
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json)
Hash identifier: 9oA0uN3ynIrA/eAqnaVaj6tgh+h84AqdW9ywkYNEM8M=
Subject key identifier: 3F:72:DF:87:60:F5:30:98:C0:CD:D8:72:0C:11:F9:1D:31:7D:59:85
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial: 2455447DE761C1623F22C4A36A62A8E0E36943A4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
Manifest number: 0295
Signing time: Sat 13 Jun 2026 13:36:33 +0000
Manifest this update: Sat 13 Jun 2026 13:31:33 +0000
Manifest next update: Sun 14 Jun 2026 17:23:33 +0000
Files and hashes: 1: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=)
2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: hVaFdCgjj1/4gR6WxJ0OxrMoB7HRAHI3XzOoRnu+c4E=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:55:44:7d:e7:61:c1:62:3f:22:c4:a3:6a:62:a8:e0:e3:69:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Validity
Not Before: Jun 13 13:31:33 2026 GMT
Not After : Jun 14 17:23:33 2026 GMT
Subject: CN=3F72DF8760F53098C0CDD8720C11F91D317D5985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:d9:f8:73:d6:2f:c5:e1:d0:d0:cf:8d:49:
47:11:a4:cb:a8:9c:21:e4:e7:ec:3d:90:a1:6f:23:
94:ce:3a:be:a9:8a:f2:16:40:ec:62:13:d7:eb:94:
07:47:da:70:25:97:4f:e6:27:66:ab:7a:bd:5f:ca:
a3:c3:d4:60:3f:62:70:cb:1c:3e:ba:67:ca:4d:e5:
27:fc:71:87:46:a5:ec:22:bf:e8:ac:b5:c9:c7:79:
a5:5e:0f:a2:ad:3d:ab:f0:e6:da:67:24:7b:f2:ef:
4e:b0:ec:9b:5f:af:ba:ef:94:ce:33:8b:74:0a:66:
ed:ce:48:b6:ea:c1:dd:a5:d4:90:3d:04:87:a1:72:
a0:13:5c:6e:46:87:57:52:2a:f6:55:63:54:b2:c5:
9d:37:aa:b1:0e:58:4a:c7:5c:3e:fd:9d:c6:8a:58:
8b:bc:e7:d2:da:dc:33:55:92:7d:40:5e:b2:e2:be:
22:c6:73:6f:22:33:d8:ea:ad:31:fb:bb:ac:24:33:
5d:e1:5c:89:ce:01:2a:b0:af:0f:86:ad:38:52:57:
d6:66:b3:77:2d:a7:a5:c6:a3:7d:47:4f:68:2e:55:
88:08:d5:b2:ff:33:69:4e:a2:d2:d1:82:05:5b:1e:
d2:3d:ca:ad:44:4a:82:04:06:f6:4f:9c:14:b7:56:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:DF:87:60:F5:30:98:C0:CD:D8:72:0C:11:F9:1D:31:7D:59:85
X509v3 Authority Key Identifier:
keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e2:f4:0d:ef:73:35:65:80:b0:98:5b:52:93:30:b8:8c:fc:
42:6d:b5:36:98:30:92:20:62:54:28:2d:7e:6e:6d:c2:c0:0f:
c2:cc:b5:b8:be:61:68:9d:17:9a:ce:8f:0f:6d:30:68:ee:37:
a6:00:5e:92:b9:21:f3:30:4d:44:73:71:48:93:65:00:e8:41:
8e:de:a9:79:36:c6:13:09:1d:3e:1c:d4:f5:f3:82:1f:72:75:
39:43:8e:69:13:f4:bc:6d:84:6d:83:4e:88:c3:cf:44:88:2c:
b6:04:c0:18:3d:2f:ef:ae:00:54:4f:5b:26:dd:f6:c9:f9:d9:
c7:69:ca:27:11:59:ea:cb:a5:5e:8e:14:4f:d7:40:21:f4:f5:
ba:66:28:8e:f6:03:8e:07:cc:65:a8:09:bf:ee:80:c4:ae:e9:
66:04:17:0c:ad:c3:bf:04:3d:a5:5f:82:fd:5b:6c:86:75:66:
08:6c:c4:05:98:9e:95:0e:bf:fe:ca:f8:7b:2f:1f:c6:67:d5:
4c:2a:d1:d4:a2:eb:d2:3b:5a:3d:b6:8e:2c:45:4e:f0:15:24:
0b:2d:23:db:47:9a:b2:17:c0:97:b2:2d:ca:4c:a4:9e:b1:20:
f8:4b:2c:8f:b5:38:c2:30:6a:cf:27:c4:ba:2d:fb:d1:c5:2a:
2e:1e:fa:04
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUJFVEfedhwWI/IsSjamKo4ONpQ6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE
NTQ3ODZEMzAeFw0yNjA2MTMxMzMxMzNaFw0yNjA2MTQxNzIzMzNaMDMxMTAvBgNV
BAMTKDNGNzJERjg3NjBGNTMwOThDMENERDg3MjBDMTFGOTFEMzE3RDU5ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxI9n4c9YvxeHQ0M+NSUcRpMuo
nCHk5+w9kKFvI5TOOr6pivIWQOxiE9frlAdH2nAll0/mJ2arer1fyqPD1GA/YnDL
HD66Z8pN5Sf8cYdGpewiv+istcnHeaVeD6KtPavw5tpnJHvy706w7Jtfr7rvlM4z
i3QKZu3OSLbqwd2l1JA9BIehcqATXG5Gh1dSKvZVY1SyxZ03qrEOWErHXD79ncaK
WIu859La3DNVkn1AXrLiviLGc28iM9jqrTH7u6wkM13hXInOASqwrw+GrThSV9Zm
s3ctp6XGo31HT2guVYgI1bL/M2lOotLRggVbHtI9yq1ESoIEBvZPnBS3VtqHAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUP3Lfh2D1MJjAzdhyDBH5HTF9WYUwHwYDVR0j
BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv
NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5
N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk
NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5
N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJTi9A3vczVlgLCYW1KT
MLiM/EJttTaYMJIgYlQoLX5ubcLAD8LMtbi+YWidF5rOjw9tMGjuN6YAXpK5IfMw
TURzcUiTZQDoQY7eqXk2xhMJHT4c1PXzgh9ydTlDjmkT9LxthG2DTojDz0SILLYE
wBg9L++uAFRPWybd9sn52cdpyicRWerLpV6OFE/XQCH09bpmKI72A44HzGWoCb/u
gMSu6WYEFwytw78EPaVfgv1bbIZ1ZghsxAWYnpUOv/7K+HsvH8Zn1Uwq0dSi69I7
Wj22jixFTvAVJAstI9tHmrIXwJeyLcpMpJ6xIPhLLI+1OMIwas8nxLot+9HFKi4e
+gQ=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:36 2026 by rpki-client