
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
File: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft (raw, json)
Hash identifier: 9Usk/GfrR+tcshetbSTw06wsj/ttg1rwNagnSYOQ9UU=
Subject key identifier: 29:A4:5E:53:A6:48:29:01:86:22:F1:32:D6:9D:9A:57:8C:A3:05:9B
Authority key identifier: 62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
Certificate issuer: /CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
Certificate serial: 42C1C49D0073E09F9D52C5223839B9BEEA21C68F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
Manifest number: 02EB
Signing time: Fri 09 Oct 2026 06:50:52 +0000
Manifest this update: Fri 09 Oct 2026 06:45:50 +0000
Manifest next update: Sat 10 Oct 2026 07:40:50 +0000
Files and hashes: 1: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl (hash: jWrmVWb++bMdqRclSfSZ3FfpsCvdGpxO/IGsGtUYBuA=)
2: 326131313a663263303a666663623a3a2f34382d3438203d3e20323133343931.roa (hash: 3BL+HEoImozoUbts5Jll+SxE0fgy/ejIZu9gGc1JaXc=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 03:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c1:c4:9d:00:73:e0:9f:9d:52:c5:22:38:39:b9:be:ea:21:c6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
Validity
Not Before: Oct 9 06:45:50 2026 GMT
Not After : Oct 10 07:40:50 2026 GMT
Subject: CN=29A45E53A64829018622F132D69D9A578CA3059B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:b6:31:bd:c1:71:ac:51:32:e8:b5:f2:9a:
a1:d4:9d:a7:e4:19:2e:9a:e0:e2:45:28:f6:21:1c:
4f:19:e7:63:b3:22:10:0b:e2:c6:a3:08:1a:54:a0:
6a:67:14:ab:db:63:c6:85:56:47:76:88:86:b3:28:
20:b1:cd:d4:42:9b:6f:fe:77:c5:7d:7a:50:1a:de:
af:d7:83:96:7d:ea:cb:7d:99:74:b5:dc:21:f9:38:
4c:19:51:cd:d6:d0:23:3d:19:c6:43:46:8a:d4:48:
03:3f:2a:04:01:cb:f6:17:a0:af:8b:9f:0c:b6:5d:
24:bd:03:35:53:5b:a3:dc:38:46:74:4a:47:a4:1a:
28:42:aa:69:89:11:a0:b5:89:61:71:dc:e9:66:4b:
3d:cf:90:0e:f6:b2:34:8f:c1:2d:fc:e5:37:d9:4d:
da:64:62:e9:b6:14:9a:17:be:86:6b:b9:33:f9:95:
28:39:cd:0f:8e:e4:ae:5e:94:61:e4:3c:ce:cd:6c:
90:09:cc:6e:64:21:11:88:38:8b:bf:c8:7f:10:0b:
05:28:5b:7f:53:01:cd:ef:b1:2f:9a:5c:ce:37:66:
cd:25:9f:3d:13:04:32:8d:81:a7:4a:bf:70:10:a2:
4b:dc:d6:8b:e2:62:1e:c0:b8:dd:20:68:e8:9b:56:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:5E:53:A6:48:29:01:86:22:F1:32:D6:9D:9A:57:8C:A3:05:9B
X509v3 Authority Key Identifier:
keyid:62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:57:85:65:6b:47:9e:a6:64:38:1d:5f:a1:a8:9c:28:65:4d:
2d:5a:67:f3:97:40:7a:94:7a:cb:11:3b:c5:0d:2f:97:9b:8c:
18:33:2e:c9:25:c2:91:3b:5f:f2:02:06:fe:87:80:be:29:6d:
cc:27:c6:53:55:4b:64:f8:f4:d5:84:bb:e5:9f:c7:5b:63:10:
25:11:e5:ce:72:d2:ca:35:7b:37:0a:2b:06:33:f5:df:85:e9:
67:8e:d1:fe:03:e5:24:51:a9:69:ca:94:14:3d:c6:33:8e:12:
7a:eb:51:47:7d:31:ec:d7:36:5e:b5:c9:e4:4e:36:7c:3b:6c:
4d:be:3c:3d:78:09:93:47:65:07:68:cc:0a:b7:b4:c2:d5:45:
84:15:9c:bd:47:70:60:84:b4:a4:d2:35:e5:c3:e9:2d:60:dc:
44:11:1f:9d:69:69:bb:ec:94:50:5c:fa:d7:34:f4:58:6a:d8:
df:77:72:84:3d:da:38:7e:09:96:f7:30:4f:9e:fc:23:ab:d0:
9a:0c:3d:68:bf:2c:d3:48:9a:f6:31:7d:fe:10:db:46:65:a2:
5c:19:ed:5b:a0:e4:39:02:51:81:bd:0e:29:7f:00:65:6e:96:
a2:0b:e0:79:a4:37:44:73:db:48:d8:75:60:b4:11:66:53:64:
ef:ab:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:34 2026 by rpki-client