
$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json)
Hash identifier: /3ZKE4ipAnfsuqCCXNEd1NjYaV0xaR0Op1vvBNyzuK4=
Subject key identifier: 0D:AA:47:99:83:7F:EA:10:BC:F8:E4:F5:4F:D4:E7:06:F2:B4:0A:49
Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Certificate serial: 72EFC726BA40420101848E39CD3A285874B0DE87
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
Manifest number: 20
Signing time: Fri 13 Mar 2026 18:44:04 +0000
Manifest this update: Fri 13 Mar 2026 18:39:04 +0000
Manifest next update: Sat 14 Mar 2026 18:53:04 +0000
Files and hashes: 1: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: RTQtCGk1WAcxiHVdadn/rZvZxQCwc9gOlM3O3JQb2co=)
2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=)
3: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ef:c7:26:ba:40:42:01:01:84:8e:39:cd:3a:28:58:74:b0:de:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Validity
Not Before: Mar 13 18:39:04 2026 GMT
Not After : Mar 14 18:53:04 2026 GMT
Subject: CN=0DAA4799837FEA10BCF8E4F54FD4E706F2B40A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:e4:df:ba:2f:f2:62:91:0d:39:d9:8e:31:
1a:56:15:fb:ef:f6:6d:89:5e:e0:18:07:37:3c:1c:
a0:f5:bf:60:32:16:8a:cb:a2:61:a4:74:3e:49:e8:
00:85:99:7c:d9:76:9b:19:94:1c:89:c3:61:3f:bb:
3b:77:11:e8:da:4f:36:7f:dc:a1:e3:04:7e:f7:d7:
61:9a:6f:fc:84:56:a8:ba:ba:4b:3c:cf:f2:e5:98:
0f:af:77:c3:e2:85:75:4d:f1:69:2b:e3:20:e3:17:
f5:25:34:4d:d2:62:b4:cd:e2:45:58:2b:dd:78:53:
6f:c6:e2:21:37:f7:a3:c4:dd:2e:69:f6:26:3e:aa:
bb:c7:fb:01:61:9b:cb:7f:f6:e5:c6:64:9e:07:34:
1b:ce:62:87:2b:16:8e:9f:61:9d:f7:97:04:82:55:
f9:39:ab:6a:3d:bc:9f:84:29:d1:35:43:44:80:8c:
09:0d:62:66:54:f5:1e:69:5a:43:42:f0:fd:03:04:
d5:3e:4f:3a:44:ad:4e:44:96:40:d2:45:97:ac:59:
06:da:14:54:cf:11:97:00:42:eb:24:70:fb:28:7d:
bc:b0:27:6e:79:9a:27:0f:c8:62:b8:95:5a:50:dc:
25:79:6b:bf:2f:83:9f:04:09:51:ba:e2:55:95:0f:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AA:47:99:83:7F:EA:10:BC:F8:E4:F5:4F:D4:E7:06:F2:B4:0A:49
X509v3 Authority Key Identifier:
keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:f5:06:fb:e9:e9:33:ab:54:62:76:55:13:36:4f:c7:dc:
d9:44:4a:fb:fd:c0:6a:82:94:7d:87:44:7f:13:c9:10:23:f1:
d0:b3:18:eb:c6:dc:dc:56:91:27:19:0d:06:1f:fd:2e:01:20:
5e:6f:b5:61:da:65:30:10:18:b1:b0:ac:50:db:1e:d7:23:64:
54:04:38:b2:a0:56:cb:39:71:28:7a:e1:72:7e:0d:30:b2:8f:
2b:32:9f:3e:ca:c8:7a:e6:45:60:6c:19:19:6c:2e:b0:32:57:
2c:19:d5:27:4f:a0:fb:b3:65:61:9f:f6:52:55:4c:15:22:39:
27:9e:35:bd:26:3a:4e:6f:ba:1c:4f:11:86:e0:b9:76:bc:e5:
4d:1f:e5:96:0c:dc:6a:5d:45:14:26:2b:ca:58:19:f8:69:9d:
4f:4d:d3:7a:c7:fd:06:13:ef:2a:7a:67:0f:35:09:d0:03:77:
e1:4d:25:ae:e4:f6:35:1c:4f:a5:7d:00:fd:25:51:78:56:e6:
d0:1e:3a:03:34:db:f2:3d:c9:72:92:f5:57:fa:30:91:dd:b2:
c1:ca:a8:e0:02:f3:bf:bf:83:c6:93:5c:a8:2c:43:fb:30:aa:
5a:8c:31:53:7a:5c:0d:e2:58:7f:6f:da:55:6b:a4:04:c4:9d:
26:0c:b3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:31:51 2026 by rpki-client