Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json)
Hash identifier: LlqsqLZzyZPK+bQAHg6SLdddfhMNLNIUfI5GPj2vDCs=
Subject key identifier: AB:7F:ED:DB:F5:18:F2:4B:DC:CB:B4:1D:38:F3:5A:0C:DC:3E:30:83
Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Certificate serial: 3659D9FE149075A40C9FC72650C85754C986B604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
Manifest number: B5
Signing time: Fri 17 Apr 2026 09:07:54 +0000
Manifest this update: Fri 17 Apr 2026 09:02:54 +0000
Manifest next update: Sat 18 Apr 2026 10:05:54 +0000
Files and hashes: 1: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=)
2: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: Y/VGHaqAlPvRTsjWyQFrompPj0j5jmlv1H2EC5NCAuM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:59:d9:fe:14:90:75:a4:0c:9f:c7:26:50:c8:57:54:c9:86:b6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b
Validity
Not Before: Apr 17 09:02:54 2026 GMT
Not After : Apr 18 10:05:54 2026 GMT
Subject: CN=AB7FEDDBF518F24BDCCBB41D38F35A0CDC3E3083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:8b:d8:f7:54:52:ba:72:e1:88:9b:11:88:
ce:46:9b:3c:5b:d0:8b:80:90:45:d8:be:b3:96:39:
64:55:ee:51:6b:bf:79:01:57:9b:59:cf:d7:8a:ad:
1f:16:f1:22:38:6e:a3:17:0c:95:70:eb:dd:66:38:
45:5c:a5:40:32:91:2e:ba:bb:69:b1:36:0b:a5:a8:
b5:b6:d9:3b:fc:72:da:16:b4:d1:c4:92:73:c7:4e:
9c:95:5b:9f:0c:25:ba:67:ad:e8:e0:e5:dd:32:d8:
6c:08:b8:27:9d:c9:df:ba:15:1c:60:92:fe:02:b4:
a8:cf:85:1a:8e:0b:37:a9:2a:c1:71:4c:8d:e1:c0:
0d:5b:60:11:1f:de:d1:2d:0e:53:a4:bb:4f:37:98:
aa:e9:22:9c:2a:cb:dc:77:dc:00:ba:24:c2:f0:93:
f7:bb:fd:a1:1b:f3:3a:14:b7:40:f1:8c:23:d8:68:
d7:03:1e:ef:7b:56:0d:10:93:6e:25:ef:a5:b1:cc:
28:2c:10:9d:c6:e4:f1:5c:1f:08:ad:2b:ea:69:d4:
33:09:96:a1:58:ab:84:0b:8f:aa:c9:18:f0:c6:36:
b2:32:44:a0:df:fc:47:bf:4e:7b:a7:5e:17:99:b5:
b2:60:fe:3a:37:3e:5f:9d:d2:ba:52:29:ee:06:c9:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7F:ED:DB:F5:18:F2:4B:DC:CB:B4:1D:38:F3:5A:0C:DC:3E:30:83
X509v3 Authority Key Identifier:
keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:03:83:63:fe:52:59:2b:89:2f:54:49:cc:78:a0:71:bb:2a:
ee:cd:f3:18:b4:86:e1:c8:b7:5c:b1:fe:4d:43:53:52:ec:03:
a8:74:49:f9:54:c6:3e:13:48:d7:ec:54:ce:02:5f:7b:e7:24:
c4:f5:97:52:39:72:75:73:8d:44:1f:f4:7b:1e:ba:82:40:27:
68:48:fb:c2:cb:62:60:b6:02:e8:23:c5:9d:f9:2a:bc:73:16:
3d:14:12:02:6c:5e:66:a4:13:e5:cc:40:a4:09:be:32:d0:4c:
df:eb:c8:77:3d:ca:3d:2e:98:b9:12:fa:ff:a9:31:18:f2:6e:
cd:27:75:bb:c6:44:03:e7:28:65:03:d2:1e:38:48:a4:2a:c9:
da:41:17:cb:2a:8a:85:2d:dd:25:1f:75:96:50:44:14:35:87:
6a:06:60:d9:19:44:5f:03:c0:d8:a1:21:b5:6d:c9:38:4e:9c:
1a:c9:fc:c0:4b:b5:3b:2c:b5:0f:d3:96:b4:24:6a:35:a8:c4:
b8:c5:ae:1d:88:fc:d0:81:ed:3a:9a:65:38:e0:ce:57:07:de:
f1:5e:08:79:c9:38:7c:cf:08:3a:03:f8:16:5a:1e:8e:49:1d:
2b:24:b4:46:7c:9c:41:df:71:28:dd:bd:ce:5a:57:60:d7:62:
c4:7b:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:26:33 2026 by rpki-client