
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json)
Hash identifier: cMXS1VtDE6vjmzm/rML03mRV1z8+L1+z7gYEjme7PgU=
Subject key identifier: 52:98:D8:C4:D6:50:66:DC:7A:2A:CB:F8:98:B6:50:0C:2D:D5:BD:43
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial: 7621D64C9FC478BC670EC251D6353F9F5819AC62
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
Manifest number: 02CC
Signing time: Fri 24 Jul 2026 17:02:33 +0000
Manifest this update: Fri 24 Jul 2026 16:57:32 +0000
Manifest next update: Sat 25 Jul 2026 17:54:32 +0000
Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: AQ4OxulvbgqCqop8P2z+qJiFA43K/dbRMFYgReLvR60=)
2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:21:d6:4c:9f:c4:78:bc:67:0e:c2:51:d6:35:3f:9f:58:19:ac:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Validity
Not Before: Jul 24 16:57:32 2026 GMT
Not After : Jul 25 17:54:32 2026 GMT
Subject: CN=5298D8C4D65066DC7A2ACBF898B6500C2DD5BD43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:3f:94:3a:c4:dc:d4:bf:23:23:6c:cd:c9:
78:a7:d1:92:e4:95:8d:9a:75:ea:bc:a2:61:89:a2:
42:39:f8:69:98:5b:d0:77:19:e0:fa:58:e0:af:69:
8b:d6:da:f6:33:30:45:f6:92:e6:02:73:fe:95:e4:
17:bc:f7:3d:f0:e2:b1:62:21:9d:39:c6:bb:3e:2a:
9f:02:78:b8:fb:e7:33:71:94:d0:f6:80:c2:5b:84:
98:cb:f6:86:82:c4:4a:94:72:fe:36:22:c6:a3:63:
0d:fc:06:a0:4c:41:7b:e5:0d:20:12:3c:45:c4:cb:
82:d7:9d:2c:05:cf:8b:fd:db:f5:c6:82:05:7f:56:
44:20:85:fb:85:20:db:74:22:f6:90:04:8a:25:e5:
08:78:04:e6:33:5c:b3:42:35:21:43:22:ca:77:7e:
7e:34:ba:70:ae:11:20:3d:f5:9f:d0:ea:0a:bc:b4:
5a:c0:95:fb:4f:03:89:68:4b:9f:c0:74:47:57:2e:
63:44:25:43:5d:a1:1f:1a:fe:29:f4:ff:40:15:71:
18:44:1f:0f:dc:95:8a:4b:3a:df:94:98:94:4f:fe:
1f:f3:71:78:4f:6e:85:94:29:62:b3:03:76:62:61:
55:6c:e4:8e:71:88:ea:3e:47:57:37:fa:1d:4f:e8:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:D8:C4:D6:50:66:DC:7A:2A:CB:F8:98:B6:50:0C:2D:D5:BD:43
X509v3 Authority Key Identifier:
keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5e:cf:bd:be:61:d6:3a:8c:79:02:09:69:14:30:43:d8:ff:
bc:25:1f:9c:c1:0a:6d:b6:1a:76:77:1e:d8:c1:88:c0:31:f0:
19:34:20:2b:99:b1:f6:93:01:28:e7:80:03:8c:aa:e6:67:cf:
e9:8d:7b:96:f7:0d:9d:9c:07:e3:3b:60:e9:fd:38:a7:bd:f5:
d4:de:a2:71:27:e7:1a:a9:4c:dd:1f:bf:93:bf:d9:aa:7d:e7:
46:db:02:a6:48:a2:e5:25:fb:2e:94:f1:43:a0:c3:96:27:9c:
da:fe:95:da:87:c9:cc:df:2b:3b:0d:b5:39:b9:d7:95:73:6a:
4a:12:fa:c6:2e:38:57:00:14:e4:8c:c7:fe:2d:a9:7f:58:6b:
58:84:b7:8f:38:b7:fc:ce:69:cf:4b:7b:a1:f4:cf:76:9b:bb:
15:b0:93:55:94:76:b9:6f:b1:5e:0e:6e:1d:dc:07:4b:bf:ba:
45:37:b0:44:c1:31:c2:d2:fd:8b:da:7b:8b:a1:c7:33:92:33:
28:3f:2a:9b:83:39:cc:d0:10:4a:62:2a:01:0d:cf:93:d6:8a:
b5:6c:da:b1:22:86:4d:d5:df:96:2c:b9:3a:49:29:93:60:9c:
ec:c0:3c:38:26:b0:ed:df:6d:11:04:31:49:6e:34:ce:3b:09:
a5:8c:34:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:36 2026 by rpki-client