
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json)
Hash identifier: BuGCHdhN+FHchxFUgoWhIg/xQeL8/3hYUCvaahtoZOU=
Subject key identifier: 9B:0D:FF:E6:47:55:AA:22:0F:2F:06:0E:9A:D8:2F:6A:94:E7:E4:D3
Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Certificate serial: 24FBFE2A6587FDEE94355A1A10755ACDBD67D715
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
Manifest number: 0280
Signing time: Thu 30 Jul 2026 02:03:26 +0000
Manifest this update: Thu 30 Jul 2026 01:58:26 +0000
Manifest next update: Fri 31 Jul 2026 02:15:26 +0000
Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: 7AQ5rEYB45xnNV5MRlF0gaiUjbra0/FxF6D3yqjYYbw=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 20:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:fb:fe:2a:65:87:fd:ee:94:35:5a:1a:10:75:5a:cd:bd:67:d7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Validity
Not Before: Jul 30 01:58:26 2026 GMT
Not After : Jul 31 02:15:26 2026 GMT
Subject: CN=9B0DFFE64755AA220F2F060E9AD82F6A94E7E4D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:58:6c:39:b3:04:94:fb:fa:be:73:1a:cd:
bc:dc:f1:c8:a6:e3:7b:33:fa:19:54:a9:f0:28:9f:
b5:d9:24:d2:2a:e4:00:fb:99:8b:45:c0:8f:ec:19:
d5:c8:92:1d:ac:5e:ff:50:55:ac:da:6d:b0:3f:72:
45:b8:b6:78:ee:ec:af:c4:6d:41:4a:68:46:c9:ef:
1a:87:7b:2e:42:58:6e:e0:ba:95:78:20:c7:18:3b:
84:33:7b:89:5e:ef:3b:68:b2:d1:7c:33:a8:b5:7b:
7e:17:0a:bc:b3:21:b4:fa:f2:55:6b:dd:2f:59:ba:
f6:c3:62:bf:96:67:1d:eb:74:1d:9c:b2:61:60:52:
e5:e6:99:ca:b2:c5:df:96:cd:df:46:aa:91:a7:e8:
97:45:92:89:65:fc:c4:d0:a7:16:34:e0:2c:a3:aa:
2d:83:07:ed:8a:cd:a1:21:c8:36:0a:75:bf:a4:d0:
c5:08:78:63:9e:24:6d:12:fb:f8:0a:7f:58:72:a7:
cb:61:bc:ea:00:91:e4:ac:06:b1:2c:68:2e:f1:0c:
94:90:24:54:3a:f6:07:1f:b6:86:7d:fd:15:d1:e5:
0b:f5:86:c3:e7:5e:57:5b:af:a8:97:fc:d0:21:40:
2c:e0:61:d9:cc:72:d1:81:ee:91:40:27:a7:e8:d8:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:FF:E6:47:55:AA:22:0F:2F:06:0E:9A:D8:2F:6A:94:E7:E4:D3
X509v3 Authority Key Identifier:
keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7e:a6:06:1e:6e:eb:b0:83:84:cc:9f:16:9d:6a:8f:f1:f7:
7c:54:5b:b8:4c:31:ee:a6:ed:79:96:31:ba:5e:fd:5d:3c:a1:
8f:66:e3:cc:e3:53:01:31:23:f2:82:09:d8:e6:0f:16:41:0f:
04:4b:dc:e3:0a:75:24:df:80:2c:67:da:9a:63:62:c0:a2:34:
f0:2b:9b:34:23:7f:45:23:29:ff:48:d2:79:77:50:9f:67:f4:
36:a1:6e:20:fc:1d:95:25:5e:94:f1:60:17:6b:3b:42:21:83:
7b:69:f6:5b:92:2e:ea:a6:d3:df:55:17:1e:80:cc:f8:dd:94:
a2:af:be:16:18:4a:f4:74:2c:fd:ca:a4:95:1f:56:4b:99:07:
09:25:7d:d6:f4:e7:61:04:5b:b4:c4:4c:f5:32:c1:42:e3:99:
2d:20:52:db:11:a8:e4:8e:ae:e5:2d:99:ac:73:c5:ca:49:c7:
17:9f:42:88:b7:da:d2:0a:2a:c6:39:0d:40:3f:96:d4:1a:79:
67:5f:1e:fd:b1:b3:a1:c2:80:ee:d9:ea:49:db:10:81:1c:66:
81:c8:ef:9d:9c:0b:73:a1:36:a9:43:91:ef:01:c6:f1:27:a7:
aa:f1:fb:f1:34:1e:0f:39:ac:e0:7f:50:26:ec:d2:e0:c0:bc:
d6:fd:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:05:14 2026 by rpki-client