Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: 1H0QarkD6ELp0mJfEHO9TroMmrLb67GsSXXqRuk4hsQ=
Subject key identifier: 11:10:96:E2:4B:5C:45:88:83:1B:5F:52:90:8E:13:9B:37:96:21:38
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 20B0601919BEE998E16CE4EE5B2C5C5FC3A35A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 0307
Signing time: Thu 26 Mar 2026 02:17:26 +0000
Manifest this update: Thu 26 Mar 2026 02:12:23 +0000
Manifest next update: Fri 27 Mar 2026 03:32:23 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: Sowtjg0drOHSm9MTBLEWBEGOnugc2idB8/CTsmF+XGA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b0:60:19:19:be:e9:98:e1:6c:e4:ee:5b:2c:5c:5f:c3:a3:5a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Mar 26 02:12:23 2026 GMT
Not After : Mar 27 03:32:23 2026 GMT
Subject: CN=111096E24B5C4588831B5F52908E139B37962138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:14:bf:c8:13:d0:1e:f7:05:c7:c8:53:c4:
e5:b9:de:8a:68:9e:c4:98:e9:f4:4d:4d:5e:e6:ed:
64:e5:a0:f1:d7:75:61:ba:e5:a9:f5:4d:cb:2e:01:
b6:bb:51:12:92:b2:c5:68:9d:21:69:55:3c:bb:2d:
47:6a:bd:13:ef:69:ba:b4:38:5f:ad:a8:c7:04:35:
ae:5c:5c:1c:43:6d:58:95:d3:b4:de:b5:09:86:3a:
0e:39:9f:3a:0e:9a:fd:f6:c5:39:28:02:29:b4:0d:
98:57:ec:4a:fa:68:11:f2:89:a8:87:19:49:2f:40:
19:90:06:f2:65:13:52:32:ad:ff:86:8f:a4:bb:fe:
a9:68:57:2b:fc:78:b9:a8:a2:ca:47:c0:88:8d:54:
53:e8:02:3e:e2:33:fd:46:42:24:f8:71:16:ad:a6:
9d:e3:a9:c2:16:e8:3d:95:72:98:8c:bd:47:a9:cd:
87:c2:a8:c2:2e:8f:e5:ce:a2:61:ea:40:41:cf:af:
7e:80:49:8f:5d:3c:19:77:71:dc:78:ee:25:97:ee:
ed:89:3e:d9:7d:b7:65:49:cd:93:47:44:70:9a:73:
f6:16:20:02:52:1a:81:75:bd:85:c2:cc:5e:01:8a:
94:2a:db:0a:47:c6:52:28:76:ea:22:74:8c:ee:c8:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:96:E2:4B:5C:45:88:83:1B:5F:52:90:8E:13:9B:37:96:21:38
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:93:8b:3c:a6:fa:78:0e:43:5a:33:8e:c0:0d:64:d0:c5:
8e:12:0c:94:04:f9:a2:e9:0a:3c:6c:03:cd:b4:63:fc:7f:c9:
de:ac:a4:d6:1e:f2:e2:01:b2:38:81:a6:95:d2:d5:3d:d1:b1:
df:c7:55:5c:b5:d7:4c:f5:b2:02:bd:72:fc:19:f2:01:0f:29:
28:94:14:14:4f:35:07:8e:b8:2a:e2:69:fb:4a:09:2d:49:05:
57:5c:07:5b:25:56:ec:f1:41:83:0f:dc:25:e2:17:87:02:e8:
e0:40:dc:09:f8:72:41:9e:8f:91:f1:2b:81:bc:ee:eb:d8:18:
02:c1:07:46:46:7e:fc:dd:20:cf:d2:71:36:82:6f:bd:09:cf:
72:50:56:06:e9:07:3c:60:62:55:fb:38:e7:31:ce:c9:4a:37:
37:4e:95:8d:40:ca:02:74:cf:0a:a3:88:52:17:5b:9f:2d:6e:
01:0f:31:72:86:fb:4a:82:cc:f2:a5:3c:54:0d:18:38:2a:66:
d4:15:44:69:1b:94:2d:85:39:a3:41:16:b1:fa:eb:32:56:d6:
ea:36:a0:e6:37:ac:0a:d4:63:6d:4f:47:ab:e8:1a:ba:c4:4d:
40:f2:de:d2:85:74:b7:cb:77:63:b6:6b:62:86:20:e0:19:72:
d4:70:f7:58
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUILBgGRm+6ZjhbOTuWyxcX8OjWhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYyM2JiODc0MzExNmQ4NmIxM2I5YmQ5ZTUzNDAyMzk4
YjdhMWVlMDAeFw0yNjAzMjYwMjEyMjNaFw0yNjAzMjcwMzMyMjNaMDMxMTAvBgNV
BAMTKDExMTA5NkUyNEI1QzQ1ODg4MzFCNUY1MjkwOEUxMzlCMzc5NjIxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGBS/yBPQHvcFx8hTxOW53opo
nsSY6fRNTV7m7WTloPHXdWG65an1TcsuAba7URKSssVonSFpVTy7LUdqvRPvabq0
OF+tqMcENa5cXBxDbViV07TetQmGOg45nzoOmv32xTkoAim0DZhX7Er6aBHyiaiH
GUkvQBmQBvJlE1Iyrf+Gj6S7/qloVyv8eLmoospHwIiNVFPoAj7iM/1GQiT4cRat
pp3jqcIW6D2VcpiMvUepzYfCqMIuj+XOomHqQEHPr36ASY9dPBl3cdx47iWX7u2J
Ptl9t2VJzZNHRHCac/YWIAJSGoF1vYXCzF4BipQq2wpHxlIoduoidIzuyI0/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUERCW4ktcRYiDG19SkI4TmzeWITgwHwYDVR0j
BBgwFoAUBiO7h0MRbYaxO5vZ5TQCOYt6HuAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzEv
MDYyM0JCODc0MzExNkQ4NkIxM0I5QkQ5RTUzNDAyMzk4QjdBMUVFMC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0JpTzdoME1SYllheE81dlo1VFFDT1l0Nkh1QS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV80ZDVjMzA5YWUxMWE0NDll
YTg0MDdhY2UxZjc5MDFmMC8xLzA2MjNCQjg3NDMxMTZEODZCMTNCOUJEOUU1MzQw
MjM5OEI3QTFFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwnpOLPKb6eA5DWjOOwA1k0MWOEgyUBPmi
6Qo8bAPNtGP8f8nerKTWHvLiAbI4gaaV0tU90bHfx1VctddM9bICvXL8GfIBDyko
lBQUTzUHjrgq4mn7SgktSQVXXAdbJVbs8UGDD9wl4heHAujgQNwJ+HJBno+R8SuB
vO7r2BgCwQdGRn783SDP0nE2gm+9Cc9yUFYG6Qc8YGJV+zjnMc7JSjc3TpWNQMoC
dM8Ko4hSF1ufLW4BDzFyhvtKgszypTxUDRg4KmbUFURpG5QthTmjQRax+usyVtbq
NqDmN6wK1GNtT0er6Bq6xE1A8t7ShXS3y3djtmtihiDgGXLUcPdY
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:12:44 2026 by rpki-client