Manifest
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: 58WkFclwNJR28XqFn51KAIXkoh1QM1TASR0YOjplyhk=
Subject key identifier: 72:04:3F:87:8E:3C:11:FE:0A:73:B8:7A:D9:A3:EF:84:06:F6:D7:F2
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 311B5E32D8260EA3170C109B7D1493AA94EF619C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 0402
Signing time: Wed 14 Oct 2026 22:29:22 +0000
Manifest this update: Wed 14 Oct 2026 22:24:20 +0000
Manifest next update: Thu 15 Oct 2026 22:54:20 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: aH3SqzXi2bolqg38/zc7d2u/lKB690mhc97Km3AsgAI=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:1b:5e:32:d8:26:0e:a3:17:0c:10:9b:7d:14:93:aa:94:ef:61:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Oct 14 22:24:20 2026 GMT
Not After : Oct 15 22:54:20 2026 GMT
Subject: CN=72043F878E3C11FE0A73B87AD9A3EF8406F6D7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:29:f1:40:8f:b5:2c:df:18:1e:f9:47:63:
66:6a:e3:21:57:63:bb:14:18:8a:63:22:22:4f:34:
a8:db:20:45:f5:64:cb:ef:c4:32:75:65:8e:c1:41:
77:05:f6:33:6c:3d:e7:2d:79:bd:95:05:9c:94:87:
d5:10:42:ff:32:78:1c:fb:6a:b2:44:2e:a7:83:06:
51:20:b5:32:cf:c2:ca:b2:2c:4c:f1:6e:6f:70:0d:
1b:b0:a0:8c:9b:89:33:c1:64:e3:83:a6:67:cb:3a:
e8:22:b3:7e:21:c5:24:35:6d:b8:49:41:74:25:73:
11:d3:ed:8c:e6:cf:45:9d:79:73:f5:2e:98:56:aa:
66:11:b6:4b:ed:62:6e:6c:90:a6:77:3b:6f:ce:bc:
ae:29:81:db:e4:8e:a0:6b:4c:0b:78:91:3e:40:82:
00:12:f8:f7:5a:6a:81:df:ad:3f:4d:4a:99:fe:ff:
b5:cb:0b:76:3c:ac:23:dd:03:70:c9:45:5b:e8:ff:
3f:df:31:6e:49:bf:40:d4:3d:2f:74:0f:95:55:d6:
10:0f:88:d7:ec:5f:c5:c5:8f:59:f2:0f:12:b3:66:
6a:d9:9a:c9:5c:49:f8:68:e6:79:e9:00:19:ce:8f:
82:3d:76:f5:fc:02:5b:5b:e4:bf:4e:c0:0e:09:25:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:04:3F:87:8E:3C:11:FE:0A:73:B8:7A:D9:A3:EF:84:06:F6:D7:F2
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2a:9e:bc:fd:26:41:3d:f5:43:2d:03:d1:77:9d:b3:12:a3:
ca:b0:d3:f6:70:c7:0e:f1:f7:88:2a:1e:9f:9c:ca:4b:f8:68:
38:9b:cc:52:71:65:8f:e0:5c:9a:41:68:27:ee:c6:80:26:f3:
3a:11:b0:ad:c1:11:01:30:de:7d:22:bb:ab:86:1b:f6:a1:52:
3e:e9:88:84:88:99:81:10:c6:c9:0a:20:72:dc:8c:a8:bc:2b:
bd:2f:f5:60:bc:1e:58:21:84:df:ec:2d:46:46:09:db:b5:87:
16:bf:7f:06:5b:ec:e2:c1:75:3e:85:ee:73:e4:54:17:ec:c7:
be:1c:b7:8f:15:d6:fd:54:fa:e6:72:0c:d7:48:89:57:51:ee:
c5:71:7c:56:75:36:92:c5:f0:e5:9d:9a:25:d5:cc:5c:3c:4c:
a2:04:49:0c:9f:0e:5c:c0:1d:19:c8:da:13:fb:73:61:bb:cd:
b2:eb:b5:c6:5c:90:e4:7f:5b:87:70:bc:b2:79:1e:64:48:88:
ce:92:43:e4:7a:b0:0e:89:aa:24:68:96:9e:23:62:ea:8f:c3:
86:d4:f7:ee:14:4e:0c:1a:dd:2d:33:91:f4:3a:f2:3b:1a:cf:
4d:c6:59:3b:3e:14:a2:d6:f4:7f:c2:f0:7c:36:89:c1:62:bc:
e2:76:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:07:32 2026 by rpki-client