
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json)
Hash identifier: aiA7OjoMDtXAFyryZYLRhUozD68uR+AXjQLYSQ4OQYw=
Subject key identifier: D6:63:34:8A:D8:34:C4:76:6A:D5:07:14:47:CB:09:5C:6B:D0:18:FD
Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359
Certificate serial: 097E98506159D10D7ECB151747740B7A5B060997
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
Manifest number: 03A5
Signing time: Fri 24 Jul 2026 10:14:57 +0000
Manifest this update: Fri 24 Jul 2026 10:09:57 +0000
Manifest next update: Sat 25 Jul 2026 11:54:57 +0000
Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: kWlIk23DUjBOsmwhoMkM9sf6BVWkqHBNXtOAr4jwWGc=)
2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: BjKc9VMASsXPgZhYz/2yz7n3Gaf1Y9hvN7y8UGTtnR0=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 09:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7e:98:50:61:59:d1:0d:7e:cb:15:17:47:74:0b:7a:5b:06:09:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359
Validity
Not Before: Jul 24 10:09:57 2026 GMT
Not After : Jul 25 11:54:57 2026 GMT
Subject: CN=D663348AD834C4766AD5071447CB095C6BD018FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:01:91:94:53:22:4c:26:e9:b3:bf:06:50:
a6:3f:ea:94:e7:47:78:66:a3:49:e9:02:c1:86:26:
5b:ef:45:49:25:ad:94:93:d9:da:d0:65:5b:c5:8c:
5a:cc:36:b5:f7:65:b7:36:ea:53:7a:36:c4:50:89:
89:26:c3:77:50:26:1a:ee:ff:b3:53:59:5d:36:6d:
4f:6e:77:82:05:58:12:b1:df:7a:1b:89:24:c8:dc:
36:47:bb:a6:7e:eb:ac:d1:ea:6e:22:aa:8c:33:f6:
8b:08:be:a6:33:59:9c:44:1d:0a:f1:48:46:c2:ac:
de:28:36:36:ad:1d:e7:1e:a4:f5:d4:d0:aa:39:6b:
eb:32:be:8b:07:3a:2a:98:83:f2:03:06:2a:5d:9e:
59:49:ee:ed:a8:25:32:91:31:4b:09:48:d7:91:3b:
51:4c:20:a1:b0:fc:e6:b6:38:56:cc:cb:e7:ce:5d:
c3:02:1a:f2:ba:1d:71:6d:46:ad:eb:81:63:63:04:
ad:67:18:19:e1:12:58:71:20:b3:91:a5:5d:b5:25:
23:6c:86:24:15:30:17:01:72:f0:19:3e:5f:6c:40:
96:01:8b:f0:4e:4e:a6:fc:1b:9f:0d:a6:9d:97:28:
fa:1d:5c:19:ab:7a:d7:da:18:bc:84:b3:a5:90:42:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:34:8A:D8:34:C4:76:6A:D5:07:14:47:CB:09:5C:6B:D0:18:FD
X509v3 Authority Key Identifier:
keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:06:53:68:b0:cb:42:40:b6:cd:e5:7f:69:32:5c:5f:a7:
ee:a4:2e:3d:63:63:d5:f6:d1:47:08:32:5d:74:d3:04:ec:d8:
61:a8:64:d7:ae:0c:7d:d8:60:12:2e:fd:91:7a:e2:be:17:e8:
41:f7:a8:bc:6e:76:9a:55:23:62:1d:d7:ce:75:cb:e3:f2:56:
75:4e:cc:f9:1e:7a:2f:de:cb:9b:a2:4e:7f:7a:7e:ae:30:48:
c4:f3:8f:f3:26:c1:78:dc:5e:d7:da:1f:6e:46:8f:2e:55:4b:
a6:c1:0b:44:7b:b6:b7:f6:98:28:45:f4:b8:b2:b6:01:f0:c9:
95:3f:bc:6a:6c:cd:3a:3c:50:1a:20:46:cd:a9:05:bb:37:68:
8f:8f:70:a6:21:e2:89:64:72:58:f6:8c:ea:11:60:63:f6:08:
ed:c8:f2:56:dd:4f:e1:79:ef:ab:61:21:fb:98:e5:52:ab:ff:
86:d0:92:92:38:8c:65:d7:c2:96:7f:31:7f:c9:61:56:fb:79:
9d:c8:1c:6e:5b:fc:53:44:79:43:0d:55:d5:e1:2f:23:55:d2:
6d:c6:74:8e:7f:16:18:5b:ba:c5:40:e6:0a:f1:40:00:c7:4c:
fb:fb:dd:ce:79:fc:89:fc:50:c3:eb:15:de:a6:39:f9:49:9d:
1c:fd:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:24 2026 by rpki-client