
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: 1RZncRRQV4qBcUsafSTcXrGrepZ+dVa5hoRWXlPZD0A=
Subject key identifier: 05:B2:A9:22:58:5F:84:96:04:6E:31:61:A1:20:9D:11:96:ED:E7:E5
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 3BFC072E69541257D4FCFD4F9B8AF982DCC89AB8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 02F8
Signing time: Fri 13 Mar 2026 11:51:03 +0000
Manifest this update: Fri 13 Mar 2026 11:46:01 +0000
Manifest next update: Sat 14 Mar 2026 13:23:01 +0000
Files and hashes: 1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: GRhSqZj3T9IkenDKf+6D6EqGcXiCK9/jcShQm4fgCV4=)
2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:fc:07:2e:69:54:12:57:d4:fc:fd:4f:9b:8a:f9:82:dc:c8:9a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Mar 13 11:46:01 2026 GMT
Not After : Mar 14 13:23:01 2026 GMT
Subject: CN=05B2A922585F8496046E3161A1209D1196EDE7E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:4f:6b:24:d9:9c:b2:e9:00:a2:0e:2f:15:
9d:80:06:a9:95:8b:09:9c:18:d7:b4:10:83:f3:e8:
da:77:2c:64:42:c4:16:c7:18:aa:59:0c:2a:1d:1f:
11:5d:41:17:02:af:b8:70:ca:6f:3f:4e:9a:4c:e1:
92:b5:e1:96:4e:a7:7e:87:f2:6b:62:dd:e4:00:31:
ce:f5:71:d4:eb:69:2b:69:86:f2:e2:54:c4:c6:f7:
6e:0f:32:90:df:c8:75:1a:28:10:6c:53:eb:0a:4e:
d8:8f:00:b9:5e:a6:1a:47:57:11:42:9a:12:dc:53:
ac:55:e3:e5:a7:a4:26:75:35:13:e5:4f:c7:e3:98:
c8:eb:47:90:f4:2f:0d:f7:13:3b:b5:cb:df:b2:62:
31:9d:67:d0:4d:c9:34:33:f7:23:86:04:e6:be:a7:
9a:9a:33:75:3e:04:e6:36:54:2d:3c:09:30:6e:a8:
96:aa:99:a1:4e:78:4a:24:5a:a9:78:2c:49:d9:ba:
6c:7f:d4:00:76:cd:ff:99:4d:57:8e:6d:16:47:0e:
5d:f7:2d:16:6d:ed:05:7f:81:e6:af:2d:70:68:45:
a6:c5:7d:cf:e7:35:aa:b3:b5:20:79:41:28:06:a2:
0c:b9:94:a8:17:77:82:e4:e0:d1:60:4c:7d:f5:9b:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:A9:22:58:5F:84:96:04:6E:31:61:A1:20:9D:11:96:ED:E7:E5
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:66:52:bb:91:73:02:73:37:9f:63:c8:81:d3:3a:b1:34:
2f:30:32:9c:cc:c0:1e:4b:c6:03:53:89:55:9c:25:11:a4:d6:
4f:b4:85:15:29:d6:ec:8b:84:46:7a:8f:79:f7:b9:1d:f3:2c:
81:b9:57:6f:cb:3c:d3:d5:0f:2f:6d:d1:a3:f9:67:68:78:37:
42:c0:95:92:c0:e2:08:ae:32:e9:c5:82:94:89:cb:55:01:27:
b6:75:dd:12:79:39:a0:11:14:13:e6:4a:43:ec:a3:36:64:e1:
87:a2:db:b6:6a:68:61:dd:36:cc:c4:c3:ca:91:d1:9e:96:3c:
b7:64:0a:48:43:1d:3b:27:85:fc:d9:d1:b3:f6:04:fd:5b:5e:
c5:5c:04:8a:5a:d0:96:11:05:57:61:ad:0c:e2:6d:7d:a4:37:
b5:69:cc:e8:73:7c:5c:36:74:e5:fa:9e:14:71:1c:57:06:d2:
6d:00:6a:32:3f:43:e9:03:7b:c1:eb:2d:30:0a:0b:81:33:f1:
ee:f9:2b:05:ad:cb:ad:93:fb:2b:12:fb:ef:99:25:63:71:4f:
02:b9:17:62:40:41:cd:19:9c:6c:c5:f7:44:6d:20:3e:40:5f:
21:df:7f:8b:82:85:af:09:be:b9:81:bf:86:0d:c3:3d:d8:0f:
c9:a6:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:42:39 2026 by rpki-client