
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
File: 6482EA67DB858D1440DD67B955223E4341BA4E97.mft (raw, json)
Hash identifier: qaATZ9aa/nilpZl3G1Vf0IhjmaUpQ54crCOxB53NFHY=
Subject key identifier: 37:A0:3B:44:4D:58:96:7C:FF:0E:C5:61:DD:84:18:FE:57:FE:89:7B
Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Certificate issuer: /CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Certificate serial: 5A6269C61C8794E157E71A2DFB30689E2D90B6E8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
Manifest number: 02F7
Signing time: Fri 13 Mar 2026 14:34:04 +0000
Manifest this update: Fri 13 Mar 2026 14:29:02 +0000
Manifest next update: Sat 14 Mar 2026 17:51:02 +0000
Files and hashes: 1: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (hash: MdiZ+9TbSNzfNPtu/3qU2TdQ6jBsbjIkWQpbqOwaXo4=)
2: 6482EA67DB858D1440DD67B955223E4341BA4E97.crl (hash: uRyL7Czm0wUNhaX1g/JU4Aj+N+PbX0xQXNFQQgIDFXA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:62:69:c6:1c:87:94:e1:57:e7:1a:2d:fb:30:68:9e:2d:90:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Validity
Not Before: Mar 13 14:29:02 2026 GMT
Not After : Mar 14 17:51:02 2026 GMT
Subject: CN=37A03B444D58967CFF0EC561DD8418FE57FE897B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:38:49:5e:17:17:4a:99:29:4d:90:6c:77:
27:60:bb:69:b9:b9:be:22:b0:a9:a8:d6:d6:dd:cc:
1c:9c:3f:ba:f2:65:26:e8:92:7e:b2:09:c9:90:22:
50:f8:a2:67:b4:32:b7:cd:a3:62:b4:08:61:41:d7:
0c:47:1f:48:e4:ca:16:3c:e6:b2:92:11:9c:26:f1:
a7:24:b7:0a:2a:72:d2:b4:7a:4d:19:cd:65:30:52:
a7:be:02:e6:a4:0e:e5:7d:22:81:4e:00:4a:83:8b:
95:5e:a8:1a:db:04:71:be:e1:68:aa:a7:d1:6b:75:
91:88:f8:e8:79:dd:62:e3:5d:a9:a0:85:0d:6c:03:
11:10:05:a3:85:ac:83:bc:af:fb:79:02:54:41:07:
7d:a7:79:a7:6e:23:a8:eb:fe:fe:cf:4b:60:07:12:
39:c8:56:31:5c:1b:ee:2c:d7:3b:f5:3e:00:c8:bc:
56:cf:7d:c5:cf:f4:bd:54:31:98:63:26:6b:d8:e7:
69:6b:2a:01:01:a0:40:3c:b5:c8:0f:ee:28:8d:ee:
05:f4:0d:86:23:67:18:3c:cc:6e:6f:c7:68:79:65:
cd:41:49:64:48:7b:f1:df:6f:c0:88:25:ff:7b:0c:
ec:2d:4f:37:85:c3:07:71:ac:28:74:8d:28:9f:79:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:3B:44:4D:58:96:7C:FF:0E:C5:61:DD:84:18:FE:57:FE:89:7B
X509v3 Authority Key Identifier:
keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:79:9a:0a:72:05:d4:16:ac:2d:98:58:d1:a2:9a:ef:47:
39:44:8e:b8:2f:96:3b:8e:e3:8a:5a:9c:31:a0:8f:38:0e:bf:
b2:f5:4c:aa:ac:9a:31:3e:1f:ae:10:9d:f9:63:d7:57:35:82:
46:7e:bb:27:d4:41:2e:8b:5f:90:bc:d9:bd:d7:14:18:00:76:
4e:b4:79:ef:e8:74:4a:42:55:a8:e7:e5:39:4b:2e:c1:79:ad:
d9:df:ac:67:4f:56:c0:7e:fd:f2:b3:5d:82:9f:a7:c0:67:4a:
c7:9c:a8:6a:83:8a:3c:ad:86:39:0b:34:76:c6:30:fb:50:9f:
f0:65:40:4a:62:d6:dc:41:e8:f9:5a:64:a2:67:99:cb:ba:25:
64:46:0d:55:42:c3:13:6a:04:3d:90:f1:98:11:36:e6:d8:9d:
bf:cd:40:af:a0:22:d4:a2:6d:b1:e8:83:60:4d:19:36:43:40:
94:6f:0d:65:a4:29:3a:e7:f9:8a:4a:a6:c7:b7:0e:67:d3:63:
60:6b:1d:8e:2f:c5:20:bc:d9:f5:c0:0a:a4:80:7a:7e:33:97:
5c:f8:0e:81:be:34:c1:76:db:17:98:49:79:75:a3:b8:a2:bc:
5e:58:1b:78:de:a0:4e:68:fc:d2:cc:1b:c0:d2:2f:1c:4a:6e:
87:36:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:41:18 2026 by rpki-client