
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
File: 4742E76772F118A935D69FD40F69858085C80999.mft (raw, json)
Hash identifier: cdjoWAztVqP9N29YAdA4AHfkA9SrFAJcpduGGdFKjKs=
Subject key identifier: 7C:EF:0B:DE:6F:4F:22:29:C2:89:08:F3:EF:02:EE:CC:68:E6:F4:74
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial: 5952B362A1E5EACCB8081C8D0407A542A7912C8F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
Manifest number: 03FD
Signing time: Mon 12 Oct 2026 09:29:23 +0000
Manifest this update: Mon 12 Oct 2026 09:24:22 +0000
Manifest next update: Tue 13 Oct 2026 11:58:22 +0000
Files and hashes: 1: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: 2TFm2UKUiImd5ddtfKHx4X2Oi1RoBd6GAC8eYGyaUUM=)
2: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: ipnJKGUsIrii4p9SBKsEFwiPqa7GhQ0DlvkjZWOSzz0=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:52:b3:62:a1:e5:ea:cc:b8:08:1c:8d:04:07:a5:42:a7:91:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
Validity
Not Before: Oct 12 09:24:22 2026 GMT
Not After : Oct 13 11:58:22 2026 GMT
Subject: CN=7CEF0BDE6F4F2229C28908F3EF02EECC68E6F474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:06:10:8b:52:34:d4:0d:aa:a7:af:c3:20:
ea:37:0c:db:f2:9f:db:c4:4f:38:78:ff:37:7c:32:
f3:b6:6f:94:86:aa:ca:8b:63:47:7d:d2:7a:53:bc:
dc:51:c5:9c:8b:ff:7c:79:f3:e9:35:5a:23:f9:e3:
86:d2:ca:b1:d8:a7:ec:5f:ba:ac:b2:bb:86:5c:f9:
07:3a:fd:f7:49:4e:3f:6a:d7:98:e9:8e:4d:2c:84:
0b:b3:45:36:88:f5:5f:ea:f5:5f:4f:a1:3b:f4:ba:
72:68:ba:37:8e:61:c6:d0:23:c0:ce:89:98:48:60:
e8:a9:09:c0:52:af:e3:6e:8e:5b:bb:9c:88:76:92:
62:69:cd:fc:e5:0e:f8:85:0d:b4:d5:6d:e1:d8:7d:
c9:0b:b6:d3:89:2d:9d:d6:ee:d2:ae:41:a7:8a:ac:
86:d1:ba:f6:ae:7b:db:c5:75:6a:b3:d6:35:4b:ad:
7d:8f:51:3a:b2:66:5f:eb:cf:08:ec:d0:8b:e4:17:
d8:6b:23:fc:1f:d2:d3:2c:97:45:78:2b:c0:26:48:
28:18:66:66:f6:ee:e8:9b:1a:a9:9c:33:af:04:c0:
e4:2d:44:bf:00:07:02:a7:9b:4d:0d:f6:d3:0d:bd:
3a:9f:6e:5e:2d:73:81:82:99:5c:06:9d:75:c0:46:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EF:0B:DE:6F:4F:22:29:C2:89:08:F3:EF:02:EE:CC:68:E6:F4:74
X509v3 Authority Key Identifier:
keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:32:33:03:d0:fb:6c:f1:a0:be:f9:58:b2:92:94:5c:64:85:
ff:e9:a3:fc:0a:26:d1:7c:14:93:9f:39:20:f7:47:f5:9b:9c:
96:11:b7:2a:f0:9b:57:14:3e:f5:b6:83:70:ab:e5:74:be:6d:
d6:a9:e5:f4:2f:5f:be:75:45:ac:4d:b7:94:28:ee:f0:41:71:
2f:dd:aa:33:9e:5c:c8:48:ea:7a:70:7e:f9:00:b3:4c:3c:34:
94:94:0a:a0:63:01:fe:ed:99:f3:1f:87:ff:38:74:5b:40:6f:
45:48:f7:43:94:2b:82:3c:98:d9:74:99:59:2f:d0:64:28:59:
24:6e:5b:e1:46:51:c5:61:3c:16:c4:99:f8:49:66:62:55:9d:
33:13:51:a7:1c:2f:7d:05:5e:ac:76:c6:ab:e4:df:21:56:a3:
81:a6:43:39:11:73:42:f9:1e:78:98:de:95:2b:2a:97:0b:98:
29:3f:20:32:48:4a:bc:ee:b3:8c:e3:04:65:67:2e:31:53:a0:
83:7c:de:a9:d0:4e:68:08:90:f3:a6:a2:fb:61:3c:86:01:da:
41:e4:6b:f4:b4:1f:01:b4:f0:8a:ea:b8:30:7d:73:25:fd:4c:
88:ca:81:21:5b:9d:7e:cc:ff:75:6a:b6:51:7b:55:f9:90:5e:
fa:d6:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:36:00 2026 by rpki-client