Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: wj98KXZMwugk/8rpS7h+vCHZN2VoCsliKj/RfVnBhhw=
Subject key identifier: 15:A1:1D:88:7D:35:BA:ED:F9:AD:D0:FA:BB:77:1F:16:3D:B8:E1:21
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 381DBB954B71C1E76EFBB5C09DA2E89468689FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 03A6
Signing time: Thu 16 Apr 2026 12:26:53 +0000
Manifest this update: Thu 16 Apr 2026 12:21:53 +0000
Manifest next update: Fri 17 Apr 2026 15:23:53 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: QauFqTQ6NLS6Ob+v6LWvcMhunIAI8ouS2nxior3lnyo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1d:bb:95:4b:71:c1:e7:6e:fb:b5:c0:9d:a2:e8:94:68:68:9f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Apr 16 12:21:53 2026 GMT
Not After : Apr 17 15:23:53 2026 GMT
Subject: CN=15A11D887D35BAEDF9ADD0FABB771F163DB8E121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:99:ea:a0:f1:ed:46:32:85:af:4b:0f:49:
ac:ee:fd:8c:87:34:dd:f0:3d:e6:bb:4e:98:a7:70:
38:66:6c:33:77:97:23:0f:aa:ec:e7:c4:cd:04:74:
7a:23:1b:90:ff:b3:e0:75:5d:a8:c7:38:83:c9:84:
14:57:99:1e:04:48:54:c2:5a:6a:71:9a:f2:56:db:
2f:5a:52:71:40:cd:f8:0d:6f:dc:7d:21:9b:ed:69:
25:0a:cd:b3:d6:51:45:88:88:5f:ff:9d:d1:c8:04:
7f:2f:23:e7:56:3b:50:b0:85:00:4a:d3:ae:4c:8a:
1f:8b:50:8b:c7:ff:0e:e3:3d:6d:9d:7a:43:14:70:
72:c3:a8:b7:45:82:82:a2:a8:31:c7:29:1c:c9:35:
88:5c:b2:38:d5:a0:f0:c0:9f:93:01:54:5f:67:36:
cf:24:c1:55:03:ad:9a:ca:fc:4e:8b:43:77:7e:d0:
2f:72:0f:92:ff:93:19:dc:d1:df:2f:ac:3e:05:cd:
37:28:37:bd:3d:68:dc:ba:bf:09:43:65:1a:77:c5:
b1:83:b4:eb:fe:39:b1:e1:6d:26:90:8d:c3:49:70:
bd:f5:c7:24:b6:d3:4a:d7:fd:1d:cc:e1:59:60:b5:
b5:e8:88:c2:99:4d:06:9c:ed:7a:4a:a3:77:ac:a9:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:1D:88:7D:35:BA:ED:F9:AD:D0:FA:BB:77:1F:16:3D:B8:E1:21
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:2c:00:4b:85:51:b2:79:cb:7f:90:e7:bd:19:96:02:42:
80:03:ad:36:99:bb:de:97:e5:49:86:cb:d0:40:35:6b:41:5d:
71:2b:56:46:bd:4b:c1:29:52:b5:3e:55:0d:33:d4:9a:70:50:
9a:19:1e:76:9c:eb:a6:12:43:18:d4:73:e7:6a:2b:14:e6:f5:
36:e1:e4:e0:75:64:19:05:c4:5e:2e:ae:4b:b0:60:f4:35:73:
eb:4c:68:de:9f:08:8f:d1:c0:49:02:61:e5:b3:bb:2b:4d:ed:
00:a5:78:dc:7d:9a:41:38:00:8b:90:82:3c:0c:bf:ab:a2:d2:
86:49:cd:70:42:2e:2e:8a:d8:d0:f3:43:05:b4:15:d1:40:dc:
60:1d:0a:33:1a:a5:bd:d5:f1:9d:9c:0f:84:2f:73:75:6c:dc:
09:51:6a:22:31:d2:61:95:52:e6:cf:06:c9:6a:8e:1d:3f:a1:
bc:9c:47:0d:01:e1:54:d9:fd:2e:df:ea:8d:fe:f5:13:82:c8:
f5:de:99:73:98:3d:97:df:fe:f1:08:6d:6f:83:7b:4b:3d:de:
c6:6d:a9:7c:78:ec:6a:4d:1e:50:0e:8e:0e:06:97:2d:43:0a:
b6:a3:82:ff:35:c4:a7:60:74:b4:34:27:92:c7:24:ea:c8:0c:
f1:81:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:33 2026 by rpki-client