
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json)
Hash identifier: 1Q0bG0fnuXY+ZL1YDm9GdRMOwdnuS0XYxyemb7Fbkss=
Subject key identifier: 4F:FE:E7:E7:21:B8:C2:32:06:41:CD:CE:43:98:D6:F9:25:85:14:DD
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial: 79F39639EC9E10BCD1C15578B936C87A59EEC902
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
Manifest number: 026B
Signing time: Wed 13 May 2026 00:12:38 +0000
Manifest this update: Wed 13 May 2026 00:07:38 +0000
Manifest next update: Thu 14 May 2026 00:31:38 +0000
Files and hashes: 1: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=)
2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: zSXJGTDfWqAB3xq7ij/PDBovagz7tLnwy7RAAzjzW4A=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f3:96:39:ec:9e:10:bc:d1:c1:55:78:b9:36:c8:7a:59:ee:c9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Validity
Not Before: May 13 00:07:38 2026 GMT
Not After : May 14 00:31:38 2026 GMT
Subject: CN=4FFEE7E721B8C2320641CDCE4398D6F9258514DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:a1:da:ac:a1:b1:30:91:71:78:de:f7:1b:
bc:b1:b5:8b:e8:41:c8:af:cc:bb:a1:27:40:f3:c6:
d0:e9:13:a1:7e:64:1c:b2:88:02:c3:75:dd:c5:aa:
c4:36:6a:43:76:19:ba:87:df:07:b5:39:a0:dd:5d:
13:05:c5:89:30:5c:ca:fe:75:bf:72:a0:10:9c:4c:
8c:df:ce:b0:27:e1:67:f3:97:e7:9a:d0:54:04:4f:
1f:0a:a8:b4:3f:d6:52:d5:fa:9b:19:e4:c1:e8:05:
3c:fe:26:cf:67:f6:35:76:1a:33:f7:42:e8:96:d0:
a9:c7:c0:aa:71:7a:0e:5c:33:a8:57:fb:9d:84:87:
ed:1c:a3:48:87:84:b0:1d:43:20:54:ea:31:fe:03:
2e:0b:90:d2:52:8a:b9:64:63:b5:7e:50:40:9c:6b:
41:21:42:ec:c4:8c:55:87:f0:9b:86:ac:9d:43:a9:
e7:41:5b:f6:59:ba:7b:0f:83:61:64:bd:3e:81:06:
a8:38:65:5d:88:68:e8:f1:c2:cf:dd:6e:cd:ed:09:
55:3c:33:2e:f6:4f:aa:d4:54:87:c3:0e:82:42:30:
f2:23:39:d7:7b:2d:17:1c:68:62:f6:d8:d9:75:98:
f4:65:f6:20:d3:55:ac:5e:4d:d9:d2:9d:02:c5:64:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:E7:E7:21:B8:C2:32:06:41:CD:CE:43:98:D6:F9:25:85:14:DD
X509v3 Authority Key Identifier:
keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:28:35:93:66:e1:4a:95:5d:e5:6e:27:3d:b8:f9:a0:09:57:
b9:4c:c6:62:1e:c0:b2:8d:b1:71:d0:3c:23:cb:52:7b:52:2c:
1c:22:89:7e:85:76:06:ea:64:fa:7f:98:c8:c2:61:39:fc:df:
f4:6e:f4:c0:cb:4a:68:0b:f3:48:40:3d:96:c4:5f:4c:7a:48:
dd:c5:d3:3e:3d:dd:30:7d:3c:5c:0d:1f:f2:f1:a6:24:23:6c:
4f:24:ca:90:ef:d8:69:ee:6d:5d:1e:d3:29:9b:76:94:0a:cf:
de:9d:37:64:c8:12:88:02:78:8e:cd:9b:1a:65:9c:66:b5:ba:
62:04:e2:03:ef:63:86:be:5c:6b:32:4b:4a:b9:7e:9c:f8:4f:
ce:e6:08:b3:25:71:73:de:25:fc:b0:6f:29:3f:f7:6b:0e:2f:
f7:33:eb:4a:b9:f9:ad:4b:30:e7:e8:37:7c:ca:2e:d6:55:69:
15:f9:bf:dc:c5:c6:1c:ec:a2:94:a4:6b:a4:0c:f7:df:4a:ea:
f2:8d:1c:05:95:ea:29:47:85:82:c7:61:85:40:fe:fe:a7:b3:
ea:91:7a:23:fc:5a:81:a0:05:19:87:ae:7b:0f:ab:51:d1:42:
04:d8:35:ae:98:9d:45:41:38:64:ce:6a:a3:d8:79:28:f4:20:
9e:6d:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:16 2026 by rpki-client