
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json)
Hash identifier: E5G4RwGWfgsjIeYSQrqihKO6sVFL5NNZQNoJcgdiUEs=
Subject key identifier: 4D:D0:99:B1:30:BA:21:0C:D6:E4:8A:8C:7B:30:9E:DD:0B:08:B2:51
Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Certificate serial: 4DB7B4F199A30E79A8B05934A98BB84C5336B168
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
Manifest number: 03E2
Signing time: Thu 17 Sep 2026 10:56:18 +0000
Manifest this update: Thu 17 Sep 2026 10:51:18 +0000
Manifest next update: Fri 18 Sep 2026 12:59:18 +0000
Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: zeeQ3+te9SJGAb8Pc8yyfTVe5qzrzQx4STrWD5VTgo0=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 12:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b7:b4:f1:99:a3:0e:79:a8:b0:59:34:a9:8b:b8:4c:53:36:b1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Validity
Not Before: Sep 17 10:51:18 2026 GMT
Not After : Sep 18 12:59:18 2026 GMT
Subject: CN=4DD099B130BA210CD6E48A8C7B309EDD0B08B251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:48:fb:e8:49:25:11:9c:25:f9:84:09:e2:
6c:35:d6:32:ef:d2:ad:5c:ef:5e:c4:14:60:44:ed:
22:f7:fb:26:3c:58:0a:30:5a:fd:26:a8:83:53:d7:
ab:a2:15:a6:08:4f:98:28:a0:c4:42:30:b5:89:c2:
8b:2e:8e:81:8f:59:96:7b:46:23:59:e7:ca:32:e5:
d2:06:71:8d:20:ac:97:18:b4:2e:14:db:b8:08:37:
03:aa:b4:75:27:51:eb:21:69:8e:6f:8f:02:65:b7:
22:e3:fb:d9:d6:09:9a:99:98:48:69:19:8f:f5:90:
d8:6d:27:6e:73:54:86:7e:6b:97:b4:ed:98:18:b1:
d5:a0:96:67:03:67:40:79:1b:93:ba:0b:63:de:06:
da:cd:e5:ea:42:4a:e4:d4:40:79:ea:f7:40:f1:93:
e1:b2:27:39:23:7f:17:53:97:eb:fb:d3:93:ee:7e:
6d:72:b7:3c:5e:6f:16:44:eb:13:bc:4b:99:e1:6f:
36:c9:62:b3:4f:72:d1:1d:1d:a5:d7:95:62:af:3e:
af:ae:5c:02:31:da:5b:26:6c:a5:f4:14:80:5f:a2:
9c:cc:32:91:54:dd:d0:f5:14:1d:96:c8:d2:4e:18:
37:8a:7d:33:a5:dd:99:f5:1f:73:9f:43:a0:22:0a:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:99:B1:30:BA:21:0C:D6:E4:8A:8C:7B:30:9E:DD:0B:08:B2:51
X509v3 Authority Key Identifier:
keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5c:c9:8c:62:dc:e8:4f:ff:ef:7f:68:90:1f:40:b5:ca:80:
40:01:d3:7b:2c:63:a3:35:6f:b2:2a:b1:3c:ef:bf:b7:ad:60:
52:8a:bd:db:ac:13:02:7b:b8:ab:9a:37:41:a9:ff:fb:c7:bf:
22:08:95:f3:e1:49:d9:17:be:75:a6:f2:f7:bc:36:bd:20:d5:
ce:22:bb:28:e7:1b:af:e1:0f:10:93:a3:15:09:8a:c1:62:2f:
e1:fb:15:54:87:a6:47:11:5c:3b:66:42:d1:20:98:16:9a:38:
61:0c:13:cd:d0:ea:c0:4a:9f:8f:36:1f:d6:c3:67:ac:0d:54:
77:57:15:e2:1d:9f:2a:60:5d:f7:85:54:30:de:ba:2d:76:64:
f2:5e:f1:7a:7a:7b:86:1a:ea:b6:8a:5a:73:76:c2:e7:02:38:
50:03:4d:8f:58:15:90:fa:27:cb:46:1b:9b:bb:ac:bb:bf:9c:
d2:e0:83:4e:82:76:ed:22:4a:78:78:e7:d3:e2:75:ab:96:22:
1f:ff:15:ee:63:6d:54:a3:6b:48:61:1e:c6:d2:95:a1:f0:b2:
f8:0c:32:4d:3f:97:92:5a:3e:81:c5:3e:ad:8f:fc:a9:c7:4e:
2c:c5:dc:7f:fc:01:36:5c:57:41:02:3d:a0:dd:1a:8f:70:31:
f6:22:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:41:50 2026 by rpki-client