
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier: uYMQrkkrkPLGHOFWKKGp69WvyqLopiveM01JxHf+tSw=
Subject key identifier: BC:0E:7D:49:43:FB:50:44:C3:75:60:10:7B:95:A5:7A:4F:4D:8D:12
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial: 1C2CC7674F6C3A6BBA1A777D338915CFA111B657
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number: 03FD
Signing time: Mon 12 Oct 2026 01:04:24 +0000
Manifest this update: Mon 12 Oct 2026 00:59:23 +0000
Manifest next update: Tue 13 Oct 2026 02:10:23 +0000
Files and hashes: 1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: kbE6viFIRTc2eF7BfZxPNe9IYPBsGa3Al46eztQumUI=)
2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: S4AvxWBeW9N6hxjfs+wg8xJFVH4YZkZcqcYTTWaj6x8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 02:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2c:c7:67:4f:6c:3a:6b:ba:1a:77:7d:33:89:15:cf:a1:11:b6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Validity
Not Before: Oct 12 00:59:23 2026 GMT
Not After : Oct 13 02:10:23 2026 GMT
Subject: CN=BC0E7D4943FB5044C37560107B95A57A4F4D8D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:35:31:b8:e1:be:81:bf:26:a2:07:e6:8c:
c9:e7:78:b8:9b:c6:86:65:91:75:31:6e:08:63:59:
c6:15:78:9e:ee:8c:84:9a:08:ae:4b:d8:25:d9:57:
80:4f:32:52:49:05:d5:69:76:e9:91:ea:c0:36:93:
33:94:57:5b:93:b4:51:bc:10:34:e7:4b:85:bd:ed:
44:19:c4:c4:98:81:9a:5f:ec:77:39:b4:d6:dc:4e:
66:e7:a8:0e:b6:db:96:d0:0f:ab:28:a2:3c:fb:ee:
83:62:59:f7:9c:12:72:40:a0:d1:8f:f4:96:29:2d:
c9:88:44:83:92:e0:b0:fd:65:04:d1:9c:98:0c:68:
85:d4:02:52:6c:65:98:52:e9:da:1c:e6:7e:b6:73:
44:07:e9:c2:d4:e1:5a:39:39:58:24:1a:56:cd:99:
7b:19:f8:bb:26:71:b6:e7:9b:99:ee:31:86:70:a5:
03:c2:fe:41:0f:a8:83:67:15:9c:85:0e:48:8d:9f:
ed:6e:82:0b:da:78:d4:ca:23:3a:a6:59:42:21:59:
a7:e2:89:43:3a:ef:22:48:fa:c4:ef:12:52:dc:94:
d3:cd:b4:97:4f:35:44:bb:7e:19:d3:67:12:c8:a9:
41:b7:9b:02:e9:f3:b9:00:b6:f8:83:38:26:f8:51:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0E:7D:49:43:FB:50:44:C3:75:60:10:7B:95:A5:7A:4F:4D:8D:12
X509v3 Authority Key Identifier:
keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5c:08:c0:7b:3b:1a:16:21:35:4f:db:2a:8f:16:9a:0b:49:
56:44:ac:55:15:f7:27:64:49:b5:91:54:91:0d:a1:ef:e2:2b:
73:ed:45:75:6b:51:b4:0e:60:9a:4e:a0:45:c6:ab:d1:0d:cd:
6b:85:01:24:dc:20:d7:ee:25:ec:30:f0:cc:d4:56:18:53:4a:
b1:5e:61:0d:c5:46:de:ad:17:04:d9:eb:2d:88:eb:65:2e:05:
3d:cf:5a:09:fb:9f:00:a1:fe:0e:62:0b:d7:0c:ed:c6:de:f1:
5c:80:8b:11:23:4d:1c:7a:b6:31:71:80:e8:4e:04:0b:b9:fa:
ad:46:e5:bd:ae:0f:b6:2e:1f:2c:10:cf:e3:5d:85:a2:29:1d:
ed:53:a1:a5:57:f8:80:73:bc:dd:dd:28:61:85:d3:ba:d0:37:
01:59:2a:fb:99:c3:5c:08:2e:d0:06:9e:66:5d:d1:88:f3:0e:
bd:d8:8a:97:38:1c:49:d2:48:c0:26:da:35:85:ac:e2:65:2c:
33:aa:4d:1c:c3:92:ea:72:11:d5:40:57:bd:14:2e:af:93:3f:
cd:6b:e1:9b:8f:a6:2d:55:38:55:55:bf:77:fe:46:57:2f:8d:
fd:62:1f:a2:1d:97:2a:b7:7f:8c:ac:a1:1a:22:fd:32:28:e5:
c6:95:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:12:40 2026 by rpki-client