
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
File: CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft (raw, json)
Hash identifier: 0fKGyMrQoJYn7/2TKZpgNHiZDpoNjQJcB3zZ80/H2y0=
Subject key identifier: 68:F6:45:5F:9A:69:F0:5F:5F:A1:37:E4:B2:C9:59:5E:81:91:1F:D6
Authority key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
Certificate issuer: /CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Certificate serial: 32F2E1E6289D467B2A3F22372C667226ED512824
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
Manifest number: 98
Signing time: Tue 22 Sep 2026 00:41:52 +0000
Manifest this update: Tue 22 Sep 2026 00:36:52 +0000
Manifest next update: Wed 23 Sep 2026 01:48:52 +0000
Files and hashes: 1: CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl (hash: TSJDt6MvKkHaYLSMnrrtmwIVRSP5zMtOVDpg2GlX1D8=)
2: 326131313a663263303a666665343a3a2f34382d3438203d3e20313937323435.roa (hash: X9IRdYbMNBA8lcLk1xPTqNLh5EyLbXKxd9XO8hLWoDA=)
3: 326131313a663263303a666665343a3a2f34372d3437203d3e20313937323435.roa (hash: U8HCHH1idotg5sEqWQ7iYfrPuhsaQSp9zz9M5wqrUjY=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f2:e1:e6:28:9d:46:7b:2a:3f:22:37:2c:66:72:26:ed:51:28:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Validity
Not Before: Sep 22 00:36:52 2026 GMT
Not After : Sep 23 01:48:52 2026 GMT
Subject: CN=68F6455F9A69F05F5FA137E4B2C9595E81911FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:79:33:50:bd:96:e1:d4:c2:40:51:bb:cf:
45:ce:47:cb:47:1b:b6:a1:ab:89:b2:fa:f9:2d:9b:
9a:c7:8c:27:d9:db:17:06:2e:4c:5e:51:6c:85:29:
04:df:8c:d9:4f:d8:46:3d:5f:c0:3b:f8:72:80:84:
3b:db:f0:83:fb:4a:dc:09:52:6b:1a:92:b6:9c:32:
2c:5b:67:91:65:5a:cc:fb:60:3b:cd:b7:bf:54:d4:
03:42:6a:4d:36:1c:2e:fc:88:a2:8f:0a:a2:10:62:
ce:7d:2d:ef:c9:20:3f:cd:28:82:41:91:fa:47:b3:
87:de:1a:37:1d:70:92:e1:8d:24:17:83:f8:21:1f:
e3:49:7f:a5:66:fa:b3:8b:3b:09:6e:f6:fc:ad:c2:
2a:52:54:fa:6c:60:71:61:14:64:18:30:c4:bc:a8:
13:7a:9c:72:db:b6:80:82:50:e9:6a:42:da:29:da:
be:fc:cb:c2:cf:f2:ae:9c:87:32:94:2f:84:7f:8c:
50:25:cb:29:0d:d2:78:3e:29:34:cd:05:d8:1a:9d:
cb:53:0e:07:81:83:6b:68:91:22:0a:ef:b8:e5:1d:
16:d5:41:d3:c7:67:c7:a0:3e:60:33:55:2d:1c:b9:
3c:ef:5f:b0:7a:22:fc:c7:3d:23:7d:f4:38:e9:d3:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:45:5F:9A:69:F0:5F:5F:A1:37:E4:B2:C9:59:5E:81:91:1F:D6
X509v3 Authority Key Identifier:
keyid:CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:cb:90:53:23:68:c9:4e:79:36:c4:fc:df:31:5f:53:3c:
b9:26:e6:9c:4e:b7:fc:4d:98:fc:75:43:fd:6c:8a:72:81:81:
79:f0:e0:95:41:1b:b7:4e:d8:0d:3e:aa:02:93:48:d7:66:c7:
40:5f:0b:54:db:c8:c2:46:a9:3c:32:ff:83:0b:9a:5b:ef:7c:
bd:ef:1f:36:7d:d4:b4:94:53:9d:bd:5b:a8:1e:2a:85:d5:8c:
cb:96:b6:cc:c9:3d:bb:aa:54:73:d4:2b:17:19:c8:06:00:55:
0d:70:fe:14:0c:e6:7a:e0:4b:7f:1d:ea:20:af:71:90:07:ea:
19:95:bc:2d:e2:45:2e:81:83:5e:4a:f5:57:7b:18:c5:b1:f9:
cf:8d:24:b2:2c:39:fc:1f:0c:36:f2:d0:cf:eb:d6:72:d4:f6:
10:47:8b:4e:15:bc:42:e8:5d:31:97:ae:da:84:73:ef:eb:1f:
41:41:cd:30:da:9e:8f:60:be:fb:19:8d:b8:b2:8a:b9:47:47:
e8:67:d4:58:71:d0:49:7d:21:16:92:eb:5e:a4:d6:63:54:ef:
49:d0:44:a3:39:b7:df:a7:cb:72:a5:f6:ca:8d:99:23:4b:18:
a0:c8:31:6d:19:5a:77:df:8f:b3:6f:90:72:88:24:dd:53:73:
61:4d:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:46:31 2026 by rpki-client