
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json)
Hash identifier: UnSZmhPg3fX8VJlPO9Sfreim6M+C8U7UPt0sMBxji+o=
Subject key identifier: 84:8F:F6:27:F9:C5:66:EE:0E:AE:C1:29:36:73:69:A4:2D:06:8A:6F
Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Certificate serial: 4C97FC3A4491CBE5AFCFBFFC59C6221594B353FF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
Manifest number: 02FB
Signing time: Fri 13 Mar 2026 19:01:29 +0000
Manifest this update: Fri 13 Mar 2026 18:56:26 +0000
Manifest next update: Sat 14 Mar 2026 22:10:26 +0000
Files and hashes: 1: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=)
2: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: gb/JMTV3lwaIVkIJnw+IN3I6F6erYqIZU2Z4kbR8f4s=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:97:fc:3a:44:91:cb:e5:af:cf:bf:fc:59:c6:22:15:94:b3:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Validity
Not Before: Mar 13 18:56:26 2026 GMT
Not After : Mar 14 22:10:26 2026 GMT
Subject: CN=848FF627F9C566EE0EAEC129367369A42D068A6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:25:31:02:86:f3:b7:4b:84:6e:8c:5e:e3:
7f:af:05:39:fc:f3:9d:7c:00:3e:ba:43:86:9e:9b:
89:65:57:6c:8f:99:44:0d:1e:1c:9f:fd:61:7f:b7:
89:7a:0d:2d:54:2e:a2:c7:61:0d:37:68:a0:18:0a:
44:03:b7:fa:42:c5:85:b4:d1:4a:76:a7:50:90:44:
6a:94:c6:16:9e:27:f2:11:8f:c8:48:38:4d:db:19:
d6:bb:17:47:22:79:3d:e7:00:32:5a:e0:a9:3c:4a:
19:92:6f:8c:c8:73:31:db:91:d0:18:2f:c3:87:51:
fd:fb:54:3a:bb:62:4b:12:8a:a5:50:0b:dc:be:59:
66:08:d4:bd:85:c0:9b:67:db:f2:9f:0c:2d:c5:3e:
da:f9:f0:5b:81:91:f5:dd:ec:a1:ce:ce:33:d1:4b:
cc:18:45:9b:23:57:08:ae:ed:d6:33:db:f4:99:75:
d0:98:87:49:54:99:4c:f2:97:d1:1d:b1:a1:81:f1:
ef:33:68:f7:f8:f2:10:bb:5c:43:5e:6a:ff:ef:3f:
55:70:29:ac:3a:21:98:c8:32:81:d7:06:ea:f6:71:
67:a3:16:74:0f:83:8f:4f:9f:50:7d:e9:18:5c:8e:
66:e2:cf:68:ba:59:89:02:fd:df:ae:95:c2:64:bd:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:F6:27:F9:C5:66:EE:0E:AE:C1:29:36:73:69:A4:2D:06:8A:6F
X509v3 Authority Key Identifier:
keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:0a:eb:03:b3:75:8b:4f:8a:07:66:ae:ac:1a:29:93:ea:ab:
d6:b8:be:5d:60:1f:6f:73:e4:f2:e8:9f:e6:8e:3d:2d:b5:76:
91:0d:70:0c:ca:51:11:dc:88:ec:ba:ba:95:57:e2:65:97:71:
49:62:59:17:a9:01:22:20:c3:87:21:fb:64:e5:b4:72:7c:57:
e0:46:d5:f9:65:2a:71:b7:99:73:38:5e:cc:3a:ad:76:07:2b:
59:4a:19:e2:49:a6:4e:c8:95:d5:44:8b:f1:1a:82:16:f3:c8:
92:99:72:51:1e:7b:e3:3b:c7:a8:3f:ef:06:36:15:8c:8c:99:
cd:15:1a:54:e4:8e:39:68:4b:65:82:f2:56:0a:f7:00:21:7b:
40:86:7e:24:79:f2:d9:f1:26:f4:7c:f1:fd:21:9e:e6:8c:05:
81:e2:83:33:87:51:9b:cb:f4:86:fa:aa:e4:37:3e:54:2d:c8:
d9:10:dd:4a:1b:2a:3e:ed:05:f5:e9:b7:45:fd:94:cf:d9:a4:
65:60:2f:bf:02:eb:d4:4e:f3:f5:cd:df:01:9f:56:5a:d1:ac:
9f:1d:81:64:74:37:2a:36:be:fd:36:10:03:a6:99:91:60:a3:
1f:91:73:69:9c:dc:c1:50:ba:35:d4:35:06:34:87:36:20:da:
18:5f:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:40:20 2026 by rpki-client