
$ rpki-client -vvvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json)
Hash identifier: SsU3OZXZSl5rckMwY2qEeBZEkPEh/0abmIIWVuDCzmE=
Subject key identifier: FE:09:D2:81:3A:A7:1F:8C:3C:AB:4A:C7:00:C2:B2:14:2F:A4:1E:46
Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Certificate serial: 15FAB01B5F5D41F6ACE1926EF542084A1D071C46
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
Manifest number: 011C
Signing time: Thu 17 Sep 2026 20:29:56 +0000
Manifest this update: Thu 17 Sep 2026 20:24:56 +0000
Manifest next update: Fri 18 Sep 2026 22:57:56 +0000
Files and hashes: 1: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: /In1A3ELi2HSuXMQbVP3vOk/Kj7ed6/r7yzcRnRcl3I=)
2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=)
3: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fa:b0:1b:5f:5d:41:f6:ac:e1:92:6e:f5:42:08:4a:1d:07:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Validity
Not Before: Sep 17 20:24:56 2026 GMT
Not After : Sep 18 22:57:56 2026 GMT
Subject: CN=FE09D2813AA71F8C3CAB4AC700C2B2142FA41E46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:8b:c9:98:22:fd:3e:dc:b8:30:55:21:d2:
3e:7d:a7:af:0c:ab:46:8e:1e:01:f7:fb:51:09:53:
52:56:a3:60:89:15:dc:ab:bb:da:62:da:ec:e8:db:
de:a2:16:f3:be:eb:58:e5:05:81:e7:1b:9b:4d:bd:
88:83:25:86:92:fe:1a:14:52:a2:ff:f3:9d:eb:2e:
6d:f2:f7:c4:6b:cf:6b:36:a5:5d:b3:ab:50:64:f7:
6f:c7:25:e3:37:cf:6d:3d:56:62:12:24:9a:8c:89:
1c:f5:3c:24:79:e4:ed:af:1e:e2:fe:59:02:89:4f:
93:37:56:78:cc:cb:5c:0a:d9:07:58:5b:91:d9:56:
84:ae:7b:0e:ea:d4:74:a0:12:da:17:9c:7d:ec:e8:
73:98:ea:8e:2e:19:3c:8d:e7:e3:d8:b5:aa:d6:2b:
00:a6:ab:49:43:50:95:17:09:ed:60:89:d7:56:b7:
a8:dd:b1:ff:75:eb:7b:6f:a7:77:8a:75:b5:8a:5a:
f9:7a:24:e2:0b:1d:68:e8:cc:c1:b1:b9:cc:b9:1f:
69:1a:12:03:22:37:5c:26:fb:db:8f:cc:fe:6a:96:
77:38:89:aa:dd:f5:37:99:16:7f:ca:0c:ce:74:9e:
c3:62:f6:73:89:b0:14:04:db:01:29:d4:af:c3:25:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:D2:81:3A:A7:1F:8C:3C:AB:4A:C7:00:C2:B2:14:2F:A4:1E:46
X509v3 Authority Key Identifier:
keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:16:8a:9f:79:10:7e:be:f1:f6:d8:5b:fe:1c:03:a8:fa:d6:
63:d5:88:9f:51:24:fc:42:b4:a1:bd:c7:43:be:ff:83:c4:ee:
b9:da:20:36:bc:b0:24:34:a7:42:ea:e5:7a:ec:5a:03:5e:eb:
9a:b3:d2:1f:af:6e:17:a6:6d:10:ce:a6:20:48:2d:16:32:d5:
86:af:74:e7:c8:16:08:80:15:90:3f:e8:41:34:99:3f:44:87:
f0:d8:ec:7f:fa:b0:aa:6b:9a:fc:dd:ca:54:ad:cc:79:5e:40:
29:b3:33:13:c7:85:9e:8c:f7:f6:5d:43:ef:aa:39:cf:35:80:
dd:4d:dc:52:47:ab:40:57:06:c9:fc:8d:0b:a7:6a:ac:a7:e5:
d4:de:d6:0d:a8:91:b6:fa:3c:20:88:67:13:3c:e8:aa:12:1c:
95:fe:ce:f4:bd:0b:1b:0c:b6:d3:96:1f:e8:8b:60:a0:62:be:
7c:6b:82:a4:86:a7:af:49:16:d9:f1:a7:eb:02:58:1d:dd:8a:
73:70:20:a3:99:84:ec:bd:ec:fb:d2:7b:e4:3f:e7:a0:79:02:
97:d0:a3:94:52:21:72:f0:6c:ba:13:74:58:c6:22:5b:1a:be:
ec:a5:91:74:a0:12:22:7f:b5:81:b2:9d:14:2c:3b:0f:9f:db:
fe:f8:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:39:28 2026 by rpki-client