
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json)
Hash identifier: j3BfbWepkd1brTHWF0drBlP22Vxh+o28GhR2GNcE/0Q=
Subject key identifier: 49:03:02:9F:D9:37:F7:B9:9B:F3:0C:36:61:A2:2F:26:7A:9F:E3:D1
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial: 0D2FB0E64EB02ED415CB4729A71E6685C5E775DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
Manifest number: 03A3
Signing time: Fri 24 Jul 2026 00:30:21 +0000
Manifest this update: Fri 24 Jul 2026 00:25:21 +0000
Manifest next update: Sat 25 Jul 2026 03:38:21 +0000
Files and hashes: 1: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: I/SGMFUzd4uy2x5q3U7u/Bo+SgV4VHUDA1k1FKUXISU=)
2: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: i7uZ6kuAMUDRGGjZBz0Vl5VpijCufoXuY1ufMZ+k83s=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2f:b0:e6:4e:b0:2e:d4:15:cb:47:29:a7:1e:66:85:c5:e7:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Validity
Not Before: Jul 24 00:25:21 2026 GMT
Not After : Jul 25 03:38:21 2026 GMT
Subject: CN=4903029FD937F7B99BF30C3661A22F267A9FE3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5e:12:ad:29:a4:79:6a:6e:84:75:d1:17:a6:
60:1a:bf:31:b0:eb:da:1d:1c:51:91:b3:67:ef:63:
2e:14:e7:d2:3a:f7:ed:13:0a:10:a1:53:6d:40:76:
3f:1f:98:ba:10:13:9b:c6:4c:3c:96:21:e5:07:6e:
72:1a:53:c0:f5:b2:27:5a:9d:dc:0b:6d:49:42:a8:
36:f0:67:ab:ec:6a:b2:a9:71:7a:6a:6a:22:d3:45:
07:55:c5:11:11:52:2d:af:77:14:d2:28:81:65:85:
9b:d2:fc:15:1d:41:fa:1d:22:74:cb:41:04:59:0d:
be:2b:68:46:a2:63:a1:c4:7f:9e:0b:6d:97:e2:01:
67:71:98:9a:59:86:59:df:04:69:6d:3f:c4:a3:e4:
2b:be:b1:35:e8:2b:79:98:dc:c0:e0:e0:f2:66:b3:
05:1c:85:5b:0a:63:ba:78:29:df:21:3d:b7:ab:f5:
fa:ca:9f:ab:64:6e:ee:2e:22:01:2a:06:a2:de:d1:
ae:9e:f4:c4:de:8b:ef:88:a0:4d:12:3c:2a:d6:2d:
00:5d:b5:ed:3e:c6:38:07:f7:4a:f6:39:19:da:80:
d4:57:75:97:7a:a2:25:4b:08:f1:c3:d0:ed:8c:65:
fe:6a:74:e0:be:0c:f4:69:db:90:28:67:e5:7d:df:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:02:9F:D9:37:F7:B9:9B:F3:0C:36:61:A2:2F:26:7A:9F:E3:D1
X509v3 Authority Key Identifier:
keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c8:c8:47:ab:4c:d9:61:5c:a9:9f:01:bd:00:83:20:99:9e:
81:c2:52:21:e0:e5:23:c6:09:f3:89:73:16:92:e7:5b:1b:3b:
71:f8:9d:7f:e5:ab:37:fa:c5:8b:9f:b5:7d:2b:90:77:b5:e5:
72:e2:83:6c:4c:cd:f8:11:0e:98:09:b4:6b:ce:9a:34:c8:d8:
ff:14:1c:42:d3:f0:f4:4f:16:bc:f6:d2:64:23:fc:94:3b:4d:
df:38:4d:9a:3c:18:7e:b2:06:ae:f6:34:9d:7e:33:cd:13:5e:
85:5e:7d:2a:92:5b:81:40:90:ac:c3:2b:f3:07:29:67:ea:df:
a8:15:4a:79:64:97:66:c2:98:5e:43:4f:4d:bb:ab:f9:2a:4e:
68:ed:e8:68:95:7a:7c:0a:74:39:7e:ff:3f:e9:22:94:f6:33:
47:3e:9a:e9:0e:1b:4c:e2:47:f2:33:67:a4:7d:16:88:d8:d4:
65:b6:d4:49:ea:51:10:0f:0e:3f:86:39:6a:8a:21:1b:37:fa:
4c:15:70:aa:de:61:35:c9:00:ca:be:3b:64:20:6e:48:33:ff:
d8:c7:bc:fb:3d:65:08:7d:b3:79:6a:e1:9f:37:93:c0:52:cc:
e8:51:99:9b:0c:6e:4c:91:96:f2:38:56:09:a4:c9:8f:9b:ab:
1a:8b:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:15 2026 by rpki-client