
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier: jF9RYLv01babvmBakvQy7FPqzO1wsSAB+PjstrEAg/U=
Subject key identifier: 33:FA:ED:81:6B:74:02:CC:F3:63:83:9D:D6:80:E0:08:08:FE:E5:78
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial: 3FC2AD58C7F2EE0DCC7218FFBAB166EF4FBFC804
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number: 0335
Signing time: Thu 30 Apr 2026 09:43:41 +0000
Manifest this update: Thu 30 Apr 2026 09:38:41 +0000
Manifest next update: Fri 01 May 2026 10:41:41 +0000
Files and hashes: 1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: 0jysWqGERdRX9DyfJ0U5mqNappuCUxKjmNRzR/94Z14=)
2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c2:ad:58:c7:f2:ee:0d:cc:72:18:ff:ba:b1:66:ef:4f:bf:c8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Validity
Not Before: Apr 30 09:38:41 2026 GMT
Not After : May 1 10:41:41 2026 GMT
Subject: CN=33FAED816B7402CCF363839DD680E00808FEE578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:98:31:ce:dc:63:6e:d1:ac:0f:63:fc:bb:
80:25:db:2d:f6:70:56:c7:3f:7a:bb:66:91:5a:e7:
7c:c1:f2:78:c1:04:03:bf:2c:e3:7d:47:57:de:52:
0a:d7:0f:bf:6c:24:8d:07:f6:05:75:25:91:8b:78:
21:6f:75:7c:7a:a0:46:0d:85:a9:3b:34:24:6e:82:
fb:98:ad:63:ef:bf:1d:de:cb:b8:54:4d:86:14:fc:
7f:f7:21:fb:3c:99:5e:82:33:08:be:d0:e4:5c:93:
d8:3e:e0:1a:ad:bf:cb:50:a9:2d:12:dd:8f:e8:02:
9b:02:5a:44:2d:92:64:41:68:0e:95:ba:eb:83:20:
67:47:ff:ae:35:6b:19:e8:88:95:53:97:27:8d:f1:
29:a9:54:6b:bc:85:84:88:b3:4c:c6:be:22:8b:e0:
06:82:6f:18:6b:6d:20:85:13:b6:26:81:df:b1:a5:
62:a7:19:60:87:cd:92:b4:c5:11:10:48:e6:3b:fe:
73:1a:76:5a:d4:25:74:6f:90:a8:d4:8f:9a:5a:ee:
cc:19:d3:e6:0a:44:11:c8:cb:27:9d:b4:7c:b5:f5:
45:7a:9b:8a:a2:a5:d1:36:33:28:9e:11:82:04:cb:
66:58:7f:26:12:da:b4:2b:1f:47:6e:e7:47:20:3e:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:ED:81:6B:74:02:CC:F3:63:83:9D:D6:80:E0:08:08:FE:E5:78
X509v3 Authority Key Identifier:
keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:01:fc:2e:20:a4:91:1e:5c:0c:03:5d:0f:54:d7:96:45:26:
79:5c:84:ce:82:7e:87:4d:59:f2:63:c5:d2:b9:ea:6e:9c:5a:
5c:9b:9c:86:83:8e:77:f7:5b:bd:35:26:f0:e6:9e:a1:a6:f5:
ae:ab:56:38:3b:79:b6:49:4f:84:f0:a9:42:af:34:f1:e3:4f:
ec:a9:f2:25:a7:0f:0f:b1:ff:e3:ca:7d:8d:40:6e:68:bd:fc:
19:c7:89:b5:41:7e:df:53:cf:e3:37:03:17:bf:e5:b6:4a:55:
3a:8d:c1:62:a9:81:df:c1:14:46:5a:cf:24:32:75:21:e8:3d:
05:12:0f:22:7b:73:75:21:93:59:6d:c8:8f:15:a7:05:40:21:
56:4d:17:0b:fb:e3:9b:ea:a9:b1:08:a2:c0:c1:43:e8:63:64:
da:f2:55:37:79:49:42:45:80:cf:56:2f:d4:a9:85:19:85:c7:
fb:05:cd:ca:a7:cb:81:5a:5a:67:4c:3c:dd:82:64:da:d8:d0:
53:5e:40:18:f5:3a:49:75:4f:04:54:60:3e:0e:b0:2c:c9:f1:
12:34:aa:3e:23:a1:15:89:3c:f9:9b:7e:f4:6a:b6:45:d3:bf:
04:89:42:69:72:0b:87:49:d2:9a:7c:4e:c4:74:74:61:60:e1:
43:42:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:09:00 2026 by rpki-client