
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json)
Hash identifier: 5bJHcQVrug7pE02fSnQfQhupBlrmyc76FL5mDrxFsPc=
Subject key identifier: CF:78:BD:B7:BC:B7:53:D8:B2:27:25:BD:9D:79:F7:79:B7:AF:16:E2
Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Certificate serial: 4308342FE93BC395D1B2744DFD79B4662FB6C3E8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
Manifest number: 0344
Signing time: Tue 12 May 2026 20:53:53 +0000
Manifest this update: Tue 12 May 2026 20:48:53 +0000
Manifest next update: Thu 14 May 2026 00:11:53 +0000
Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: o/j/mpjEhWtSyClDIdjVlPj9zcHjm4HqBgiXaykDXrQ=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:08:34:2f:e9:3b:c3:95:d1:b2:74:4d:fd:79:b4:66:2f:b6:c3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Validity
Not Before: May 12 20:48:53 2026 GMT
Not After : May 14 00:11:53 2026 GMT
Subject: CN=CF78BDB7BCB753D8B22725BD9D79F779B7AF16E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:14:2e:69:e3:54:b3:06:b3:10:20:98:88:
fc:1c:bd:ce:00:4c:6b:c2:ed:31:60:aa:63:c0:b4:
06:92:ba:98:92:cc:70:81:6e:33:ec:38:6a:fe:bd:
a2:4f:72:3c:49:27:69:f7:94:b7:92:90:7d:6d:59:
b3:09:5f:58:86:1f:ac:d4:ae:3d:d2:75:04:2b:60:
34:33:72:66:a3:80:6e:26:f1:3f:f4:b1:e0:88:f0:
0a:20:ce:cf:e6:98:cd:f2:41:e9:7d:75:7a:39:2a:
d5:0b:c4:aa:4f:4a:e3:d8:ba:63:4b:79:ea:0c:f5:
3e:f0:db:3f:a3:50:03:e0:79:4e:f5:29:98:a2:bd:
ec:45:a9:5b:9a:01:8a:96:1c:4e:4f:1d:65:d2:01:
8c:62:cf:27:f4:c3:d8:bf:30:7f:06:bc:b3:23:9b:
ae:d8:50:70:35:75:1c:3c:c1:45:c3:df:37:bf:cd:
ab:ac:cd:c9:b5:c5:b0:84:74:5d:5b:ef:ef:0a:b7:
d6:ff:1f:c2:7b:10:ef:d0:4c:ff:8e:ad:44:85:e2:
00:d6:32:c5:be:32:e7:bb:e3:ab:85:a1:3d:d3:93:
89:12:3a:aa:ff:80:d8:bd:bc:f7:98:18:b0:50:ea:
dc:86:72:4d:92:d6:b2:f1:6d:12:62:a9:cc:5f:fb:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:BD:B7:BC:B7:53:D8:B2:27:25:BD:9D:79:F7:79:B7:AF:16:E2
X509v3 Authority Key Identifier:
keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:94:95:ba:59:41:c3:7d:29:2e:ee:6a:9d:e6:6a:d2:28:76:
e9:24:4c:ad:11:3a:ec:cd:16:21:31:13:69:b9:c9:55:b1:ce:
f4:63:90:4e:f4:f9:e3:ff:7a:fa:c5:cc:be:16:6b:e7:68:31:
fc:e2:e7:32:a5:3d:e7:6f:df:c8:bd:5c:16:5a:3a:ce:40:09:
ec:ba:ab:2f:a4:87:a9:da:ba:55:90:6d:df:a2:91:b5:96:dd:
0c:54:a3:80:64:c1:f2:5e:4f:2f:48:1b:be:5a:cd:6d:4f:90:
48:5f:24:ee:07:dc:09:54:a5:70:6f:22:f8:94:72:db:68:ea:
55:5c:9f:8e:a3:30:25:11:38:ac:ad:16:57:74:04:6e:46:0f:
62:03:1f:6e:a9:07:71:0b:91:96:4a:f7:f7:85:a0:50:08:15:
42:b4:82:b2:47:aa:02:3b:b1:7d:96:d9:66:d6:48:11:82:dd:
8b:c9:cb:07:7c:5c:e1:81:c5:43:da:fe:3f:02:da:e9:7f:c2:
4a:45:fb:54:d3:5a:3b:18:6b:1c:d1:57:0d:e8:ef:d7:88:4f:
35:86:c7:0f:65:a8:c3:e0:88:dd:2a:b5:6c:f7:0a:9c:53:0c:
59:1f:f1:fe:ec:37:b9:6e:74:75:62:0e:09:a8:cc:f7:41:7d:
f3:14:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:17:16 2026 by rpki-client