
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
File: CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft (raw, json)
Hash identifier: G/OaSa1K1rbPCts07jyLGpJFnZESCU8Qo9ulzdlRA7k=
Subject key identifier: 73:02:05:B6:3D:16:24:1D:B6:21:B5:F3:64:02:B0:FD:93:38:13:4C
Authority key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
Certificate issuer: /CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Certificate serial: 0A6E1339F4C99D85BE364382EC9668AEC74813F0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
Manifest number: 9F
Signing time: Sun 27 Sep 2026 04:03:19 +0000
Manifest this update: Sun 27 Sep 2026 03:58:18 +0000
Manifest next update: Mon 28 Sep 2026 05:12:18 +0000
Files and hashes: 1: 326131313a663263303a666665343a3a2f34372d3437203d3e20313937323435.roa (hash: U8HCHH1idotg5sEqWQ7iYfrPuhsaQSp9zz9M5wqrUjY=)
2: CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl (hash: kKtBWEkAKpqUxZX/7M+3+/oLwSSn3nmNfpAh38kfcpg=)
3: 326131313a663263303a666665343a3a2f34382d3438203d3e20313937323435.roa (hash: X9IRdYbMNBA8lcLk1xPTqNLh5EyLbXKxd9XO8hLWoDA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6e:13:39:f4:c9:9d:85:be:36:43:82:ec:96:68:ae:c7:48:13:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Validity
Not Before: Sep 27 03:58:18 2026 GMT
Not After : Sep 28 05:12:18 2026 GMT
Subject: CN=730205B63D16241DB621B5F36402B0FD9338134C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:81:79:6e:6a:e1:90:0c:23:b7:3c:32:43:
68:ec:a8:0c:a0:96:88:29:07:79:d2:d0:23:b0:f9:
f4:a1:e5:d5:df:58:f3:a0:1b:d6:23:4d:3e:54:68:
9e:79:b8:b9:d8:cf:17:0d:78:75:b7:fb:3a:59:bc:
67:e2:46:e9:86:2a:8a:07:22:52:af:25:b1:f4:6c:
8e:44:a8:ad:fa:8c:70:8e:a0:4c:8d:11:79:32:5d:
fd:08:0d:9f:b8:ef:6e:a6:77:4e:e2:a1:93:a2:da:
77:22:09:6f:2a:3e:34:be:db:90:41:1e:cc:28:2e:
da:fb:f5:f5:17:bc:ad:bd:07:55:8e:2d:57:ae:2b:
0d:d0:75:35:68:7b:6b:e9:b8:cb:fd:b9:f0:a7:3a:
a8:d3:fc:c4:ad:f5:f2:5c:4b:4b:3e:db:9e:7b:a7:
53:a9:ad:cb:02:0a:e3:0b:77:ac:80:f2:e8:56:0e:
dc:66:db:83:b8:5c:88:e3:e3:c3:43:cd:09:c4:53:
ab:fc:b1:88:41:d0:da:f1:58:c3:54:9f:40:8f:f4:
a2:24:95:17:d0:8b:51:e6:39:92:34:1d:e9:d1:c7:
58:a5:90:09:7f:f4:75:bc:db:6a:44:87:43:bb:cb:
de:b4:42:42:c6:63:43:67:16:f5:88:85:33:a4:ca:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:05:B6:3D:16:24:1D:B6:21:B5:F3:64:02:B0:FD:93:38:13:4C
X509v3 Authority Key Identifier:
keyid:CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e6:98:d9:3b:72:c7:be:08:ff:7a:74:1e:a9:31:ee:02:b8:
7d:d6:2c:ef:4d:aa:7f:e0:2c:64:57:38:9e:fd:20:bc:da:4f:
15:dd:e0:cc:da:70:49:ca:e6:bf:62:be:b6:86:1b:20:a3:54:
b9:0e:c7:ca:3a:a4:37:71:1a:07:08:ed:8e:d4:e6:32:43:c0:
7d:cf:eb:68:96:d7:a1:d7:11:94:45:c7:15:41:a9:d7:ce:46:
94:09:d8:12:31:c6:8e:f7:28:5a:ef:b1:a2:76:2c:b1:80:82:
cf:81:a9:7a:67:5a:7e:e0:29:42:8b:17:67:92:f4:e9:b1:33:
6c:ad:43:2d:c6:8f:ba:8a:54:56:d9:98:40:e6:18:ad:42:9d:
68:b3:72:f1:58:fd:ca:fd:70:4d:65:84:cf:df:fe:fb:87:22:
3f:36:36:00:0b:8c:87:d1:3a:89:e3:ac:e4:fd:6d:8a:6c:f1:
2f:6a:19:d6:f7:1c:a3:b2:1f:67:95:2c:b1:93:78:ee:c4:a5:
e8:f5:97:ba:c2:97:01:66:1b:3a:fa:dd:2b:0a:b0:5e:b8:c8:
8a:a8:72:e8:53:01:f6:87:f6:8c:28:f3:23:ef:f9:85:01:9c:
34:72:97:e1:71:19:88:bf:6b:63:a8:39:78:cb:c7:c5:e3:ea:
31:55:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:41:44 2026 by rpki-client