
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json)
Hash identifier: z4KlhR7ndFRWYRbak+yjQzDn7xv6at2T5RToslrtKE0=
Subject key identifier: C0:29:09:83:63:13:6E:1F:79:B4:A2:E5:C2:B6:2F:2F:DC:3C:33:49
Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Certificate serial: 594AF43751E7013E420834942BC33E87445F8B1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
Manifest number: 02F1
Signing time: Fri 13 Mar 2026 10:31:25 +0000
Manifest this update: Fri 13 Mar 2026 10:26:22 +0000
Manifest next update: Sat 14 Mar 2026 12:18:22 +0000
Files and hashes: 1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=)
2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: 2K1Cu/LtJj1Fenmjqnwx6/WnYZouQqypxv4vjMoiL7o=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4a:f4:37:51:e7:01:3e:42:08:34:94:2b:c3:3e:87:44:5f:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Validity
Not Before: Mar 13 10:26:22 2026 GMT
Not After : Mar 14 12:18:22 2026 GMT
Subject: CN=C029098363136E1F79B4A2E5C2B62F2FDC3C3349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:27:1b:0f:9f:32:52:c5:1a:e2:09:ff:1b:
11:0b:ce:d5:41:98:33:b7:2e:22:a3:7b:46:44:b5:
e2:94:f3:ac:1b:82:ee:cc:a0:12:cf:1f:f3:fc:23:
51:0b:1c:0d:52:22:f7:bc:87:1b:a3:b5:97:d7:77:
51:73:b5:07:86:b8:8b:2a:b2:80:b3:77:81:4e:28:
57:3e:8f:45:82:e9:e7:6f:cb:f5:9a:67:75:67:6f:
ea:55:aa:fd:06:97:5d:6d:c5:59:3b:1a:a9:b1:57:
63:0f:63:07:aa:08:9c:aa:24:db:4e:5d:df:ab:e6:
33:d5:ed:1d:c4:a2:30:3e:8c:3f:69:54:15:cb:82:
a5:29:4d:b4:ec:84:8f:42:fb:91:d6:a9:1f:ae:6a:
96:3a:8c:da:61:b2:67:bd:ba:c0:ab:59:19:69:d2:
88:31:3f:1e:3d:17:ab:ef:12:1a:74:2e:7f:e0:7b:
a4:e1:fe:24:95:58:14:c1:81:78:a9:3d:5d:e5:33:
5f:2d:eb:72:90:76:e6:f5:85:80:f5:f5:34:60:52:
aa:d8:8e:a0:67:4a:93:f4:b8:10:52:ae:fa:d9:35:
68:0e:bf:e0:3c:47:5e:1c:57:87:a4:b7:cc:a2:c6:
63:26:dd:cf:d7:f0:16:ee:0a:5b:fa:c1:02:44:e3:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:29:09:83:63:13:6E:1F:79:B4:A2:E5:C2:B6:2F:2F:DC:3C:33:49
X509v3 Authority Key Identifier:
keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:9c:91:4f:be:9b:3c:02:6b:16:2f:f3:38:14:ae:82:e6:
85:c5:b4:cc:ae:4f:62:13:f0:41:f2:71:ed:fc:7f:10:2f:28:
93:25:e1:3f:12:ba:b0:c6:90:4c:70:1f:77:66:47:c4:55:dc:
11:fd:8c:e9:85:96:fc:e1:e2:e2:9c:84:b6:a7:d5:d7:ea:8a:
ed:85:f0:96:09:87:b6:e1:b1:f7:35:f7:67:56:f8:48:45:55:
7f:1b:c0:5f:ab:cb:9d:e0:18:35:67:83:55:b6:f8:13:57:cc:
38:51:61:a5:90:5a:c4:2a:30:c0:e8:95:40:9f:76:61:a1:51:
4e:85:ba:2b:33:25:7b:9f:9e:03:25:82:f9:0f:eb:c0:fd:d4:
74:8b:ba:3d:2f:2c:05:c7:ae:83:69:ba:4f:64:70:a7:09:e8:
bf:36:5a:32:0e:d6:02:e9:8d:84:cf:91:64:85:2f:4d:b6:e1:
7a:08:95:8f:72:07:fb:67:08:a8:31:d2:71:b7:a3:91:a2:4f:
da:29:9d:71:d7:e3:40:4f:1f:49:3c:dd:5d:11:3a:99:7d:61:
51:7d:01:16:be:21:f5:4e:2a:1e:9a:b8:43:82:7a:4e:1b:db:
34:ce:37:72:58:c8:99:5e:a9:2d:20:d6:8d:22:84:0e:38:47:
91:ff:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:42:42 2026 by rpki-client