
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json)
Hash identifier: qxABLQa8pkJL+nFrSjyAVuHKBiGAA/dqRCBNpQZcQZ4=
Subject key identifier: A4:09:D0:F2:41:04:B6:C4:D3:79:D6:D6:E1:34:C4:C1:BE:74:46:C6
Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Certificate serial: 47DDEAEF79689B1C5240FE7D678F136459807A72
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
Manifest number: 0242
Signing time: Sat 13 Jun 2026 02:04:34 +0000
Manifest this update: Sat 13 Jun 2026 01:59:34 +0000
Manifest next update: Sun 14 Jun 2026 05:06:34 +0000
Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: GlQcILqkOaxkPSZxWYS4iAEpiBJXlUQLohzSX2lLFdk=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:dd:ea:ef:79:68:9b:1c:52:40:fe:7d:67:8f:13:64:59:80:7a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Validity
Not Before: Jun 13 01:59:34 2026 GMT
Not After : Jun 14 05:06:34 2026 GMT
Subject: CN=A409D0F24104B6C4D379D6D6E134C4C1BE7446C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:f1:04:ad:ba:08:7a:ac:cd:3f:d4:7f:7f:
d4:11:8a:d0:c2:00:34:4c:2a:d7:26:7a:e5:3c:ec:
7d:ab:63:64:24:cb:e6:20:cc:06:b4:b3:a3:ff:25:
7e:e3:28:b1:ae:d9:8f:eb:fc:bf:f1:87:c6:4f:4e:
24:7d:7f:4a:61:b4:99:81:3e:de:dc:b6:5e:c3:0a:
e9:75:0c:d1:ad:94:49:00:d3:4c:e3:0c:db:9d:8a:
8c:e7:d1:03:a6:2e:a0:0f:75:a9:2b:db:0d:10:9d:
f2:af:6c:2d:12:f2:d2:d3:c3:4f:90:61:c4:61:48:
d0:2c:00:91:a4:e2:38:21:ed:88:14:42:4f:bc:43:
9d:00:7a:4e:67:bc:35:fc:45:c0:40:fc:e7:55:05:
17:7d:f4:0a:70:79:41:f0:70:ac:1c:f4:f1:7d:eb:
2b:9d:0b:24:f4:34:f0:ae:e4:14:02:fe:75:8a:f0:
11:7f:e1:d1:89:25:9a:92:23:4b:8a:99:4c:58:c8:
a2:37:b3:5a:e6:f4:3b:bc:31:57:28:07:8d:26:19:
3f:ca:41:4e:01:50:8e:90:e3:aa:02:77:d4:4d:ac:
2e:73:54:96:e7:36:e8:89:18:91:8c:be:25:91:95:
29:ba:17:e3:5c:09:5c:bd:eb:cd:6a:5f:92:c7:61:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:D0:F2:41:04:B6:C4:D3:79:D6:D6:E1:34:C4:C1:BE:74:46:C6
X509v3 Authority Key Identifier:
keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:17:11:a2:0f:57:a8:f7:bd:6f:3b:77:ca:39:39:33:c9:5d:
52:ff:5b:3d:a2:7f:b0:43:f8:3c:c8:8b:74:4b:04:f0:a4:29:
c7:ba:c4:84:d6:ff:97:e5:ef:f2:68:56:5c:8c:bb:93:34:e0:
23:30:80:8f:7e:6e:b8:1f:07:a9:29:ec:57:8f:8b:02:52:14:
f1:06:04:2a:ff:4a:80:78:73:25:c1:fb:dd:9f:12:4a:8b:33:
26:23:a6:93:2b:60:d0:9f:fc:7f:3d:9f:ac:a5:f3:f2:37:99:
05:e3:31:71:a2:af:4c:ab:1a:04:be:68:e7:fb:23:9b:6e:cd:
05:6f:1f:c6:5c:f0:01:17:ad:d7:65:d4:1f:9e:e6:45:f3:5c:
e1:c8:07:84:f8:ac:c0:0b:cf:b0:c3:7b:3c:19:34:f3:83:1c:
77:58:cf:cc:10:14:2d:32:18:6e:d9:32:d9:c1:d9:7e:86:79:
03:6e:9c:f3:6c:f4:9f:93:82:6a:1b:30:56:6e:b6:65:fe:4b:
7a:ae:56:41:f0:f3:be:fa:68:91:0e:95:f1:66:ec:30:80:60:
53:a9:7e:ab:f2:5a:89:64:12:44:d9:af:98:3c:6c:53:01:47:
b4:04:fe:9f:52:95:cc:ba:db:b2:be:37:3a:45:12:ab:ae:b9:
9a:a3:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:33:20 2026 by rpki-client