
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
File: BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json)
Hash identifier: W/vea56AYl8jZuGInylblv4wu1hSOSoti9am/DxlH9E=
Subject key identifier: 01:D8:0F:3C:2E:71:B7:DF:1B:A1:F9:89:F9:BE:88:0B:11:73:64:EB
Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Certificate serial: 2F2A13B502CA5EFE99D419E9CEB001B66D2FC1D2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
Manifest number: 03F4
Signing time: Mon 12 Oct 2026 18:16:43 +0000
Manifest this update: Mon 12 Oct 2026 18:11:42 +0000
Manifest next update: Tue 13 Oct 2026 20:01:42 +0000
Files and hashes: 1: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: p7vGbv7cj4MIq3sdno+2fMoZ0bpeN2S/nLKaPPP21js=)
2: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: iB1A9jIxialpDzdT5FG7czmb2AtziEr97OBcvfPBU88=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2a:13:b5:02:ca:5e:fe:99:d4:19:e9:ce:b0:01:b6:6d:2f:c1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Validity
Not Before: Oct 12 18:11:42 2026 GMT
Not After : Oct 13 20:01:42 2026 GMT
Subject: CN=01D80F3C2E71B7DF1BA1F989F9BE880B117364EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:71:a8:7f:a9:7c:2f:7b:12:c5:2c:0c:a8:
0c:08:1a:00:75:e7:50:85:cb:e7:68:88:fc:33:1c:
5a:65:7d:f5:a3:21:70:d2:0a:1a:99:7e:89:dd:05:
ad:bc:6c:17:bd:56:24:1a:ae:a9:af:8e:6f:ce:3b:
82:2c:4b:50:42:26:63:04:d3:cb:20:b7:9d:31:d7:
a1:37:28:7d:c0:0d:0b:c6:0c:07:dc:70:02:f1:4b:
31:75:65:a4:77:e1:f8:58:18:35:88:26:76:9b:26:
4b:67:70:f4:0f:84:02:69:6e:ba:36:37:72:9f:cc:
b0:b2:f2:dd:2d:c1:1a:91:bb:f5:ab:76:86:fe:b8:
2f:54:98:3c:ed:2a:e8:6a:53:4a:95:50:61:4b:18:
92:23:b0:7d:ca:df:19:23:6c:95:1a:d3:a0:6b:a1:
6f:1a:f1:df:a2:28:3d:e7:70:92:f4:51:2f:a9:70:
a3:11:db:60:ac:58:5a:b6:6e:01:9b:d8:c0:f2:95:
c1:3b:3d:25:5b:32:23:85:58:34:7f:c1:9c:a2:f4:
b7:70:7b:50:c8:8f:cb:33:9c:70:90:7f:e7:98:59:
0b:63:95:ee:b5:9a:8c:a9:fa:d6:16:2f:23:64:c6:
7c:e4:45:45:d3:e6:b6:e7:0f:2a:dc:86:b4:8a:0b:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:0F:3C:2E:71:B7:DF:1B:A1:F9:89:F9:BE:88:0B:11:73:64:EB
X509v3 Authority Key Identifier:
keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fa:d7:5c:3b:70:53:8a:f9:33:0e:8c:83:d5:1a:05:2b:08:
5f:32:9e:b3:f2:b4:a0:cd:c6:27:86:a3:f9:b6:c1:4c:be:30:
c1:fc:f5:9e:e9:b5:8c:3e:6a:7c:3b:2c:8d:20:a2:6c:50:b3:
e6:c9:b1:d8:81:d4:e6:02:24:58:0c:e5:af:73:56:bf:b4:eb:
3e:f0:26:85:96:ca:4a:7b:24:28:22:e4:1e:6a:14:5f:75:de:
72:71:e2:fd:5a:54:f5:28:62:71:0e:cb:1b:c8:e7:c1:6f:04:
cd:97:4b:9f:7f:f0:30:f0:db:a1:ff:07:34:da:6e:d6:39:61:
06:97:c9:e6:d0:56:8d:23:22:0b:2d:cc:2a:eb:4a:d4:c0:8b:
d1:9f:a6:06:bd:86:1f:e6:88:87:99:43:78:be:fa:65:ff:87:
48:d3:ad:c0:1b:af:dc:ec:3b:b6:94:79:b4:64:a0:d2:d4:58:
53:7b:2f:5f:03:d6:c9:44:98:3f:72:95:12:2a:b6:36:b0:17:
7b:e2:ac:ed:77:b7:62:50:7b:58:65:28:bf:c1:45:7e:08:02:
42:b3:9c:c2:00:a1:05:2e:63:f2:c8:4e:59:e6:89:a4:6c:36:
b9:87:5f:02:3b:f7:02:2d:6b:64:fd:a0:f9:34:e9:9b:94:e8:
9a:99:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:41:23 2026 by rpki-client