
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: r1Bg2726f9Aum9agIKsCTpKUQyYVQ+xtMbUCGZ2EDL8=
Subject key identifier: 43:2D:B1:EF:A8:77:E9:A0:B2:36:BF:33:1F:17:BD:C2:77:79:31:6F
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 75D0AFEF93230A084E5C2F08F2F78FB9DFC5C182
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 0403
Signing time: Tue 13 Oct 2026 08:31:41 +0000
Manifest this update: Tue 13 Oct 2026 08:26:40 +0000
Manifest next update: Wed 14 Oct 2026 11:33:40 +0000
Files and hashes: 1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: YjD96Za8sBB16pytAr6NcLsr/XaGoB9FHChxqTcMjCg=)
2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: elgEW1aflrNdCdgrDrZhMXXhu4mKyg1SqJu+vklMHhY=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d0:af:ef:93:23:0a:08:4e:5c:2f:08:f2:f7:8f:b9:df:c5:c1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Oct 13 08:26:40 2026 GMT
Not After : Oct 14 11:33:40 2026 GMT
Subject: CN=432DB1EFA877E9A0B236BF331F17BDC27779316F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:ee:6b:9d:8f:b1:da:8d:11:e0:fc:36:02:
e5:fa:34:4c:a8:b0:86:0c:f0:49:4e:62:6b:24:8b:
7f:5e:be:52:a5:18:32:7e:af:81:80:41:2e:16:70:
4d:34:6e:68:30:54:be:f0:4d:87:84:9e:2c:3a:86:
90:e1:c9:36:92:10:12:ef:11:f8:a1:65:59:b6:11:
d2:3e:2a:54:49:4a:17:80:d1:01:4e:4a:87:c0:ac:
88:1e:6d:51:9b:e5:32:4d:f1:79:23:b4:87:9c:50:
14:4e:2a:7f:57:1c:d0:fd:1d:9c:51:cb:0d:2b:d0:
b0:64:0a:ff:e9:59:38:93:bd:d7:c5:fa:82:bf:57:
72:02:96:07:e8:8a:cb:d7:e0:ae:0b:c9:d5:d1:f5:
6d:61:6e:c7:ea:62:f1:58:24:15:88:04:62:0a:d8:
9a:bc:9e:ae:e7:c2:fb:09:2b:5c:70:41:73:6b:b2:
e2:1f:f1:e2:b5:01:17:83:f7:c8:e2:c0:c4:b0:de:
d7:33:be:47:e0:59:fd:97:a7:b4:fc:cd:fe:f0:18:
88:78:cb:b9:92:3b:5c:02:26:5d:bb:d4:32:6b:cf:
53:7f:48:30:c5:8c:be:4b:f1:75:16:3d:b8:46:c0:
b8:78:f6:49:39:9d:7a:d3:40:8e:f1:63:e2:a7:a4:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:B1:EF:A8:77:E9:A0:B2:36:BF:33:1F:17:BD:C2:77:79:31:6F
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:aa:ef:ff:dc:c0:ce:fd:82:38:2a:41:89:d0:0c:2d:84:b3:
45:10:11:72:05:4b:7b:03:3e:76:3e:62:38:4a:bd:8c:35:fb:
19:aa:1d:a5:23:39:bd:41:df:09:2e:ad:17:ec:f1:1f:72:af:
84:1e:18:f2:e8:73:d3:8b:70:3f:52:f6:63:c9:58:66:7b:e4:
0f:89:d2:cb:50:d8:7b:af:1d:2f:85:e6:d9:4c:68:73:70:95:
60:01:f2:c0:a3:92:92:5e:b9:62:94:98:61:da:1d:34:c7:e3:
db:50:3b:3a:19:1d:5e:7c:50:0d:93:06:af:91:40:07:2d:af:
67:8c:6a:24:16:b0:35:a9:94:44:7d:fd:f2:f7:22:91:45:84:
78:bf:8c:93:25:dd:f8:29:5a:5b:2d:ad:59:c5:21:10:b1:12:
4f:f8:62:90:36:c3:be:18:60:d2:17:11:01:f3:64:33:c6:de:
ce:c3:fe:b4:4b:9f:63:d2:ba:2a:0b:7b:cf:c0:d9:66:ae:bc:
02:4e:bf:fa:82:e9:d1:6d:a8:63:20:22:d3:c0:c7:46:f2:db:
3c:ff:a3:1e:db:cb:b1:ec:60:dc:35:fc:52:b9:72:bc:c8:34:
1f:22:dc:6b:b4:c5:56:89:a6:84:d6:9e:f6:16:90:0b:ad:06:
42:53:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:05:47 2026 by rpki-client