Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: sYU6MjBQfHyWUp2QXRb9qhV1BIfycLZbk+HLLXRko5g=
Subject key identifier: 19:8C:7B:94:B2:F4:2A:7A:ED:75:C3:34:BD:6B:6A:3F:91:F7:C2:90
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 019E1BC807F300803DB251024F2C727FB3C24E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 034E
Signing time: Sun 01 Mar 2026 22:27:34 +0000
Manifest this update: Sun 01 Mar 2026 22:22:34 +0000
Manifest next update: Mon 02 Mar 2026 22:47:34 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: 93xxEAUVTXDt6+J7KQTshjp+LswP7HwaiEcbUtcZsgQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:c8:07:f3:00:80:3d:b2:51:02:4f:2c:72:7f:b3:c2:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Mar 1 22:22:34 2026 GMT
Not After : Mar 2 22:47:34 2026 GMT
Subject: CN=198C7B94B2F42A7AED75C334BD6B6A3F91F7C290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:61:a0:e0:77:e1:8c:fb:19:5f:64:94:8b:
5b:c6:a6:f3:c2:b2:49:a2:cb:6b:b2:70:7a:78:d3:
09:66:62:14:86:ba:c0:56:48:4f:e5:3d:08:59:19:
6b:c8:35:8e:2a:a4:34:f0:af:9a:fb:ee:65:07:bb:
7e:e9:6c:f4:0b:91:c2:4d:3e:f5:77:23:fd:b7:52:
1b:3e:86:73:95:0d:d7:bc:c7:62:15:17:d4:c1:03:
ac:0f:1f:ac:71:01:6c:10:06:40:eb:b6:ba:db:cd:
e1:5f:0c:b6:40:8a:6d:bc:09:27:31:76:68:6d:3f:
7a:07:a6:38:4e:0d:f6:05:9d:1e:5a:08:09:8a:66:
79:d2:b2:3d:74:d5:f3:30:f7:53:11:19:fe:12:e7:
db:3f:84:1e:73:cf:9a:14:0e:9a:62:02:67:6c:cd:
c5:0c:e7:f9:be:0d:c9:d1:5e:cf:da:6b:ff:4c:eb:
e7:ca:04:54:ca:b1:4c:14:d0:70:cb:6e:0f:82:e0:
15:9f:5f:40:31:ce:d7:60:65:d7:5f:c5:d9:70:43:
64:f9:01:82:f8:20:35:7a:0b:a8:3a:a6:ff:7e:eb:
2f:d6:84:f2:43:ab:a9:8c:93:d3:dc:04:d3:d0:56:
7a:46:a0:8a:4f:87:d8:f6:0f:ad:26:6c:2c:38:a4:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:7B:94:B2:F4:2A:7A:ED:75:C3:34:BD:6B:6A:3F:91:F7:C2:90
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:54:23:f9:f1:60:e7:2c:12:ea:1d:1d:a3:ae:ea:e5:9e:b2:
e9:84:de:d2:45:db:e2:9a:d5:2f:60:6f:02:d6:a6:32:01:0e:
63:62:90:0a:d5:af:e2:81:df:c8:e9:f8:ca:5a:c4:cd:4c:ea:
82:f4:5e:26:96:ad:2b:22:2d:87:c3:0a:9f:d7:59:db:9b:60:
bf:80:d0:2c:2b:e8:43:3b:9b:2d:ed:c3:57:a9:1e:11:2f:3b:
45:e8:9c:b1:ac:33:96:94:39:61:df:34:3b:c3:d5:ca:4e:e2:
0d:06:21:8b:49:be:ff:a5:71:99:09:10:d4:32:2d:ec:79:f5:
71:84:29:dd:14:5c:37:84:de:aa:db:5a:4c:e1:2f:51:02:63:
e2:ce:ba:56:89:d5:dd:67:bb:7b:ab:4a:0e:1e:d3:30:6d:58:
10:73:71:94:0c:39:19:dd:2b:67:75:c3:a4:18:a8:1f:d8:06:
5f:e6:b9:69:50:9b:f9:87:a8:60:77:48:3e:9b:64:d3:67:0b:
1f:dc:9d:db:5c:0a:e0:7f:f1:de:21:c5:2f:33:d3:d6:f0:95:
c3:a7:8a:f9:87:4b:92:4a:dc:dd:09:59:1c:ef:7e:3a:61:b5:
6b:47:62:73:1c:23:45:c1:5a:46:16:cc:3c:87:dd:b7:7c:e9:
64:ce:cb:a5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAZ4byAfzAIA9slECTyxyf7PCTlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZjY2YxOWQ3YjYxMDg4MGRiMjJkNDBlYzliYWUwMmIx
MjAxMzc2MzAeFw0yNjAzMDEyMjIyMzRaFw0yNjAzMDIyMjQ3MzRaMDMxMTAvBgNV
BAMTKDE5OEM3Qjk0QjJGNDJBN0FFRDc1QzMzNEJENkI2QTNGOTFGN0MyOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QWGg4HfhjPsZX2SUi1vGpvPC
skmiy2uycHp40wlmYhSGusBWSE/lPQhZGWvINY4qpDTwr5r77mUHu37pbPQLkcJN
PvV3I/23Uhs+hnOVDde8x2IVF9TBA6wPH6xxAWwQBkDrtrrbzeFfDLZAim28CScx
dmhtP3oHpjhODfYFnR5aCAmKZnnSsj101fMw91MRGf4S59s/hB5zz5oUDppiAmds
zcUM5/m+DcnRXs/aa/9M6+fKBFTKsUwU0HDLbg+C4BWfX0AxztdgZddfxdlwQ2T5
AYL4IDV6C6g6pv9+6y/WhPJDq6mMk9PcBNPQVnpGoIpPh9j2D60mbCw4pB0PAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGYx7lLL0KnrtdcM0vWtqP5H3wpAwHwYDVR0j
BBgwFoAUZszxnXthCIDbItQOybrgKxIBN2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzIvNjZDQ0YxOUQ3QjYxMDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pzenhuWHRoQ0lEYkl0UU95YnJnS3hJ
Qk4yTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02
ZGI5LTQyNWItYWNhZS03ZTIwZmJlNmUxMjkvMi82NkNDRjE5RDdCNjEwODgwREIy
MkQ0MEVDOUJBRTAyQjEyMDEzNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFQj+fFg5ywS6h0do67q
5Z6y6YTe0kXb4prVL2BvAtamMgEOY2KQCtWv4oHfyOn4ylrEzUzqgvReJpatKyIt
h8MKn9dZ25tgv4DQLCvoQzubLe3DV6keES87ReicsawzlpQ5Yd80O8PVyk7iDQYh
i0m+/6VxmQkQ1DIt7Hn1cYQp3RRcN4TeqttaTOEvUQJj4s66VonV3We7e6tKDh7T
MG1YEHNxlAw5Gd0rZ3XDpBioH9gGX+a5aVCb+YeoYHdIPptk02cLH9yd21wK4H/x
3iHFLzPT1vCVw6eK+YdLkkrc3QlZHO9+OmG1a0dicxwjRcFaRhbMPIfdt3zpZM7L
pQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:35 2026 by rpki-client