
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json)
Hash identifier: Y0cNDsKkGKGhsjIj8UY7/fIPPblLSIm4RHxdbV/u/uI=
Subject key identifier: 78:00:2E:8E:F3:55:D5:D2:DE:24:F9:64:A8:DD:23:67:7C:F9:BA:63
Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Certificate serial: 32F1646DC82E484516EE3EDD4E18F26AC715351D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
Manifest number: 03AC
Signing time: Tue 28 Jul 2026 19:34:52 +0000
Manifest this update: Tue 28 Jul 2026 19:29:52 +0000
Manifest next update: Wed 29 Jul 2026 23:30:52 +0000
Files and hashes: 1: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: tLThUwSwrPfCypAsdBnMMAhmoYAyEUY8DuOIJQne5ZA=)
2: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: Gg4CBK+wUDcClhhUjXVGEpIkygkGYsayLePUvEKuegc=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f1:64:6d:c8:2e:48:45:16:ee:3e:dd:4e:18:f2:6a:c7:15:35:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Validity
Not Before: Jul 28 19:29:52 2026 GMT
Not After : Jul 29 23:30:52 2026 GMT
Subject: CN=78002E8EF355D5D2DE24F964A8DD23677CF9BA63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:26:ca:f4:a4:d5:05:8a:34:80:cf:31:da:
76:fa:04:45:1c:c2:8b:c5:8a:4b:d0:2e:5b:dd:f7:
f4:4f:84:5a:7b:7e:1f:a6:d2:a0:2a:1f:ad:44:d7:
11:6b:73:6b:ad:d0:00:2c:9b:2f:92:80:3e:57:89:
68:d8:0d:a3:a6:80:1a:11:3d:3f:3c:a5:9a:39:83:
f2:df:40:b6:f7:bf:aa:86:89:63:4a:64:b5:fb:22:
ba:3c:00:c0:cb:c0:d6:90:0e:3c:47:7c:19:8c:ed:
d4:e0:b1:72:16:0d:09:a5:3f:a1:2f:73:75:d0:d5:
b4:ef:1f:c5:61:7d:ff:19:b1:e0:ac:a6:13:fd:e4:
73:35:6c:9f:a6:e6:d9:90:8e:44:ef:ee:6a:91:07:
76:5a:f5:ef:c3:ca:de:f7:3d:f2:96:9c:c9:8b:a2:
fb:6e:6a:c6:59:43:18:02:6f:05:98:45:c4:33:b2:
c0:f8:9b:76:17:16:63:9e:6d:f2:39:3d:91:6d:f5:
b5:93:ce:2f:ac:68:2d:77:5d:f1:34:dd:e0:b5:93:
76:ee:5a:ec:37:be:18:f0:e7:75:66:7a:a7:cd:78:
61:90:0f:34:9f:c0:9f:d3:b7:06:43:7d:85:38:3c:
40:15:63:f4:0e:97:31:24:46:5c:ac:fb:6e:b0:13:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:00:2E:8E:F3:55:D5:D2:DE:24:F9:64:A8:DD:23:67:7C:F9:BA:63
X509v3 Authority Key Identifier:
keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4d:d1:d8:b6:76:f6:e1:f9:77:71:f1:b7:03:65:c6:52:0a:
d4:24:07:fe:c2:22:5f:f2:d8:23:81:16:b2:93:6b:b9:16:72:
e1:45:c7:14:82:c7:82:e1:96:e3:6e:7f:94:fc:b2:ae:c5:1a:
e3:04:04:2b:47:50:6f:d6:ec:92:e5:65:ea:a3:de:17:19:b2:
44:eb:f4:72:c8:20:e1:6e:66:34:06:38:fb:56:33:e4:d7:1f:
4a:2d:1b:5b:ed:9e:81:61:8a:62:dc:cf:65:4e:3d:e4:25:ee:
d9:f2:03:a5:45:58:b6:ba:6d:0b:13:a0:6a:6e:30:f0:66:13:
5b:c3:eb:0c:f7:14:a6:e0:c3:7e:c9:59:17:b2:d7:ae:cd:03:
c2:26:c7:5f:b4:e5:a6:da:da:fd:a1:87:f8:86:5a:89:4e:40:
f3:ae:fd:1d:a2:79:29:5c:67:84:c7:0a:d0:60:91:3e:ef:a2:
ab:d8:e8:67:02:75:8e:1c:95:42:3c:03:17:0b:fe:7c:a4:75:
2d:4a:78:82:7e:22:98:d1:ce:57:36:2a:64:3b:fb:de:25:28:
8a:c1:79:37:09:b2:0d:9a:de:26:c6:cf:ba:00:54:e5:53:70:
56:f8:16:78:79:61:3a:36:fd:e1:ca:c2:ae:15:6b:bf:f9:3e:
6d:4a:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:31 2026 by rpki-client