
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json)
Hash identifier: JbYHmN4nT4QyeakJlyomWZr2ViJL9BaGFfZctnWrO44=
Subject key identifier: 8D:0B:C4:A6:69:09:86:B8:9D:F5:1F:52:4D:1F:BD:AB:EE:FC:68:01
Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Certificate serial: 16DE0C2890C822492208FFA1C9681CD00C835BA2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
Manifest number: 027E
Signing time: Tue 28 Jul 2026 13:32:19 +0000
Manifest this update: Tue 28 Jul 2026 13:27:19 +0000
Manifest next update: Wed 29 Jul 2026 14:09:19 +0000
Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: uZru9Uz7hrHjRKJ4L6OGv1JhsOmFawkgkuMG1B1FVLo=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:de:0c:28:90:c8:22:49:22:08:ff:a1:c9:68:1c:d0:0c:83:5b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Validity
Not Before: Jul 28 13:27:19 2026 GMT
Not After : Jul 29 14:09:19 2026 GMT
Subject: CN=8D0BC4A6690986B89DF51F524D1FBDABEEFC6801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:7e:2f:88:4b:22:1f:53:fd:6e:75:b8:aa:
04:d0:97:ca:2c:35:e7:a8:17:5f:58:cf:f4:15:93:
0a:fe:c3:37:5a:5f:51:be:1e:74:65:26:5b:70:76:
bc:b1:87:4f:dc:03:cc:4b:2e:bf:e1:a3:e7:7c:1a:
20:56:e3:98:3c:9e:88:62:d1:c7:0e:24:f4:c9:e1:
bd:a1:b4:96:42:c1:45:23:be:40:99:d1:f1:2d:eb:
3e:ee:7b:2d:ef:05:d4:42:ab:4c:c6:d1:ef:4e:09:
50:e2:05:48:80:57:df:2b:91:1d:6c:8e:48:61:75:
9e:86:44:93:a5:83:cf:20:90:2b:da:40:d0:10:f1:
bf:a1:f2:f3:15:c0:11:ce:95:8e:a0:72:61:d8:36:
24:78:7b:b7:ac:da:ff:d3:96:5e:c4:4f:de:a6:c0:
86:26:77:6c:63:6f:04:64:ba:ee:2a:a3:ec:9f:60:
ae:60:57:35:00:c8:f9:47:42:b8:cd:7a:fc:98:a8:
50:c3:ba:bb:3a:b7:3f:9a:7b:5a:77:52:c7:27:15:
92:a3:a4:24:83:74:17:25:32:2b:6f:14:b2:80:5e:
e6:8c:cd:d6:e0:e0:ca:8b:d9:5d:6a:00:a9:2c:95:
f4:87:a2:57:de:cf:01:9f:fa:1c:2b:41:c3:d4:64:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:C4:A6:69:09:86:B8:9D:F5:1F:52:4D:1F:BD:AB:EE:FC:68:01
X509v3 Authority Key Identifier:
keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:71:57:51:dc:e1:ac:1e:2a:f9:b4:73:3d:f3:11:10:12:18:
62:34:a9:e0:de:46:0b:82:a3:a7:33:49:49:6a:64:1b:bc:f4:
b5:ee:f0:91:b3:93:25:62:c6:87:43:db:38:a8:9d:13:9c:2a:
f9:6e:9f:c2:59:34:77:10:b4:aa:f0:fc:19:a1:d4:08:1c:8e:
19:b9:e8:8c:4e:cf:b3:48:0f:2f:61:87:f8:38:3e:94:8b:e1:
8d:e0:8b:34:2f:26:82:a5:76:18:93:86:90:af:3b:ec:ba:d9:
15:f6:6e:2f:f7:ba:77:67:ae:cd:9e:2d:dd:0c:61:93:f1:af:
ab:bd:1d:55:eb:49:db:1d:de:c9:02:73:5b:e2:a8:1e:25:f6:
86:16:bb:4e:aa:16:e4:58:0c:7c:7b:1c:e3:f1:97:56:42:59:
5d:fa:a6:8b:1d:91:69:2a:3d:e2:b2:28:42:92:93:2c:4d:7b:
42:4c:fb:0c:95:a1:9b:6f:3b:84:6e:c9:36:78:95:c4:7c:04:
6f:9a:4d:83:03:47:36:a6:2e:f1:1a:1e:dd:ef:b7:21:5b:c6:
93:84:f1:c2:80:ec:24:3e:33:30:95:f9:cc:ac:c2:d1:c3:5e:
35:36:60:74:4b:9c:56:cd:16:3c:b0:cc:62:26:32:ac:d1:97:
7e:72:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:24 2026 by rpki-client