
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json)
Hash identifier: 3b8JfjRXq9vsPH9uHCYQu0zXN6/vqzuOBKdgxuANa5I=
Subject key identifier: 13:90:52:FB:A7:64:7C:E9:33:D7:29:4A:5C:A0:E2:22:C9:15:CD:0C
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial: 3AF58ADE2125CCD252114EACC1ACF3FCDF0BE6A7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
Manifest number: 03A9
Signing time: Tue 28 Jul 2026 17:29:01 +0000
Manifest this update: Tue 28 Jul 2026 17:24:01 +0000
Manifest next update: Wed 29 Jul 2026 20:36:01 +0000
Files and hashes: 1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: i7uZ6kuAMUDRGGjZBz0Vl5VpijCufoXuY1ufMZ+k83s=)
2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: vLIWvTOeqZrJSgEYDTCEJlJlK8fjWT2LCRCoMabdpSo=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f5:8a:de:21:25:cc:d2:52:11:4e:ac:c1:ac:f3:fc:df:0b:e6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Validity
Not Before: Jul 28 17:24:01 2026 GMT
Not After : Jul 29 20:36:01 2026 GMT
Subject: CN=139052FBA7647CE933D7294A5CA0E222C915CD0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:4d:d5:1e:62:86:12:3f:b2:65:e1:6d:cc:
9e:86:7c:e7:ae:c4:7e:71:dc:d1:9f:d7:f6:30:fd:
28:5a:6b:35:9d:9f:68:84:0c:30:1d:79:db:1c:47:
d6:61:25:78:d7:41:2f:a6:a1:52:40:52:7b:ba:1d:
4c:fb:63:85:53:17:3e:aa:69:f9:ff:72:da:fe:3b:
94:aa:b7:ba:7d:a8:6f:98:d6:11:cb:28:d9:a3:47:
ec:28:c2:18:67:35:dc:68:83:68:c4:92:38:57:e3:
76:dc:47:b8:b9:35:82:df:57:1e:e4:04:ca:e4:95:
71:f3:eb:2d:8d:89:2b:d1:79:7f:82:d4:6b:df:b2:
bd:f0:9e:c3:9b:9c:c2:be:8b:79:11:0b:93:97:6d:
16:54:73:b1:7d:47:6e:a7:e1:ee:07:7a:0b:a2:66:
d4:8f:67:ee:b1:8c:0d:a4:e0:89:07:ae:9f:e3:3c:
b5:2a:1f:7e:ca:86:a2:15:1e:2e:ea:71:63:1a:52:
80:8b:52:98:31:98:1a:b7:2a:80:4f:13:61:8a:dd:
ee:1b:78:34:21:f8:bf:64:19:4d:12:41:8c:4b:2e:
4a:34:38:cb:58:aa:ce:d6:74:bd:e4:68:1a:69:62:
9b:d9:f0:66:86:09:27:94:a4:ce:b3:bb:87:8f:4c:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:52:FB:A7:64:7C:E9:33:D7:29:4A:5C:A0:E2:22:C9:15:CD:0C
X509v3 Authority Key Identifier:
keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9d:ab:07:16:5e:2c:24:ae:77:dd:ee:c9:d0:42:ee:8b:64:
56:f3:6f:b8:40:e5:09:d1:8d:57:91:53:46:44:51:bf:4e:4c:
37:6f:64:1a:67:68:f5:b7:fb:38:2d:cb:4d:92:fe:2f:f3:a3:
f6:69:46:2e:60:d4:8d:e0:bc:5f:7f:11:14:9e:69:c8:98:ff:
22:69:db:73:67:45:ac:f8:c8:6d:ee:ce:40:f0:1d:c8:71:c7:
1a:cd:b1:f2:13:cf:d7:9c:69:b5:9a:67:70:27:58:dd:d5:d2:
b6:0a:8d:b6:c1:a7:ae:9a:d6:1a:b7:7b:ed:73:dc:c4:f1:ca:
c0:25:e2:3b:73:26:09:a2:a1:2d:07:51:f2:79:e9:39:c6:ae:
d4:d5:9a:02:2f:fc:c5:5b:4d:51:d1:ec:d8:55:b0:e2:f1:ab:
b8:3d:a3:4f:7c:2a:60:7b:74:81:58:98:d8:c5:7d:04:39:51:
57:64:76:92:23:84:ef:da:43:15:c8:0f:92:c9:22:16:6a:49:
bf:3f:81:1b:23:02:6a:71:4f:78:8b:fb:e3:1a:30:20:39:c7:
4b:f3:33:22:78:49:66:02:04:9b:fa:45:f1:7a:e7:53:cc:19:
22:fd:d7:9c:b9:a0:b9:42:eb:ae:da:4a:ca:30:5d:2d:16:da:
13:98:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:23 2026 by rpki-client