Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: c36DfD4NjUbWcDR52jzOzWtO9zJiFWPN3XVKq+5+xE0=
Subject key identifier: 9F:0A:A7:FC:E9:1D:AE:93:AD:BA:DA:A9:5F:80:9C:F5:95:17:5B:4B
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 683C7AD4103191FE24D443F429781A9C6AF6EE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 0387
Signing time: Sun 29 Mar 2026 05:37:01 +0000
Manifest this update: Sun 29 Mar 2026 05:32:01 +0000
Manifest next update: Mon 30 Mar 2026 08:55:01 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: EoDF7pmeIt5qL0Bcg12o0VY8r1C7OeHXSkHgvRmSyMQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3c:7a:d4:10:31:91:fe:24:d4:43:f4:29:78:1a:9c:6a:f6:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Mar 29 05:32:01 2026 GMT
Not After : Mar 30 08:55:01 2026 GMT
Subject: CN=9F0AA7FCE91DAE93ADBADAA95F809CF595175B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:1b:3e:cb:cb:0a:13:54:dd:5f:36:63:ee:
93:90:6c:a3:bf:96:b1:fa:41:ce:d5:b2:ac:57:48:
fa:b0:a1:13:14:71:71:2a:ba:86:b5:9a:a2:c5:a4:
f5:18:0d:e4:22:b7:e2:33:69:28:61:a8:79:c9:e7:
cd:55:5a:73:d8:a4:67:16:3a:c3:47:46:d6:89:3d:
12:ac:56:5b:5c:03:3e:89:49:34:db:ec:64:78:bb:
d7:c8:6f:75:b7:00:d9:17:b0:13:93:69:84:02:cc:
6a:da:a7:8c:32:2b:c4:6f:23:9d:04:b9:07:17:57:
fc:ed:be:2f:65:f8:5d:86:a1:4f:ba:85:df:04:a8:
fc:1f:1e:66:ef:be:98:b8:49:74:7b:ae:40:22:f8:
c0:4c:25:29:c1:2f:76:8b:18:e2:c5:a0:52:46:c4:
0e:e3:47:ab:a5:bd:22:67:01:9b:c2:e2:e7:e2:2c:
cb:df:48:d7:a4:37:d8:39:33:63:62:15:e8:f0:33:
20:a7:b6:be:d6:8d:cc:6c:89:6d:e7:e4:f9:2f:2e:
44:3a:08:c5:05:d2:e2:5c:3c:98:64:dc:5e:c1:1c:
59:1f:c6:d4:d5:a9:2c:88:3d:f0:ce:99:33:07:ce:
d3:e8:83:b7:3e:eb:1c:d7:34:8c:9a:9b:6f:79:25:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0A:A7:FC:E9:1D:AE:93:AD:BA:DA:A9:5F:80:9C:F5:95:17:5B:4B
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:cb:8a:01:27:ec:a6:9c:d5:84:29:bf:46:e2:cc:21:a4:
72:7c:93:ba:6b:ef:61:47:e7:20:17:c0:18:d0:0e:62:4d:6b:
9d:8a:83:34:b1:0f:07:ed:5d:0e:4d:0f:3e:82:70:ed:1f:2a:
70:64:21:64:c9:2e:a4:eb:59:43:1b:5e:c8:e7:58:e1:f3:92:
30:9e:27:a7:91:b2:55:b3:d0:2d:da:09:52:4b:9a:1a:90:0f:
27:9c:2a:aa:a8:ec:1e:2a:85:41:14:a9:85:2c:21:94:82:2e:
aa:6f:1f:86:30:c2:1c:a3:a1:f2:47:fd:0b:03:92:b3:b1:5a:
17:c4:3d:52:fa:7c:53:46:c4:c3:5d:6f:bd:71:56:67:53:c3:
0d:44:55:b6:b4:1a:b7:9b:53:ce:35:3e:3c:b6:c0:3f:c8:24:
91:ed:25:9a:48:1a:3b:d1:7d:84:8d:38:cc:e8:9d:57:26:d6:
ef:df:4c:7c:a8:10:e2:df:d5:fe:a9:51:31:cf:98:1b:e8:13:
53:60:7d:9c:f6:5e:fe:05:46:f7:df:02:f7:47:9c:a9:09:8f:
26:81:0b:d1:23:5e:c7:45:4a:e7:32:aa:34:0d:ec:e4:2a:d5:
cc:49:f1:ac:e1:7d:a5:7f:3b:c8:0d:d4:fa:16:dc:39:70:be:
35:72:72:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:24 2026 by rpki-client