Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: uN1+eoAcgGYCEokUmHDFqQe3MlmqPBV8cGnXM61Xli0=
Subject key identifier: D7:7B:4A:9E:52:CD:6E:63:A4:69:9B:E1:22:12:E2:EB:E4:06:DE:D2
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 5293F382726C5C429B6A07D31F0BED344E6A4977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 036E
Signing time: Wed 25 Mar 2026 13:36:20 +0000
Manifest this update: Wed 25 Mar 2026 13:31:20 +0000
Manifest next update: Thu 26 Mar 2026 16:39:20 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: T2LO59oDf5XAAzF8UsqF/yBhd8bB3GA1YLXIERLYjlk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 16:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:93:f3:82:72:6c:5c:42:9b:6a:07:d3:1f:0b:ed:34:4e:6a:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Mar 25 13:31:20 2026 GMT
Not After : Mar 26 16:39:20 2026 GMT
Subject: CN=D77B4A9E52CD6E63A4699BE12212E2EBE406DED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:52:c6:0b:1e:0b:56:df:72:f4:2c:20:90:
db:e7:4c:3d:9b:55:7c:4e:99:28:2c:98:01:9a:a0:
ca:67:2b:cf:03:82:93:d6:d9:a9:81:85:c7:b8:01:
5f:a8:be:b4:df:bf:2a:22:ba:09:31:90:b8:e6:31:
45:80:41:63:8e:a7:d5:f9:46:84:c3:b6:4d:6b:51:
6d:fa:20:7b:ae:a4:ff:3b:12:a8:c1:7c:aa:68:51:
0e:bc:59:10:14:30:a8:a7:de:15:e4:65:87:ce:97:
90:e6:85:24:41:58:7b:f9:fb:2a:5f:25:46:1f:3c:
46:c3:7a:7e:bf:83:21:9e:87:88:bc:2f:5d:a8:a0:
ca:4c:ce:b7:ac:e8:c8:11:0d:02:bd:55:86:88:e0:
7d:95:2a:7e:4f:e7:3b:6e:f8:11:f9:5c:94:29:7b:
c0:81:01:74:53:31:3a:6f:e9:97:99:95:17:de:d8:
8e:64:12:78:74:b6:19:7f:dc:08:13:83:99:d6:91:
7c:d0:38:e5:c8:df:69:07:75:e0:f7:f1:e5:ad:cf:
9b:ee:82:ed:df:78:6b:ca:5b:c2:5c:4d:6d:c9:b7:
93:89:5c:90:ad:37:3d:f2:48:c6:01:01:27:d1:35:
25:74:1c:9f:96:a2:d1:d4:7c:bc:1f:2b:56:c8:3c:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:4A:9E:52:CD:6E:63:A4:69:9B:E1:22:12:E2:EB:E4:06:DE:D2
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1d:36:09:c6:ff:e5:f3:4d:e2:61:3c:eb:e7:73:79:4a:c1:
a9:6d:ba:b1:57:96:b1:8c:1c:80:10:29:28:fb:71:02:e1:ec:
63:84:17:79:d9:c2:a4:b1:bd:8b:bc:5e:93:4b:7d:9a:1c:8c:
89:16:28:12:5f:21:71:ab:52:74:b3:af:ff:09:eb:a6:ea:9d:
75:52:b0:cc:9f:e9:e7:79:03:d8:56:87:64:ce:28:6d:b5:42:
1b:4a:7d:cc:e0:26:dd:c2:bb:15:1a:8f:e1:35:4e:17:8e:fc:
d5:ab:a1:93:b8:0d:40:da:fa:f8:b0:52:c8:1d:f2:49:8a:f8:
28:4e:dc:2d:1e:2a:a6:bb:fa:3a:61:76:d3:d7:66:da:70:db:
a1:a6:88:bb:a8:fd:6c:86:63:4b:8d:69:16:5f:6f:ac:d7:0e:
bd:fd:8b:57:d4:f7:75:c8:6b:dc:09:57:8e:14:b3:53:bd:7c:
fc:a6:02:36:a6:bb:1a:3d:d1:f3:bd:ba:05:e7:8f:f3:0c:60:
23:7a:b3:70:b3:22:7d:53:09:08:af:5e:e3:54:73:d3:72:17:
92:52:96:3a:10:a5:38:cc:5f:59:0b:bf:c6:ef:2c:74:a0:26:
55:a8:d8:32:89:74:72:8d:9e:e6:57:6f:85:d3:8d:56:7b:be:
1f:a8:ca:0b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUpPzgnJsXEKbagfTHwvtNE5qSXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZjY2YxOWQ3YjYxMDg4MGRiMjJkNDBlYzliYWUwMmIx
MjAxMzc2MzAeFw0yNjAzMjUxMzMxMjBaFw0yNjAzMjYxNjM5MjBaMDMxMTAvBgNV
BAMTKEQ3N0I0QTlFNTJDRDZFNjNBNDY5OUJFMTIyMTJFMkVCRTQwNkRFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHy1LGCx4LVt9y9CwgkNvnTD2b
VXxOmSgsmAGaoMpnK88DgpPW2amBhce4AV+ovrTfvyoiugkxkLjmMUWAQWOOp9X5
RoTDtk1rUW36IHuupP87EqjBfKpoUQ68WRAUMKin3hXkZYfOl5DmhSRBWHv5+ypf
JUYfPEbDen6/gyGeh4i8L12ooMpMzres6MgRDQK9VYaI4H2VKn5P5ztu+BH5XJQp
e8CBAXRTMTpv6ZeZlRfe2I5kEnh0thl/3AgTg5nWkXzQOOXI32kHdeD38eWtz5vu
gu3feGvKW8JcTW3Jt5OJXJCtNz3ySMYBASfRNSV0HJ+WotHUfLwfK1bIPBf5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU13tKnlLNbmOkaZvhIhLi6+QG3tIwHwYDVR0j
BBgwFoAUZszxnXthCIDbItQOybrgKxIBN2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzIvNjZDQ0YxOUQ3QjYxMDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pzenhuWHRoQ0lEYkl0UU95YnJnS3hJ
Qk4yTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02
ZGI5LTQyNWItYWNhZS03ZTIwZmJlNmUxMjkvMi82NkNDRjE5RDdCNjEwODgwREIy
MkQ0MEVDOUJBRTAyQjEyMDEzNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjx02Ccb/5fNN4mE86+dz
eUrBqW26sVeWsYwcgBApKPtxAuHsY4QXednCpLG9i7xek0t9mhyMiRYoEl8hcatS
dLOv/wnrpuqddVKwzJ/p53kD2FaHZM4obbVCG0p9zOAm3cK7FRqP4TVOF4781auh
k7gNQNr6+LBSyB3ySYr4KE7cLR4qprv6OmF209dm2nDboaaIu6j9bIZjS41pFl9v
rNcOvf2LV9T3dchr3AlXjhSzU718/KYCNqa7Gj3R8726BeeP8wxgI3qzcLMifVMJ
CK9e41Rz03IXklKWOhClOMxfWQu/xu8sdKAmVajYMol0co2e5ldvhdONVnu+H6jK
Cw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:11 2026 by rpki-client