97:19:87:c9:47:6f:ae:bc:4c:fb:55:93:
13:31:18:e1:d0:8e:e5:24:30:59:61:9a:ed:78:9e:
86:45:b6:02:d0:cb:cd:87:ea:b0:00:62:ea:3e:d2:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D7:8A:D6:CF:91:0E:07:35:82:92:0D:A1:84:DE:67:51:55:41:40
X509v3 Authority Key Identifier:
keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:32:9f:42:25:f2:88:0b:5e:f3:bd:32:d4:b5:80:31:bb:8b:
d3:55:7a:7e:01:b9:fa:39:04:b8:1d:6c:7f:91:a8:c7:b5:c9:
99:f8:49:8c:f1:4b:2e:0c:bc:c5:7e:4b:80:4b:9f:d1:c3:1c:
aa:3c:93:2b:8e:7c:fd:9c:37:18:34:8a:70:54:16:47:81:69:
9b:a9:7b:0b:2b:7d:12:7d:a1:19:2d:63:4c:d6:7f:1a:7e:73:
2f:2f:e1:25:04:db:d9:05:84:36:d9:e4:7e:0f:8a:d4:c8:10:
db:d0:40:35:08:b7:41:43:60:c9:ec:e3:1b:6d:8b:82:f7:30:
26:b3:d4:74:65:1c:91:d4:34:d3:8e:6b:5b:26:d4:3b:ee:35:
58:76:5b:12:03:6c:c5:03:1f:da:7b:3c:07:2b:2d:c0:a3:af:
43:30:eb:e5:ab:c3:3d:cb:e4:22:29:60:17:b8:8c:47:ef:e4:
74:c4:f3:c6:7e:99:f0:e3:33:ba:ff:51:e4:71:24:e7:9d:69:
f4:40:bd:d2:95:2f:c4:b3:97:5d:28:2e:3b:a3:e7:4f:ac:58:
f3:94:c6:8a:7a:87:c9:81:6f:e8:02:be:17:18:dd:db:52:89:
62:71:a8:0d:c7:3c:2a:b6:4b:46:f3:08:61:31:b3:47:34:3e:
d9:36:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:49 2026 by rpki-client