
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json)
Hash identifier: Wn8FxO313vSZwNLCArDJrWV0BkLsSUH9NIwt+63Cl54=
Subject key identifier: 4C:63:51:B6:09:45:EC:9A:D6:19:13:2A:2A:9D:A0:AD:BD:A3:EB:A2
Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Certificate serial: 1C5ACF7DC3C924FBC87AF04D9A5C76CD443560EB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
Manifest number: 03EF
Signing time: Wed 30 Sep 2026 10:42:18 +0000
Manifest this update: Wed 30 Sep 2026 10:37:16 +0000
Manifest next update: Thu 01 Oct 2026 14:31:16 +0000
Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: U+gkPYf6AgYDjHGA59XTXESU4hthf5wkPblkC7Xtg/E=)
2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: tLThUwSwrPfCypAsdBnMMAhmoYAyEUY8DuOIJQne5ZA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5a:cf:7d:c3:c9:24:fb:c8:7a:f0:4d:9a:5c:76:cd:44:35:60:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Validity
Not Before: Sep 30 10:37:16 2026 GMT
Not After : Oct 1 14:31:16 2026 GMT
Subject: CN=4C6351B60945EC9AD619132A2A9DA0ADBDA3EBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:02:22:28:08:7c:c4:03:55:cf:34:fb:77:
94:6d:68:d2:fd:34:20:6d:98:27:e0:88:35:0a:f9:
85:55:53:1b:0b:02:26:ef:d7:28:41:23:0b:48:2e:
29:f3:db:72:68:76:3c:72:6a:49:79:c1:9c:41:e5:
8e:bf:c0:c2:1d:72:2d:a6:1d:da:83:f1:22:83:58:
ae:12:3d:a4:80:c0:f6:05:95:99:ab:31:42:fa:0c:
54:80:88:43:fb:f7:32:99:08:a7:04:35:4a:65:22:
de:bb:52:a6:8f:72:5b:f0:91:5f:11:c5:eb:96:c7:
4a:f6:05:c0:09:ad:5f:8e:05:0e:5a:b5:d1:23:ed:
bd:87:55:f9:8e:9b:77:4f:fd:37:3c:b7:3a:df:9f:
e2:a2:64:86:fc:91:0d:98:09:04:4c:ac:f3:f3:05:
b6:86:ea:11:5f:47:9c:72:ba:ca:f9:cd:d0:82:21:
f7:82:36:c7:9c:ef:dc:bd:cd:3f:0b:22:5f:de:91:
43:86:0d:e8:c6:68:93:b5:c9:82:ba:c1:2b:af:ca:
cc:32:4a:c4:aa:a9:dd:34:1b:85:31:dc:2e:99:c3:
c8:ef:9a:b4:44:87:a6:ea:49:5d:ff:8f:33:03:b6:
19:8e:37:a3:b9:4d:84:e4:e0:c1:81:1d:de:0b:1e:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:51:B6:09:45:EC:9A:D6:19:13:2A:2A:9D:A0:AD:BD:A3:EB:A2
X509v3 Authority Key Identifier:
keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:56:3b:52:e6:30:90:2f:f6:8b:1a:77:75:82:2d:16:61:b9:
02:eb:ad:99:02:a4:80:fa:e0:12:e2:07:38:1f:95:29:9a:cf:
f0:ad:59:71:f6:2d:92:f6:12:41:c5:54:21:f2:93:91:6d:56:
88:71:46:3a:31:df:bb:52:27:4e:a8:c9:3d:58:1a:e6:ab:47:
2a:fe:ca:87:14:56:31:8b:36:2f:30:83:3f:c3:84:66:82:80:
c4:9d:9d:fb:42:0c:08:d9:98:a4:31:2d:a2:01:82:cf:5a:c7:
ca:7e:8d:32:4d:93:6a:24:77:b3:f8:d6:50:05:ac:f0:6d:d2:
86:63:fb:f5:07:4c:3d:55:bb:39:66:ac:2b:12:7a:8b:b8:51:
61:eb:dc:fd:1b:55:f7:13:78:13:d0:e8:2a:40:62:dc:67:14:
ac:3b:8c:9d:0e:be:23:b7:e4:13:48:f1:67:0f:4b:fa:29:06:
48:0f:26:7a:6a:49:42:f6:5c:80:c0:fd:58:ea:80:30:ca:f4:
e8:80:05:37:77:b5:86:aa:e8:c7:69:85:b0:c9:f8:5d:ee:1f:
b2:90:c1:47:7c:66:1b:f9:99:3c:87:fb:5c:75:86:9d:29:70:
fe:4b:df:5a:79:2a:aa:f5:8c:f3:f5:5d:23:74:0e:7e:f6:57:
6a:c6:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:38:53 2026 by rpki-client