
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json)
Hash identifier: CfKoVYcNmEqPTo1dI6Q/VmqR9r9oYgsfRjQURzkBN2Q=
Subject key identifier: 95:57:6F:D8:3D:E6:77:E8:03:E7:9E:B2:D9:FF:37:87:E4:86:4D:83
Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Certificate serial: 678714705A1D63751C6954ACCF8559BE2D112B6C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
Manifest number: 0372
Signing time: Sun 14 Jun 2026 22:17:42 +0000
Manifest this update: Sun 14 Jun 2026 22:12:42 +0000
Manifest next update: Tue 16 Jun 2026 01:02:42 +0000
Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: AM9VAMtpLHEx/oVKuvgW7t5YZbVYq2ZeL0XyKu3OtMU=)
2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: tLThUwSwrPfCypAsdBnMMAhmoYAyEUY8DuOIJQne5ZA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:87:14:70:5a:1d:63:75:1c:69:54:ac:cf:85:59:be:2d:11:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Validity
Not Before: Jun 14 22:12:42 2026 GMT
Not After : Jun 16 01:02:42 2026 GMT
Subject: CN=95576FD83DE677E803E79EB2D9FF3787E4864D83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:5d:ad:86:32:a4:65:e0:24:31:27:ac:1b:
c6:2a:f2:c0:98:f4:7b:bd:3e:d4:bc:b8:38:65:e9:
9a:d2:a6:32:d2:bc:c0:aa:80:47:14:0f:58:b3:62:
d6:cb:da:98:58:1a:ee:f8:d6:58:3a:04:1d:9d:97:
ee:5f:e2:ef:b8:56:41:41:0b:dd:44:ee:f4:8e:f9:
aa:47:53:01:67:8c:d7:14:12:df:15:d0:b5:1a:a8:
90:1d:09:10:bd:9a:d0:89:e3:0c:38:2b:91:47:f2:
26:75:de:72:c0:df:70:e9:dd:ae:e0:d6:0c:d5:b8:
20:32:a3:c0:f6:29:39:6e:34:a8:21:44:ab:e4:41:
37:9e:93:43:f4:b2:d4:b0:12:86:17:98:30:90:9c:
1e:6e:8e:12:d6:ef:a9:9b:55:9c:92:92:b2:2d:22:
6c:05:a7:3b:e7:94:27:a0:09:8c:1d:0b:2f:b2:f3:
fc:58:dc:ae:09:d0:c8:a0:9b:c8:37:3e:e5:37:d3:
83:05:fb:83:7d:30:97:d3:5e:e5:b7:7c:e4:59:2e:
d9:a6:eb:6b:e9:6a:75:2b:f4:b9:51:63:65:7a:95:
aa:8b:75:3e:d4:2a:87:a7:e3:eb:ae:52:05:7a:41:
0e:38:e9:1d:cc:2f:9d:3a:2a:cd:85:58:24:8a:80:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:6F:D8:3D:E6:77:E8:03:E7:9E:B2:D9:FF:37:87:E4:86:4D:83
X509v3 Authority Key Identifier:
keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2b:dc:57:03:a6:b9:f9:2a:a1:8a:11:b7:86:9a:eb:d2:c2:
2c:2a:a1:f2:9d:98:27:83:c2:bb:6b:eb:5c:5d:89:06:5a:06:
47:9c:6e:c6:d5:c5:6f:b3:dd:f2:b6:83:67:2d:97:77:ef:e3:
e6:3b:85:a6:c0:53:27:8f:2d:16:45:42:c0:a2:54:83:f1:d8:
8f:26:31:5d:d2:fa:e7:3d:fe:96:86:f6:80:93:96:f7:32:11:
a1:5e:7e:83:63:74:f2:10:34:f8:ff:f3:78:6c:b0:3d:06:05:
a1:e7:92:3e:7e:30:87:4d:2f:06:bd:05:63:13:03:11:2a:1f:
0d:49:89:dc:bc:5a:ee:84:c9:06:17:4d:00:f1:0c:8b:85:f0:
04:77:20:47:b1:e7:86:b3:a0:cf:ae:2e:ef:e0:a5:f6:94:6b:
19:01:ab:e6:1e:85:f6:51:ce:a0:c1:91:8d:9d:4b:c9:a9:47:
89:0a:1e:a9:86:31:9f:6d:cb:87:07:a8:aa:86:6f:b2:51:be:
ee:bb:43:5d:dc:ea:e2:b7:8e:9b:df:6b:8c:36:5d:1b:19:dd:
5b:c7:3e:0b:5c:6a:ae:50:c4:d1:bb:0e:70:d9:1d:f4:6b:6a:
29:d2:12:5f:2b:b7:d4:d2:af:71:9b:71:8f:f8:e8:90:be:fc:
8c:14:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 06:24:29 2026 by rpki-client