
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json)
Hash identifier: VYKyqqetMAclG9gDBAS6YIpP5neMo/i8iMYfvrAr7Uc=
Subject key identifier: D0:49:80:39:5A:4D:53:D8:66:CB:00:C8:FF:EF:F4:1A:CB:DC:C1:1B
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial: 5F1CCE0BE6F972A1EC119C563E82AACE62790874
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
Manifest number: 0304
Signing time: Thu 17 Sep 2026 15:27:39 +0000
Manifest this update: Thu 17 Sep 2026 15:22:39 +0000
Manifest next update: Fri 18 Sep 2026 18:34:39 +0000
Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: /Ia++O5Bn/zUDvMCSJVs+wh/c+7il4kr2pnNq7RVJ9A=)
2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1c:ce:0b:e6:f9:72:a1:ec:11:9c:56:3e:82:aa:ce:62:79:08:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Validity
Not Before: Sep 17 15:22:39 2026 GMT
Not After : Sep 18 18:34:39 2026 GMT
Subject: CN=D04980395A4D53D866CB00C8FFEFF41ACBDCC11B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:e6:35:40:fc:53:cf:30:77:a6:c8:6b:76:
f1:fe:6e:06:e8:a2:c4:6d:5a:fd:86:71:5b:83:bd:
40:96:69:aa:ca:56:4d:58:64:cb:93:87:e9:dc:4f:
f0:65:74:c4:96:75:fe:81:f3:17:6b:aa:6e:b4:66:
3e:3d:ba:f5:9c:01:b9:67:50:1f:67:73:fe:a2:32:
04:a9:19:4d:e0:67:bc:77:c3:68:d5:2b:1a:4b:c7:
68:a3:64:9f:6f:9b:23:db:57:fa:6b:bc:f5:56:34:
5d:fd:7a:a7:a1:f2:ae:7a:58:ce:ea:63:a8:40:5a:
8c:7f:40:b3:a4:db:01:ef:2d:f9:36:56:6d:ec:bd:
14:f2:16:c1:83:8d:74:af:30:99:52:f1:d6:6b:9e:
1d:05:b7:72:ad:d2:d8:fa:65:02:52:d8:20:1e:1d:
2c:33:c7:02:cc:0b:81:30:2c:d2:e4:ca:ca:c1:49:
32:fc:d9:f1:c4:fc:14:b0:02:fa:64:ff:11:1e:c2:
e1:71:52:9d:49:ba:5a:fe:a3:a6:de:9c:34:10:10:
8e:c7:c8:d3:f2:52:26:39:22:01:88:f1:1a:d7:7d:
1a:b1:4b:4d:da:2a:81:e4:38:2a:42:2e:76:c8:38:
19:ae:29:51:37:25:9d:42:d0:b3:f7:14:34:ec:04:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:80:39:5A:4D:53:D8:66:CB:00:C8:FF:EF:F4:1A:CB:DC:C1:1B
X509v3 Authority Key Identifier:
keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:9d:8e:8f:e7:88:54:83:9d:30:47:ac:15:c4:a6:e0:f6:
74:d2:20:22:e7:47:82:23:e8:fb:63:ed:0c:6f:e5:6b:c7:fc:
76:7b:55:88:24:13:4d:0d:df:75:7c:49:2d:2b:81:63:e5:8a:
d2:c2:ce:23:7c:36:b2:f7:e0:7e:78:48:a5:d2:c8:84:da:94:
f1:da:ac:3d:53:af:15:4d:8b:02:83:6a:34:f4:04:67:78:18:
cc:28:75:17:74:46:05:c5:01:7f:56:e2:60:48:33:75:6d:f9:
f9:63:15:aa:54:e4:22:75:2c:cf:71:27:35:fe:8a:64:0c:28:
24:28:ec:04:66:fd:4c:38:d0:e5:a5:96:3e:ae:d5:23:04:28:
49:f8:64:7b:f4:6e:d4:68:10:79:c0:e1:2a:09:1e:44:39:23:
dd:a0:4c:55:2b:7c:70:b1:ca:4c:25:3f:79:c5:95:7f:72:cf:
11:5c:2a:5a:95:59:0e:ac:ad:b9:0e:ac:45:b0:14:c1:73:43:
f8:5e:cb:cc:3a:dc:1c:fb:16:f0:62:a3:f4:c5:05:3a:2f:67:
57:02:7f:e6:76:89:7d:85:00:82:52:07:fc:77:a4:cd:f6:2e:
d6:42:9f:2f:8d:2d:d2:b0:35:04:11:ec:ae:67:66:88:0a:96:
e1:fd:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:44:57 2026 by rpki-client