Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: 4wyjpozY25zqxIZ2qOmtMqvJtx96UwTd++oJ3rJVJ0k=
Subject key identifier: 8E:CF:E0:F5:8E:DF:BA:0D:D2:59:EE:19:B9:33:AD:A6:3B:0E:EC:A8
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 78941984F57B18BA664F5B04D701B7B16100612A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 030B
Signing time: Sat 28 Mar 2026 23:04:12 +0000
Manifest this update: Sat 28 Mar 2026 22:59:10 +0000
Manifest next update: Sun 29 Mar 2026 23:48:10 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: 6YZifVWZdaFjmbQBTlk5aiFJuTe0fkuuFjxuSgnv58I=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 23:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:94:19:84:f5:7b:18:ba:66:4f:5b:04:d7:01:b7:b1:61:00:61:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Mar 28 22:59:10 2026 GMT
Not After : Mar 29 23:48:10 2026 GMT
Subject: CN=8ECFE0F58EDFBA0DD259EE19B933ADA63B0EECA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:ab:cb:a0:01:2d:f1:1f:bd:6b:8d:29:11:
9f:fa:e6:ae:8a:01:c3:a5:97:95:d5:52:90:4c:55:
b5:1e:0f:f9:e3:38:07:12:90:74:8b:7e:45:fe:78:
4f:9a:2c:35:76:a5:2c:52:07:fa:26:d4:4a:4d:3c:
8e:92:d3:89:c2:d8:6c:45:1c:e1:8e:7a:da:90:90:
4f:22:49:e1:60:66:d5:8d:66:8b:5b:83:b7:4a:75:
48:25:e8:97:a0:a3:7f:80:06:26:24:74:47:c6:78:
bb:76:d6:07:01:b6:d5:0f:0e:4b:fa:f5:73:2a:6b:
33:b8:35:f2:d5:54:57:92:ec:6c:36:63:27:fb:74:
7b:a3:7f:00:41:32:36:44:76:b2:ad:5d:4c:d1:c4:
41:4c:e4:4f:46:c4:2a:d0:f9:53:93:5b:a8:79:20:
ba:b2:8d:56:a8:00:5d:f5:01:f2:73:49:36:91:6b:
81:80:02:fe:2c:7c:0a:c9:7f:96:87:11:f3:f2:a0:
b5:26:5f:72:f4:5d:ea:e9:09:01:db:e7:18:5c:8d:
33:82:65:4e:b9:fd:40:77:6e:fe:65:0a:c9:37:52:
c1:44:f5:b5:91:69:5d:48:8a:4d:ad:16:8d:44:f4:
bf:5b:09:88:94:fb:73:e8:bd:ce:4e:6e:41:df:5d:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:E0:F5:8E:DF:BA:0D:D2:59:EE:19:B9:33:AD:A6:3B:0E:EC:A8
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:17:16:23:bc:9b:d6:be:31:f4:29:0f:ad:87:11:2a:bd:88:
bf:89:ae:a9:2b:66:3e:3f:d6:3c:ba:a9:4d:0c:05:11:f1:c2:
17:fb:02:52:dd:ad:e3:61:35:d0:38:87:2d:26:38:ca:a5:65:
d0:dd:b2:1a:13:b1:f2:3d:6d:62:ea:25:94:78:a2:71:2b:3e:
be:1e:64:e7:ed:a2:20:4a:d5:7b:b9:8d:dd:75:e6:2d:88:e8:
4a:1f:df:92:c5:08:7f:5b:16:bc:27:5b:0b:0f:83:52:ec:07:
0e:ec:a7:90:bb:86:a3:47:cc:b5:e3:d1:2d:9b:16:68:a6:78:
63:5e:4b:c0:79:0f:fe:b5:b1:08:60:4e:8b:e4:8c:1b:1a:c0:
a8:53:27:2a:e8:34:94:2a:1b:ab:2b:35:ec:e6:b9:6e:ae:4f:
e1:8a:05:be:79:3d:99:23:44:01:df:73:10:02:92:15:65:db:
83:c9:3a:2a:d3:23:b0:90:82:ee:e1:08:90:2e:4a:07:33:ee:
e6:68:9c:17:fa:b5:68:bc:64:4d:1f:05:4b:3a:e3:e2:fa:a5:
37:d6:a9:9e:c5:0d:95:c2:a0:6a:87:4e:f6:54:bc:aa:ce:5d:
da:bc:b9:53:ac:f3:4b:25:7c:be:25:4f:8e:7e:1b:6e:d9:e0:
ad:ff:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client