
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier: rJfLrko3J51ZxTBX5v6ydpku7Sf2T8wDwiVz+vi4Tyc=
Subject key identifier: F9:85:7F:43:EE:AD:56:BA:90:0B:F5:45:D9:FC:D5:18:91:D6:EB:57
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial: 37FA3186D6910BB6D9360A8AF607EAF4D9498437
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number: 03A5
Signing time: Thu 23 Jul 2026 09:40:37 +0000
Manifest this update: Thu 23 Jul 2026 09:35:37 +0000
Manifest next update: Fri 24 Jul 2026 11:28:37 +0000
Files and hashes: 1: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: S4AvxWBeW9N6hxjfs+wg8xJFVH4YZkZcqcYTTWaj6x8=)
2: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: OVCiJGuNgUmVyQyJSIm3pWh27IUvc3A8AHkCQKHvq2s=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:fa:31:86:d6:91:0b:b6:d9:36:0a:8a:f6:07:ea:f4:d9:49:84:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Validity
Not Before: Jul 23 09:35:37 2026 GMT
Not After : Jul 24 11:28:37 2026 GMT
Subject: CN=F9857F43EEAD56BA900BF545D9FCD51891D6EB57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:cd:eb:10:97:04:9a:1f:d9:7a:0a:fb:1d:
48:a5:2f:6b:96:db:13:a6:3c:20:e8:7c:c5:27:9a:
f4:a4:b1:4a:31:2f:c8:aa:b3:0d:43:87:2b:c1:62:
a0:b1:e4:4b:51:a3:a4:e5:a8:8c:28:8c:3a:93:2a:
84:a9:35:62:06:e3:65:0f:3b:af:f5:0d:1e:f3:c3:
9a:48:f0:68:14:ee:9b:26:d0:bc:09:ab:1f:9b:ac:
85:61:9d:c2:d4:ff:0b:39:3a:6b:1b:dc:e4:e5:e8:
e8:18:bf:3c:b4:b1:fc:1c:3f:b2:b9:b6:e1:b4:9e:
39:dc:1d:5d:92:cb:2b:1f:d5:5e:9e:c4:a9:4a:7a:
49:41:e2:38:ef:ca:59:66:fa:7e:12:ee:53:d8:fc:
7e:46:3a:ea:69:19:bc:7e:1d:90:50:48:0c:54:c0:
59:28:9c:49:8c:36:40:f9:ff:f3:c7:f9:3e:34:e2:
c1:c6:f9:75:1a:08:92:7b:aa:5c:34:b4:0c:fa:28:
f6:d2:0c:dd:6d:9b:75:fa:5c:92:3f:3d:5d:d0:84:
69:cf:80:9c:99:99:1e:21:a3:d5:22:84:52:fd:2f:
01:29:50:1f:c0:95:89:13:81:19:de:5c:52:f5:ac:
ff:e2:b2:7e:0c:7c:39:40:a9:e8:f6:d5:db:bf:37:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:7F:43:EE:AD:56:BA:90:0B:F5:45:D9:FC:D5:18:91:D6:EB:57
X509v3 Authority Key Identifier:
keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:19:ca:58:a4:8b:a0:0b:0f:20:e8:47:66:84:f9:79:3d:d0:
4c:dc:18:b9:c0:f4:47:74:f4:50:10:ce:46:37:49:d8:56:7d:
d2:cc:89:39:f4:84:83:8d:5e:a9:8f:a8:06:a5:9f:1d:22:19:
8e:38:34:d4:3b:2e:1b:ab:3b:26:11:7d:74:9b:5a:15:79:03:
19:6c:de:3f:b9:7f:89:74:4b:8e:8b:89:ea:36:ae:86:27:46:
10:cd:b8:56:f5:0f:d8:5c:a7:bf:1a:89:df:e8:5b:8c:06:11:
f2:9f:38:43:eb:d8:f3:ab:1d:e5:1b:35:4b:70:4e:8c:1d:4c:
06:8c:16:92:e1:97:f5:99:f5:90:3a:b4:a9:3e:6c:d3:11:6a:
02:ab:9e:79:dd:25:e9:af:ab:dc:18:bf:86:13:97:a3:d1:ed:
5d:ad:52:84:7a:6b:99:41:c9:80:ca:7c:67:74:37:ab:18:69:
6f:02:3b:af:75:db:cc:5d:3b:d7:92:7a:21:04:c8:7f:01:76:
a7:39:1b:34:03:7f:8a:7a:15:5d:c0:28:58:17:a6:57:27:fe:
4a:ae:ab:45:98:8c:e7:85:ac:44:78:0a:ed:74:af:65:69:e6:
86:98:ce:2a:8b:e2:a8:18:bc:95:c4:07:01:59:d5:eb:fa:df:
92:4a:90:b9
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUN/oxhtaRC7bZNgqK9gfq9NlJhDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD
NkJBNkE0MjAeFw0yNjA3MjMwOTM1MzdaFw0yNjA3MjQxMTI4MzdaMDMxMTAvBgNV
BAMTKEY5ODU3RjQzRUVBRDU2QkE5MDBCRjU0NUQ5RkNENTE4OTFENkVCNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvf83rEJcEmh/Zegr7HUilL2uW
2xOmPCDofMUnmvSksUoxL8iqsw1DhyvBYqCx5EtRo6TlqIwojDqTKoSpNWIG42UP
O6/1DR7zw5pI8GgU7psm0LwJqx+brIVhncLU/ws5Omsb3OTl6OgYvzy0sfwcP7K5
tuG0njncHV2Syysf1V6exKlKeklB4jjvyllm+n4S7lPY/H5GOuppGbx+HZBQSAxU
wFkonEmMNkD5//PH+T404sHG+XUaCJJ7qlw0tAz6KPbSDN1tm3X6XJI/PV3QhGnP
gJyZmR4ho9UihFL9LwEpUB/AlYkTgRneXFL1rP/isn4MfDlAqej21du/Nz7RAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQU+YV/Q+6tVrqQC/VF2fzVGJHW61cwHwYDVR0j
BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv
MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG
NEM2QkE2QTQyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2VjYjM0
YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEzMzlDNUJDQ0U3MDlD
QjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEgZyliki6ALDyDoR2aE
+Xk90EzcGLnA9Ed09FAQzkY3SdhWfdLMiTn0hIONXqmPqAalnx0iGY44NNQ7Lhur
OyYRfXSbWhV5Axls3j+5f4l0S46Lieo2roYnRhDNuFb1D9hcp78aid/oW4wGEfKf
OEPr2POrHeUbNUtwTowdTAaMFpLhl/WZ9ZA6tKk+bNMRagKrnnndJemvq9wYv4YT
l6PR7V2tUoR6a5lByYDKfGd0N6sYaW8CO69128xdO9eSeiEEyH8Bdqc5GzQDf4p6
FV3AKFgXplcn/kquq0WYjOeFrER4Cu10r2Vp5oaYziqL4qgYvJXEBwFZ1ev635JK
kLk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:36 2026 by rpki-client