
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
File: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft (raw, json)
Hash identifier: Ks9OALFEJDHJXD8o85BnrxUHsZBAcmy57YxMKzPYUMc=
Subject key identifier: 65:FC:FC:75:E2:D8:67:B7:D3:03:A6:F0:FA:C1:60:D5:20:B0:6D:17
Authority key identifier: 3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24
Certificate issuer: /CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824
Certificate serial: 3050F82F85707F4FD86858657C01F02374A61A4E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
Manifest number: 75
Signing time: Fri 24 Jul 2026 08:49:26 +0000
Manifest this update: Fri 24 Jul 2026 08:44:26 +0000
Manifest next update: Sat 25 Jul 2026 10:20:26 +0000
Files and hashes: 1: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl (hash: 6g5H8JgbWtgYkrK2IFqPupzYAfpH8kqqUCFE19jisq4=)
2: 326131313a663263303a666665333a3a2f34382d3438203d3e20323131333730.roa (hash: v6P7lVcBcrvneKUvz62ZdwKzn3zDH59Qve86pHfHkj8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:50:f8:2f:85:70:7f:4f:d8:68:58:65:7c:01:f0:23:74:a6:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824
Validity
Not Before: Jul 24 08:44:26 2026 GMT
Not After : Jul 25 10:20:26 2026 GMT
Subject: CN=65FCFC75E2D867B7D303A6F0FAC160D520B06D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:64:a7:a6:ff:14:de:d6:82:12:47:85:29:
b8:6f:36:71:78:c4:f7:f0:75:47:57:8c:38:b4:db:
96:0a:9a:1c:21:57:0d:6e:a3:05:62:b7:a7:62:8b:
88:75:1f:49:6b:7d:9d:89:b5:80:b2:21:49:70:47:
ee:80:b3:dd:99:b6:56:6f:78:b4:6a:a1:4e:97:df:
0a:e0:60:0b:d6:52:66:d5:ca:5c:01:b4:87:6f:ed:
8d:d8:66:c2:59:4e:0e:90:76:cd:16:73:cf:05:6f:
2d:b2:e3:0c:8f:6e:67:d3:2f:36:18:4a:ea:66:cb:
5c:72:b9:e9:30:47:a2:df:23:4b:06:14:99:32:2b:
38:02:d5:62:95:21:74:0c:a3:54:2f:31:89:3e:d6:
01:25:89:f3:70:e1:0c:2d:90:00:31:68:f4:43:37:
84:38:e9:70:60:b0:7a:4e:c8:2f:d1:ee:1e:74:4d:
cf:21:db:dc:83:0c:2f:32:f1:35:5e:73:76:5d:d2:
d1:33:23:8b:93:f5:81:d1:cd:3e:a0:39:4a:99:b9:
e5:8a:6a:15:60:5c:b0:f9:c8:ea:41:1d:38:e5:4f:
9d:54:01:56:ab:87:5d:87:9a:36:1a:05:83:c5:88:
f4:97:40:86:f9:97:2a:2c:62:ae:f6:90:d2:96:9b:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FC:FC:75:E2:D8:67:B7:D3:03:A6:F0:FA:C1:60:D5:20:B0:6D:17
X509v3 Authority Key Identifier:
keyid:3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:8d:9d:c3:53:78:46:9a:cb:10:26:8d:7d:ef:7a:6c:5d:
34:1b:6e:c8:fd:35:88:9f:7b:b9:1a:40:ad:f7:9b:90:dc:3c:
b0:fd:55:65:4d:6b:54:f4:97:3f:c2:80:82:aa:5b:e6:15:8d:
a4:5a:c4:28:39:86:a5:1b:03:fa:ec:27:13:7d:a0:8a:75:44:
c2:fc:35:05:fa:7b:4b:fb:77:71:98:00:82:04:dd:3a:08:ef:
96:24:d7:59:6d:13:40:52:3b:66:af:1e:3f:23:27:9a:65:38:
28:1b:07:ff:70:71:b3:ad:0e:89:0d:25:91:e8:a2:e0:27:89:
79:6f:3a:17:46:45:78:43:c4:ee:2d:d3:31:bb:57:66:b3:2b:
f8:7c:64:03:2f:1c:0d:ff:51:c2:4a:cd:27:15:b2:47:2d:61:
e2:cf:55:96:1b:73:7d:be:ea:1e:d2:75:ff:df:5a:06:62:e0:
65:17:7e:ba:a9:06:c6:67:67:29:9e:bc:01:ab:39:5e:88:41:
ca:e7:18:b7:f5:f3:63:c4:e7:5c:93:ec:ad:b3:98:82:a7:62:
d0:01:94:38:c5:f4:d8:7d:90:f2:a6:85:63:dd:a3:40:12:f6:
2d:15:72:7a:9f:b6:37:41:6e:4b:64:d0:a6:d7:eb:57:e3:3a:
7a:4b:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:10 2026 by rpki-client