
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
File: 6482EA67DB858D1440DD67B955223E4341BA4E97.mft (raw, json)
Hash identifier: USfvEqh7NwzupS03/fNU9c/MWqma7N8YMAsR2w1sAfU=
Subject key identifier: 89:6C:AD:86:B9:BA:0D:63:AD:78:85:49:E1:64:53:EA:AE:9C:B8:9B
Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Certificate issuer: /CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Certificate serial: 1529C817FC1B501287EEE3FD97A14304FB65A4B9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
Manifest number: 0308
Signing time: Thu 26 Mar 2026 12:23:56 +0000
Manifest this update: Thu 26 Mar 2026 12:18:53 +0000
Manifest next update: Fri 27 Mar 2026 16:14:53 +0000
Files and hashes: 1: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (hash: MdiZ+9TbSNzfNPtu/3qU2TdQ6jBsbjIkWQpbqOwaXo4=)
2: 6482EA67DB858D1440DD67B955223E4341BA4E97.crl (hash: hBBOO7FFZDae+2xBWrEMo/oQ4S21OFryxBcRUa4eJJw=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:29:c8:17:fc:1b:50:12:87:ee:e3:fd:97:a1:43:04:fb:65:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Validity
Not Before: Mar 26 12:18:53 2026 GMT
Not After : Mar 27 16:14:53 2026 GMT
Subject: CN=896CAD86B9BA0D63AD788549E16453EAAE9CB89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:5b:5a:15:12:2f:04:9c:1f:38:68:f5:a0:
a2:f4:54:67:ef:db:c4:ed:ba:94:14:f6:39:63:8d:
23:5a:a7:5f:e6:a4:4e:01:9a:15:d9:e5:40:e7:b5:
53:c4:fc:5f:38:61:fe:f0:96:d2:89:9d:45:27:39:
d5:90:73:3d:f9:6c:65:be:af:c9:f6:1e:b6:a3:60:
b6:71:c1:52:5c:41:7a:60:64:88:12:06:ac:1a:a8:
57:df:7d:3d:e8:a8:74:60:5f:10:3d:65:df:a0:52:
78:ef:9f:3b:3e:14:04:13:65:70:2f:dd:21:10:03:
d3:a9:f8:73:68:42:a1:df:c6:48:0f:5a:1d:41:c3:
eb:be:60:ef:06:c3:3a:f5:ef:5c:a4:7c:1e:5d:3c:
c4:59:e1:41:b0:0f:9a:a8:2e:7e:44:f9:cd:92:81:
10:70:d7:15:86:e1:40:55:db:bf:e6:94:fc:9d:9a:
45:aa:36:dd:5d:58:f4:4d:85:de:e3:c9:5b:8e:d3:
de:2d:2d:8e:e4:d9:f6:1f:a5:6b:4f:bd:55:6f:23:
79:c1:08:68:38:a3:fc:07:ec:55:ff:4b:a9:c2:f0:
3c:9c:1f:5a:cf:a7:d0:dc:93:91:4a:6d:b6:fc:80:
13:0a:b0:ac:3a:b4:1a:60:50:99:13:e6:dc:e0:d9:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:AD:86:B9:BA:0D:63:AD:78:85:49:E1:64:53:EA:AE:9C:B8:9B
X509v3 Authority Key Identifier:
keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cb:04:76:46:5f:73:6e:2b:16:31:84:cc:ea:d1:0b:3a:ee:
58:0b:9b:94:71:14:63:e9:9c:64:e7:d3:db:58:62:b4:ee:e5:
22:bc:13:b3:28:b3:5c:81:56:d8:75:62:a2:4e:ae:33:30:5b:
1b:9d:89:62:2a:2b:90:1e:5b:81:a3:3c:57:d0:57:30:75:0e:
b4:5a:ff:a3:0e:29:03:fb:e0:ab:02:ad:af:53:cc:b0:f0:38:
ea:fb:2d:b1:31:74:31:bd:10:44:8f:8e:ec:32:4c:5d:93:43:
c2:99:a6:2b:d9:75:06:f8:98:63:8b:31:f4:3f:b6:c2:d1:01:
33:2c:92:ef:06:e6:57:65:65:df:4c:54:d4:eb:66:b3:48:12:
a7:be:3f:3d:70:5e:ec:2c:4c:9a:58:8f:8b:a0:a2:eb:34:55:
dd:49:c6:5a:95:a8:9f:f0:80:ab:36:df:dd:10:8e:e7:fb:56:
e7:0c:61:12:3b:dc:b8:91:ce:e2:88:02:da:f4:d8:17:95:02:
dd:e0:14:f4:52:36:2c:2b:2f:62:09:5a:63:61:ce:a2:f3:d5:
0d:76:6c:05:c1:ce:eb:f0:62:1e:b5:48:b9:1c:ec:2c:1d:c2:
3c:6d:bc:b4:cc:17:3f:54:bd:c8:be:ec:a6:7b:a9:b6:6d:e9:
a1:fe:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:13:59 2026 by rpki-client