
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json)
Hash identifier: 1SJMvVR2JMek7EfYcirdkTO/552+eZZwYAJDlv+lpRY=
Subject key identifier: AB:C3:EB:D6:F0:5B:2C:AC:BD:5F:3E:D1:52:C8:44:49:D3:EF:34:7B
Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Certificate serial: 7190E3AAE463BC857DD1D73590AA6B35EBE6B605
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
Manifest number: 0347
Signing time: Sat 13 Jun 2026 15:01:48 +0000
Manifest this update: Sat 13 Jun 2026 14:56:48 +0000
Manifest next update: Sun 14 Jun 2026 16:08:48 +0000
Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: h9vjM4Y8h9XYip2DhtqxIq2WERJ97xyc1ecDG0LnGyI=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:90:e3:aa:e4:63:bc:85:7d:d1:d7:35:90:aa:6b:35:eb:e6:b6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Validity
Not Before: Jun 13 14:56:48 2026 GMT
Not After : Jun 14 16:08:48 2026 GMT
Subject: CN=ABC3EBD6F05B2CACBD5F3ED152C84449D3EF347B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:5d:18:01:c1:e6:2e:c1:97:5d:52:df:d2:
25:cc:79:2f:fc:2f:b0:f7:02:59:93:00:8d:ec:d5:
50:e7:28:68:7f:22:ff:95:49:8c:e3:d1:bf:80:0f:
82:c7:23:a8:3d:e4:b3:70:48:e2:25:44:6a:52:31:
a7:49:7a:cd:66:87:d6:d8:1b:e2:62:0c:f0:79:8e:
0b:46:6f:ab:a0:f3:a3:f9:c0:9f:8c:17:3a:00:06:
c8:02:9e:06:da:4d:55:70:ff:d6:ac:1f:e2:a8:dc:
7e:48:81:f0:93:60:d6:3e:37:84:7b:96:fc:d0:68:
ed:64:b3:3b:2f:ba:01:51:b5:d0:3f:58:56:98:2a:
d5:b5:0f:f3:3d:b7:74:66:72:b1:10:be:31:c8:91:
e3:36:cc:39:77:9b:51:d6:df:ec:b0:d5:6f:94:9d:
6a:95:36:0e:9a:27:82:10:92:d9:0b:df:4d:b4:57:
17:a0:1b:79:02:30:75:ce:b0:20:5d:bf:33:af:f9:
3a:f8:28:d4:81:75:3b:d3:a4:15:16:23:29:0b:be:
91:8c:9e:f7:15:05:d8:45:71:2c:a9:95:d4:79:68:
7e:42:8c:4c:92:b1:31:ce:18:09:7d:b1:30:41:28:
95:bf:28:0d:26:38:6c:65:f2:9d:89:fe:2c:0a:7b:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:EB:D6:F0:5B:2C:AC:BD:5F:3E:D1:52:C8:44:49:D3:EF:34:7B
X509v3 Authority Key Identifier:
keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3b:24:28:bf:cd:85:84:c0:d2:db:c8:ba:5a:80:05:c3:2d:
21:7a:17:ba:50:b9:86:68:f9:08:48:ec:e0:b2:ed:75:ad:f5:
f1:10:cc:8d:03:1b:53:07:34:18:3a:b9:33:99:2f:51:83:f6:
fd:dc:f8:b9:bb:b6:5c:53:bf:24:21:45:b4:2d:12:ab:e2:fc:
b7:ff:28:9d:2a:71:74:4c:a0:df:70:f8:2c:6d:e9:85:a1:be:
5e:12:20:6d:eb:ba:83:24:b1:1f:cd:9e:c1:9c:2b:60:da:18:
f3:e0:c2:6d:17:e4:2e:66:cc:39:e5:18:1f:78:79:f6:0b:fa:
38:17:50:89:24:06:54:a5:ca:08:4c:0f:f6:82:c7:b7:37:aa:
6d:98:4d:a6:89:06:24:c2:0f:a2:c0:cb:b9:dd:2f:8f:3f:9f:
d3:1e:85:e2:5b:1d:e6:9d:d8:cb:73:9f:6b:5f:45:17:c8:8a:
f7:48:95:35:de:0c:66:aa:27:32:e9:d1:5c:12:19:d9:30:1d:
98:b1:56:51:d6:f2:cd:1f:2c:96:aa:2a:16:1f:d2:95:7a:5e:
0a:31:fc:67:b3:b8:50:c3:ae:94:fa:0d:3f:e0:33:0c:4a:74:
ec:3e:d3:35:74:9b:97:da:b7:95:ef:ec:47:8b:34:c6:da:c3:
72:ab:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:34:43 2026 by rpki-client