Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: WXQKATm+FXgY83ANRNXJFbkHwo+X9W2WEkef68E08bk=
Subject key identifier: 6D:40:18:6C:B0:9F:8E:01:13:6E:F8:70:77:2A:69:03:AB:23:E5:87
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 1FDFE433A9E5638AC6DD289EA429D23A43457E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 034A
Signing time: Sat 16 May 2026 00:14:27 +0000
Manifest this update: Sat 16 May 2026 00:09:27 +0000
Manifest next update: Sun 17 May 2026 02:29:27 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: Ce0zCVqVCokMnYg0wpEadHp+3/SUy8oEpU2JKp4uBnQ=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:df:e4:33:a9:e5:63:8a:c6:dd:28:9e:a4:29:d2:3a:43:45:7e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: May 16 00:09:27 2026 GMT
Not After : May 17 02:29:27 2026 GMT
Subject: CN=6D40186CB09F8E01136EF870772A6903AB23E587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:bc:7b:95:46:48:23:0a:d8:8b:53:ba:ab:
58:57:bf:f1:46:0e:20:31:60:5c:d6:ff:de:b4:e7:
70:a1:1a:c7:bb:34:af:5d:de:ee:e9:d6:72:b9:ec:
c6:d7:55:c8:fe:67:a9:f1:12:eb:2d:32:61:bd:9c:
cc:00:61:92:30:5e:ae:9c:ae:be:ed:6a:ca:f1:fb:
f3:48:3a:28:47:b8:55:fe:c8:a3:b2:71:f4:12:c1:
86:d7:8e:35:3a:ba:ed:1d:fd:77:46:79:6c:2a:ea:
44:8c:1b:3a:29:df:91:ba:cb:f8:a2:88:3e:1f:cb:
f8:50:af:5c:27:c7:68:fc:13:87:59:f6:cd:bd:f1:
56:3e:c8:79:d7:37:fc:2f:e3:db:0f:35:92:a1:f0:
14:19:9e:9a:d8:fe:c6:43:41:7f:49:be:c3:40:87:
d4:c2:56:7d:60:d0:90:30:48:02:6a:19:6b:b4:e3:
e2:ee:b1:6a:b2:2d:9d:28:91:87:cf:2f:a2:fd:19:
8f:62:49:3c:ca:23:6a:95:7b:a7:03:e4:25:52:56:
6b:c4:bd:45:d7:64:db:57:ff:93:78:4d:40:88:4c:
57:28:ed:33:1b:8e:2b:65:74:b3:b9:5d:ea:c6:d6:
21:99:75:46:e7:c3:2c:a2:3b:b4:85:00:38:ae:75:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:18:6C:B0:9F:8E:01:13:6E:F8:70:77:2A:69:03:AB:23:E5:87
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:65:57:37:9e:4e:df:09:d6:d1:43:f9:af:cb:82:8b:37:e3:
5f:5c:82:95:4e:5d:45:c6:05:fc:35:5c:c8:68:4a:77:2d:4a:
90:c7:9c:92:14:75:26:1d:db:c7:dc:96:38:37:31:56:92:8c:
cc:45:85:08:53:5b:96:b8:a7:30:ec:f5:5b:13:5d:9b:42:cf:
10:50:a1:56:58:4e:38:3f:08:2d:11:3d:96:be:e4:0a:da:b3:
ea:8f:09:7e:64:d6:a2:a4:03:61:36:da:b5:35:17:c0:c9:d3:
82:13:67:aa:95:b0:1b:8d:61:74:a1:d0:fe:05:1f:34:c2:e6:
e7:97:e2:c3:d3:95:22:d8:58:15:32:40:18:de:47:56:a5:62:
6f:1d:8a:35:14:39:17:4f:cb:2f:83:28:ad:7a:02:54:c6:4c:
fc:24:a7:a2:b8:57:1e:a7:8e:18:2f:eb:87:95:d1:64:40:86:
5c:2f:f1:e8:7d:e1:48:4a:0c:86:2c:7f:60:8f:49:23:65:2f:
64:c0:92:df:e8:3b:2f:16:27:a8:83:72:86:5e:6d:b3:e7:17:
96:6c:23:dd:4f:43:23:f9:fa:6a:de:e0:ad:25:0e:38:64:af:
58:f8:8b:e8:66:47:51:f1:4e:cb:b5:44:b6:dd:f0:77:f7:e6:
ec:71:04:a4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUH9/kM6nlY4rG3SiepCnSOkNFfhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYyM2JiODc0MzExNmQ4NmIxM2I5YmQ5ZTUzNDAyMzk4
YjdhMWVlMDAeFw0yNjA1MTYwMDA5MjdaFw0yNjA1MTcwMjI5MjdaMDMxMTAvBgNV
BAMTKDZENDAxODZDQjA5RjhFMDExMzZFRjg3MDc3MkE2OTAzQUIyM0U1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyOrx7lUZIIwrYi1O6q1hXv/FG
DiAxYFzW/96053ChGse7NK9d3u7p1nK57MbXVcj+Z6nxEustMmG9nMwAYZIwXq6c
rr7tasrx+/NIOihHuFX+yKOycfQSwYbXjjU6uu0d/XdGeWwq6kSMGzop35G6y/ii
iD4fy/hQr1wnx2j8E4dZ9s298VY+yHnXN/wv49sPNZKh8BQZnprY/sZDQX9JvsNA
h9TCVn1g0JAwSAJqGWu04+LusWqyLZ0okYfPL6L9GY9iSTzKI2qVe6cD5CVSVmvE
vUXXZNtX/5N4TUCITFco7TMbjitldLO5XerG1iGZdUbnwyyiO7SFADiudX0BAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUbUAYbLCfjgETbvhwdyppA6sj5YcwHwYDVR0j
BBgwFoAUBiO7h0MRbYaxO5vZ5TQCOYt6HuAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzEv
MDYyM0JCODc0MzExNkQ4NkIxM0I5QkQ5RTUzNDAyMzk4QjdBMUVFMC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0JpTzdoME1SYllheE81dlo1VFFDT1l0Nkh1QS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV80ZDVjMzA5YWUxMWE0NDll
YTg0MDdhY2UxZjc5MDFmMC8xLzA2MjNCQjg3NDMxMTZEODZCMTNCOUJEOUU1MzQw
MjM5OEI3QTFFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDZZVc3nk7fCdbRQ/mvy4KLN+NfXIKVTl1F
xgX8NVzIaEp3LUqQx5ySFHUmHdvH3JY4NzFWkozMRYUIU1uWuKcw7PVbE12bQs8Q
UKFWWE44PwgtET2WvuQK2rPqjwl+ZNaipANhNtq1NRfAydOCE2eqlbAbjWF0odD+
BR80wubnl+LD05Ui2FgVMkAY3kdWpWJvHYo1FDkXT8svgyitegJUxkz8JKeiuFce
p44YL+uHldFkQIZcL/HofeFISgyGLH9gj0kjZS9kwJLf6DsvFieog3KGXm2z5xeW
bCPdT0Mj+fpq3uCtJQ44ZK9Y+IvoZkdR8U7LtUS23fB39+bscQSk
-----END CERTIFICATE-----
Generated at Sat May 16 16:27:15 2026 by rpki-client