Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: 5EULu7tmLbv0qPmH5aGKovj9D/SABhv07ULeoZS9k4g=
Subject key identifier: F8:B1:EB:6B:0A:D3:E8:9C:AE:D4:0A:7B:76:69:66:B8:85:EB:12:50
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 18FFA155D0C1AD8420BBFDB488FE598F74EF6B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 0323
Signing time: Fri 17 Apr 2026 04:13:59 +0000
Manifest this update: Fri 17 Apr 2026 04:08:57 +0000
Manifest next update: Sat 18 Apr 2026 07:50:57 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: /sruE3mHtS05xRXXVAFLF32N61yN6UFeGNp44WSYcbk=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ff:a1:55:d0:c1:ad:84:20:bb:fd:b4:88:fe:59:8f:74:ef:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Apr 17 04:08:57 2026 GMT
Not After : Apr 18 07:50:57 2026 GMT
Subject: CN=F8B1EB6B0AD3E89CAED40A7B766966B885EB1250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:0f:75:38:9f:36:13:d2:cd:b8:3f:e8:c0:
ca:af:f9:a2:b2:95:56:d5:af:a5:4b:a6:a6:65:36:
ed:af:3e:14:8e:ae:69:93:57:89:b8:ce:72:f3:d8:
22:32:8d:72:6c:9e:99:ec:ab:aa:d2:ae:7f:5d:27:
c7:b7:72:37:56:c7:40:e4:07:69:17:a0:d5:b5:48:
f3:ed:c8:6b:77:c7:7b:68:04:cf:3c:8f:d6:75:bc:
c0:e7:b2:48:55:1f:a1:11:9c:a8:59:af:69:28:57:
b0:bb:54:bb:e9:3d:cd:65:25:7d:a2:6d:83:0a:25:
26:91:8e:4f:48:a1:81:8a:ce:cf:97:08:c7:de:73:
a5:5c:ea:54:24:64:51:b8:12:22:7a:8b:5d:ea:d8:
4f:70:9d:83:be:f9:52:b4:f2:a7:55:bf:d7:e0:f5:
1b:32:80:2c:f4:17:b7:a5:6a:a6:0d:d6:e9:3f:90:
b9:75:f3:2a:cb:b7:d3:f3:ca:25:22:36:15:31:19:
91:d5:3d:6d:ac:36:67:c2:be:45:56:c6:88:27:fa:
b6:90:2c:7f:62:cf:da:bb:64:d6:3e:f6:df:40:20:
0f:1b:49:0c:29:0d:5c:1e:0f:d8:ef:15:06:ab:9d:
30:cc:e3:4d:5d:8f:3d:54:7a:e2:50:12:4d:e1:57:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:EB:6B:0A:D3:E8:9C:AE:D4:0A:7B:76:69:66:B8:85:EB:12:50
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:38:ea:cc:4f:22:03:9c:ee:92:bc:1c:56:00:ca:35:f5:a6:
4e:f0:ae:fe:c1:33:28:22:81:98:76:66:0a:81:01:7b:8d:98:
bd:0b:35:26:ad:dd:23:a0:de:25:de:e9:6c:a4:8d:25:f7:95:
50:9c:c7:64:b1:c2:a8:69:11:32:50:ca:55:c3:bc:4b:6f:9c:
1f:a0:10:c3:81:89:4a:b7:ae:6e:4a:14:b0:a9:97:04:ab:e7:
e5:d6:33:97:3c:77:d9:12:46:13:3d:8a:3b:3f:41:73:2c:c1:
4a:4f:7b:2e:18:15:1f:8f:cb:e4:d1:a4:d8:c7:2f:d9:10:4b:
41:c3:c1:db:51:b6:62:45:96:97:16:44:c3:58:90:18:2d:47:
26:d3:2a:b8:74:98:cf:28:13:6f:59:d7:2e:be:41:07:c0:97:
77:f6:84:bd:e3:4c:2d:dd:b1:74:e0:54:ca:5f:17:bf:2f:65:
b1:26:88:e7:3a:76:0d:28:13:fa:c7:9c:67:4b:1b:a3:78:d8:
38:b2:2a:79:f9:15:64:13:7a:9f:d7:b5:fa:8a:a1:66:00:a3:
72:50:2b:dd:04:26:ec:95:95:63:b0:b1:67:1b:8b:6b:6f:8a:
58:d3:c3:0a:0f:95:1f:3d:de:22:46:3a:85:b3:5f:a0:60:2a:
0b:ed:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:35 2026 by rpki-client