
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier: zRzjQXeZsh+QYXv0yU3/Zze9KU/jqC/+jyUeDnQ2LvI=
Subject key identifier: CB:F6:0E:A6:38:8B:62:2B:0C:8A:91:60:65:77:50:CE:87:63:63:28
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial: 45A30050B684EC56AE3F8151259951F9CE1DA50D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number: 0307
Signing time: Wed 25 Mar 2026 18:12:57 +0000
Manifest this update: Wed 25 Mar 2026 18:07:55 +0000
Manifest next update: Thu 26 Mar 2026 21:48:55 +0000
Files and hashes: 1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: IzoYUDntdiZSrgNva+c4LPBN45A2moGA5WCSnmdVdfs=)
2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a3:00:50:b6:84:ec:56:ae:3f:81:51:25:99:51:f9:ce:1d:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Validity
Not Before: Mar 25 18:07:55 2026 GMT
Not After : Mar 26 21:48:55 2026 GMT
Subject: CN=CBF60EA6388B622B0C8A9160657750CE87636328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:70:1f:d5:0f:cb:1c:58:6e:9b:16:26:cd:
a1:09:e4:33:a0:22:cf:a8:ad:3c:9c:08:08:24:ba:
da:53:4e:5a:ea:ff:b4:06:15:fe:df:83:66:d8:51:
78:33:3e:27:e0:d3:fb:82:56:cf:d3:81:2d:10:d5:
1b:d1:97:59:9b:8e:f3:24:31:97:51:55:67:14:d3:
c9:84:cc:73:a2:db:8d:a4:17:3d:ad:11:34:51:9b:
f7:3c:8b:c7:a4:2e:14:de:1c:50:4c:2e:0c:7c:4c:
30:9a:9e:cc:f0:0e:e5:dc:fe:18:bd:a5:33:ab:24:
d6:07:1e:c5:73:96:13:0e:b0:86:05:e1:7b:49:2d:
eb:2c:56:60:9e:1b:6e:51:46:c0:29:79:d0:00:46:
79:bb:b1:cd:4b:72:cb:77:0b:85:01:f1:aa:aa:9e:
47:00:24:5b:40:2d:38:a7:34:c9:d7:c8:57:19:00:
57:96:a8:c8:fd:9b:5a:0f:72:5d:b6:47:75:bb:c7:
40:e5:c7:95:93:14:07:da:9e:ec:97:e0:12:73:2d:
ed:c1:0c:d1:f4:a0:cc:a2:d8:52:d2:b9:06:0b:cf:
46:ee:3b:e7:69:9e:e4:56:ca:14:78:7b:66:91:ab:
c2:66:06:43:a8:6f:04:f4:d2:97:3c:20:2a:5d:f3:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:0E:A6:38:8B:62:2B:0C:8A:91:60:65:77:50:CE:87:63:63:28
X509v3 Authority Key Identifier:
keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d9:3c:c2:a2:a5:82:86:e1:eb:ce:28:ca:d4:51:bc:a4:5e:
39:7a:fb:1f:db:ba:ec:e3:37:8e:32:dc:3f:43:d4:c5:fb:15:
77:cb:d2:14:33:c5:f7:e0:f8:67:fc:08:8e:83:a3:cd:ff:84:
ac:0f:91:cf:9a:b7:ea:0a:ae:25:58:d6:d3:2b:b2:ad:eb:b6:
80:59:a3:d2:11:04:9d:9f:30:6f:10:76:2e:f3:93:33:1e:16:
7b:92:96:43:8e:8c:19:c2:c8:99:4a:31:e6:cc:2a:93:be:68:
ec:52:d4:e8:49:3f:e2:c2:fa:65:95:d1:b4:4a:24:a9:15:df:
1d:92:ed:7f:a8:b9:c1:4d:c3:c9:18:b7:b9:d6:d3:fb:7f:e3:
d7:1e:08:9e:a0:ca:3d:e1:a2:f0:9d:4c:fa:ab:e8:08:52:82:
05:a2:69:a2:c4:9a:44:55:9f:cf:f7:bc:0d:4f:90:19:0d:e0:
d8:f4:7b:25:1f:8b:6c:12:09:c9:df:be:c9:5d:95:ee:d8:77:
25:50:e2:d1:c4:c6:94:3c:8f:a5:9c:7a:3b:73:77:7b:ec:87:
62:c0:dc:45:dc:ed:f1:fb:28:bb:9f:89:a9:4b:56:b8:5e:c7:
ad:46:5f:99:8a:64:54:a2:69:5d:74:9c:a3:1c:29:da:90:81:
dc:3b:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:40 2026 by rpki-client