
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
File: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json)
Hash identifier: xoSSYM40y/VYwpB+JPkiBBy49YHjhGfR6Z8UVPZnVK4=
Subject key identifier: 88:63:1B:4E:98:E7:91:26:2B:1A:FC:36:91:A3:C9:C1:70:3D:DD:25
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Certificate issuer: /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial: 6E8DCFE53F5E97F713F1586757E6647F6EA9AA07
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
Manifest number: 0322
Signing time: Fri 17 Apr 2026 20:11:53 +0000
Manifest this update: Fri 17 Apr 2026 20:06:50 +0000
Manifest next update: Sat 18 Apr 2026 21:41:50 +0000
Files and hashes: 1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=)
2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: omM7Pqh2bWWgTfttK8NsXBTRBKa0dL/oyCUZx3ktJFE=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:8d:cf:e5:3f:5e:97:f7:13:f1:58:67:57:e6:64:7f:6e:a9:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Validity
Not Before: Apr 17 20:06:50 2026 GMT
Not After : Apr 18 21:41:50 2026 GMT
Subject: CN=88631B4E98E791262B1AFC3691A3C9C1703DDD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:9b:4b:f0:5b:e1:b7:51:f3:e4:35:ba:41:
1b:4c:b1:e7:e7:5e:29:fa:aa:af:3f:1c:46:73:88:
69:6c:ed:2f:d2:81:5d:07:90:1d:08:4d:9c:4c:1d:
57:36:5d:18:8f:1d:93:e3:9c:0f:a7:c3:2c:3f:36:
9e:5d:e2:4e:15:0e:09:b8:bd:03:b7:9b:35:cd:bf:
4c:5f:68:2b:de:7b:85:d1:54:c8:49:98:7d:2a:7f:
11:fd:e2:7e:b5:aa:6e:64:84:c7:0e:d3:1c:e4:5b:
6d:61:83:6e:80:b6:2f:b7:05:65:2a:5a:03:e1:db:
c9:1b:3f:c8:7d:93:ce:62:c3:26:fd:dc:de:84:cf:
3d:44:12:c2:f8:d2:00:bb:e0:12:b6:e5:d2:aa:b6:
00:d8:0e:62:ef:e4:df:39:00:e7:d4:00:57:26:bd:
92:0b:9a:de:92:a1:66:bd:fe:9e:2a:24:e9:c3:c0:
76:85:38:b5:61:5b:1d:a4:17:fa:b6:22:bf:85:35:
34:cc:41:e5:97:fd:89:4d:29:9c:65:64:84:f0:4f:
1f:7c:2b:7f:30:c0:a7:30:cd:1a:2d:96:a7:22:0f:
86:9a:7a:70:ca:17:55:af:74:90:56:7a:34:91:d1:
7c:16:27:2d:e7:1a:64:e8:d0:42:c3:df:6a:cd:3d:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:1B:4E:98:E7:91:26:2B:1A:FC:36:91:A3:C9:C1:70:3D:DD:25
X509v3 Authority Key Identifier:
keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:2b:eb:17:01:4f:57:92:89:19:f7:c1:62:f1:8b:2f:72:
14:59:0b:c7:7b:d1:26:4a:31:69:21:f0:38:98:56:7e:21:95:
34:98:17:d0:a2:52:4f:f2:ed:dc:a4:de:6e:42:84:c6:72:a7:
2e:6e:9f:e5:e5:c7:5c:91:fb:0f:12:03:23:3c:7f:42:8d:69:
ee:89:43:00:b4:e8:17:28:cc:71:55:8c:74:8d:28:70:3b:c2:
0d:ec:3a:bc:e3:27:85:c0:77:61:d8:eb:13:4b:9f:3c:c5:fb:
1f:2c:98:92:1c:f7:a8:a1:94:fb:be:67:fe:2c:e7:ae:f6:a1:
21:b4:af:d9:be:83:52:3c:0e:86:fa:c2:59:db:21:00:40:64:
d2:d1:96:6d:cc:b6:47:3f:7e:68:f8:d7:17:7c:6d:bb:50:fe:
a9:09:f8:85:7c:51:cd:1d:de:20:62:45:5e:50:84:ca:04:30:
62:b7:c3:61:eb:e7:4a:77:08:ad:36:db:50:02:0b:37:8e:86:
83:4f:64:e8:6c:5c:ae:88:2b:19:f8:28:a2:44:40:41:b4:dc:
1f:f0:6c:5d:88:c5:0a:21:eb:d0:65:82:b2:b3:94:e7:04:91:
45:2c:ff:11:c8:ef:e5:41:4f:a1:4d:80:38:67:3c:cf:b6:27:
2d:89:46:16
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUbo3P5T9el/cT8VhnV+Zkf26pqgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIw
QjIwNUZDMDAeFw0yNjA0MTcyMDA2NTBaFw0yNjA0MTgyMTQxNTBaMDMxMTAvBgNV
BAMTKDg4NjMxQjRFOThFNzkxMjYyQjFBRkMzNjkxQTNDOUMxNzAzREREMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFd5tL8Fvht1Hz5DW6QRtMsefn
Xin6qq8/HEZziGls7S/SgV0HkB0ITZxMHVc2XRiPHZPjnA+nwyw/Np5d4k4VDgm4
vQO3mzXNv0xfaCvee4XRVMhJmH0qfxH94n61qm5khMcO0xzkW21hg26Ati+3BWUq
WgPh28kbP8h9k85iwyb93N6Ezz1EEsL40gC74BK25dKqtgDYDmLv5N85AOfUAFcm
vZILmt6SoWa9/p4qJOnDwHaFOLVhWx2kF/q2Ir+FNTTMQeWX/YlNKZxlZITwTx98
K38wwKcwzRotlqciD4aaenDKF1WvdJBWejSR0XwWJy3nGmTo0ELD32rNPcSbAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUiGMbTpjnkSYrGvw2kaPJwXA93SUwHwYDVR0j
BBgwFoAUWr4vYJmWR2qv4Ua8WnJCmwsgX8AwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAv
NUFCRTJGNjA5OTk2NDc2QUFGRTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy81QUJFMkY2MDk5OTY0NzZBQUZFMTQ2QkM1QTcyNDI5
QjBCMjA1RkMwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY0ODMy
NjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzAvNUFCRTJGNjA5OTk2NDc2QUFG
RTE0NkJDNUE3MjQyOUIwQjIwNUZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHNYK+sXAU9XkokZ98Fi
8YsvchRZC8d70SZKMWkh8DiYVn4hlTSYF9CiUk/y7dyk3m5ChMZypy5un+Xlx1yR
+w8SAyM8f0KNae6JQwC06BcozHFVjHSNKHA7wg3sOrzjJ4XAd2HY6xNLnzzF+x8s
mJIc96ihlPu+Z/4s5672oSG0r9m+g1I8Dob6wlnbIQBAZNLRlm3Mtkc/fmj41xd8
bbtQ/qkJ+IV8Uc0d3iBiRV5QhMoEMGK3w2Hr50p3CK0221ACCzeOhoNPZOhsXK6I
Kxn4KKJEQEG03B/wbF2IxQoh69BlgrKzlOcEkUUs/xHI7+VBT6FNgDhnPM+2Jy2J
RhY=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:01 2026 by rpki-client