
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
File: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft (raw, json)
Hash identifier: MET3mupXzzqgmwA1TlpO+dhK4olTT/9FItgCy7/dReY=
Subject key identifier: 08:49:0E:9E:7E:A0:C1:E2:20:A0:C4:F1:0F:3B:F6:E3:EA:1F:78:8C
Authority key identifier: 62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
Certificate issuer: /CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
Certificate serial: 0308FF41F52A94E3F4DCF641B111E1DC14DE62F0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
Manifest number: 0215
Signing time: Fri 17 Apr 2026 17:54:27 +0000
Manifest this update: Fri 17 Apr 2026 17:49:25 +0000
Manifest next update: Sat 18 Apr 2026 19:14:25 +0000
Files and hashes: 1: 326131313a663263303a666663623a3a2f34382d3438203d3e20323133343931.roa (hash: EEncWQ01eVc4Q2mIJszNjdFlx1GOL5DQez1Clkannzg=)
2: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl (hash: VPSyKbvNwKaQ1lt2aA/KE/qzfxTS4rUNi+WTBGg/C7E=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:08:ff:41:f5:2a:94:e3:f4:dc:f6:41:b1:11:e1:dc:14:de:62:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
Validity
Not Before: Apr 17 17:49:25 2026 GMT
Not After : Apr 18 19:14:25 2026 GMT
Subject: CN=08490E9E7EA0C1E220A0C4F10F3BF6E3EA1F788C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:f7:f2:d0:46:0c:29:ee:04:af:85:8f:ab:
c8:59:4f:4a:7b:6b:fb:b6:c4:f8:3f:e6:08:61:56:
d0:4f:18:c1:ac:45:ca:d0:e4:7f:0a:70:af:5d:33:
00:21:ab:02:63:22:26:13:81:65:11:cf:8a:04:bb:
e6:35:0a:25:fd:a4:61:94:d7:8c:6d:ef:a3:fa:74:
b7:51:ae:7a:a2:b7:e9:ce:b6:c5:f0:12:f1:69:29:
b6:80:2a:ce:fb:ac:c2:12:eb:db:e0:57:1c:56:b1:
ef:79:f6:eb:9d:ce:b1:9a:ba:09:e3:db:e4:b0:3d:
4b:4d:4a:ec:f8:d0:79:4b:d7:eb:f7:a8:ae:4d:26:
4c:49:ee:41:d8:3f:47:a9:8c:69:10:5f:48:d1:22:
45:de:27:ae:1e:f3:3d:a1:6c:6d:7c:bb:ef:28:05:
8b:a1:bb:93:ea:d9:36:6f:17:04:d3:1e:3e:2f:f2:
82:35:13:4d:1e:c2:5f:35:d9:dc:a9:9f:39:5c:5c:
a8:6c:87:4a:e3:ba:89:14:74:35:34:45:c6:21:6f:
ec:b4:f7:3e:bc:f8:2e:af:ca:2e:84:08:11:b8:fb:
08:a2:d7:d7:3d:27:ba:9a:d0:74:b5:cd:fc:93:d9:
08:6f:8a:ab:8a:45:dc:fe:91:97:f2:5a:5d:83:52:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:0E:9E:7E:A0:C1:E2:20:A0:C4:F1:0F:3B:F6:E3:EA:1F:78:8C
X509v3 Authority Key Identifier:
keyid:62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f8:ad:d9:6c:42:80:01:a8:f9:4e:72:2d:f4:9e:a5:64:b1:
6c:b3:b9:61:ed:64:8c:8c:9e:7b:f3:b2:39:2b:04:45:18:21:
56:13:42:43:e5:c3:fd:f7:ab:84:97:b5:41:8a:0c:b1:78:aa:
ab:ff:15:14:73:5a:28:11:36:08:0e:28:fb:b1:4f:73:4f:9e:
38:f3:3f:73:23:77:f5:cd:0e:04:f2:f9:84:0f:d3:49:81:2f:
e9:35:12:96:fb:8c:d9:66:b5:f1:cf:ba:b3:85:17:fd:de:56:
19:aa:b1:45:10:49:79:36:df:06:74:5f:3b:ca:21:ad:f4:93:
2c:38:7c:0e:58:9e:40:8a:70:f1:ec:0b:98:9a:0e:85:10:6f:
47:5b:6e:4e:f8:ef:f3:c7:e4:aa:d1:7f:23:23:d9:71:b7:62:
11:78:11:e3:0a:7a:1f:30:d5:24:0b:a2:30:d3:e1:4a:81:ab:
9b:e0:89:14:10:bb:52:f8:00:c7:a0:e8:7b:8b:c1:e8:a1:82:
74:f2:bd:43:7a:c6:fd:fb:56:12:9f:a1:bb:87:df:cc:df:cd:
a2:5e:b0:51:eb:5b:53:cf:cb:2c:f4:e8:60:bd:91:20:73:be:
bd:dd:d5:74:49:e8:f0:2d:c0:90:7f:57:54:31:88:6f:57:55:
02:db:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:47:37 2026 by rpki-client