
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json)
Hash identifier: MNVBAM9/ZY9XKjCKSaZCyGZCD0int5lqImyCxOFf9MU=
Subject key identifier: 88:B6:49:72:87:ED:FE:A7:73:91:F8:30:F1:0B:F6:72:85:D1:BE:7C
Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71
Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
Certificate serial: 670FE48D95595DB6881708E133E947B594EB8A4A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
Manifest number: 036F
Signing time: Sat 13 Jun 2026 16:42:05 +0000
Manifest this update: Sat 13 Jun 2026 16:37:05 +0000
Manifest next update: Sun 14 Jun 2026 17:29:05 +0000
Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY=)
2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: mGICFwpePDC//7H7pNzqqtaxos1cs8gBg5nTz4FiekQ=)
3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: /bDRwYz5Z4nf7qIfGWvlKBy77Oh2V60bcVLckJfhV/s=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0f:e4:8d:95:59:5d:b6:88:17:08:e1:33:e9:47:b5:94:eb:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
Validity
Not Before: Jun 13 16:37:05 2026 GMT
Not After : Jun 14 17:29:05 2026 GMT
Subject: CN=88B6497287EDFEA77391F830F10BF67285D1BE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:4e:7c:6d:58:09:4f:ea:15:79:8a:4e:53:
21:77:43:73:c8:5d:63:c9:9f:b4:ff:5f:87:98:9d:
44:68:ec:f4:67:70:4c:35:64:a0:73:75:79:7f:4b:
43:6f:ab:d6:fb:1d:b2:50:15:ae:f5:2f:2a:c5:e9:
ff:f7:50:5b:75:1e:5b:0c:0c:72:2d:a0:64:91:99:
a5:35:6a:d7:b9:b3:09:f1:d0:92:66:68:dc:d8:2e:
fc:61:e5:1a:31:57:58:45:54:85:e8:a8:5b:28:68:
e5:16:ca:8d:a2:d8:ce:82:a8:d0:87:01:23:e4:38:
41:73:57:e7:59:8c:a2:7d:c1:c2:6e:57:b4:5e:fd:
05:c6:2e:59:44:f7:5d:6b:3c:8f:4f:48:dc:71:0d:
67:5a:45:7c:0d:ee:bd:4a:f3:2b:c4:1c:37:a0:a5:
26:86:18:88:3a:82:51:e7:ab:31:87:15:4d:cd:35:
cc:e4:54:dc:d2:f2:37:7d:63:d8:1f:e4:5a:2d:b8:
f1:11:97:ba:28:e3:54:d7:4e:49:ee:9a:a5:b6:0c:
a4:88:6a:01:3b:da:b7:f0:ea:d2:e7:f0:44:dc:71:
53:2f:53:39:a9:a6:ab:81:61:32:8f:c7:d0:24:bb:
73:3a:59:9a:e7:d0:35:67:5c:21:8e:83:0f:3f:b0:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:49:72:87:ED:FE:A7:73:91:F8:30:F1:0B:F6:72:85:D1:BE:7C
X509v3 Authority Key Identifier:
keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:04:5c:0f:5e:db:80:53:bd:08:02:ef:77:3b:c1:fd:88:d6:
f2:52:68:58:05:37:81:83:4a:60:06:f4:46:43:4a:eb:b4:03:
20:0a:fd:f8:73:93:93:ab:11:36:4b:66:ba:d1:b1:bc:22:9c:
f2:be:c8:51:1c:59:d3:f1:8d:85:7a:35:cd:de:2d:31:e8:86:
50:15:37:02:b4:d2:1a:47:08:77:8f:0f:f0:cd:0c:b2:f3:a0:
3b:55:5c:7b:4d:85:08:79:19:e3:0a:94:f8:de:aa:9d:5e:8e:
91:42:ea:e0:02:af:b9:0c:c7:90:2c:5b:62:ff:65:b2:1b:5f:
db:bd:be:93:9a:3d:72:4c:00:8a:50:ec:bd:2a:1a:bf:2c:cb:
57:0c:8a:51:7f:8f:1e:0b:5e:e4:1e:05:86:df:87:8f:78:06:
d0:e0:9a:ad:d7:01:fa:de:fd:36:8e:65:a3:78:4f:08:01:96:
25:f9:24:74:86:60:f0:92:72:3b:c1:31:ee:a7:39:b8:03:c3:
9a:28:d5:50:74:87:eb:7c:6d:cc:e2:c8:46:2c:86:51:be:c7:
b6:3b:55:c7:0c:57:93:68:59:7d:de:b0:69:20:02:70:87:54:
b7:24:1e:4b:26:a2:ee:d5:16:1d:85:8d:f8:b1:4b:f2:c4:3e:
37:e3:fc:e1
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUZw/kjZVZXbaIFwjhM+lHtZTrikowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4
ODdFQUQ3MTAeFw0yNjA2MTMxNjM3MDVaFw0yNjA2MTQxNzI5MDVaMDMxMTAvBgNV
BAMTKDg4QjY0OTcyODdFREZFQTc3MzkxRjgzMEYxMEJGNjcyODVEMUJFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnE058bVgJT+oVeYpOUyF3Q3PI
XWPJn7T/X4eYnURo7PRncEw1ZKBzdXl/S0Nvq9b7HbJQFa71LyrF6f/3UFt1HlsM
DHItoGSRmaU1ate5swnx0JJmaNzYLvxh5RoxV1hFVIXoqFsoaOUWyo2i2M6CqNCH
ASPkOEFzV+dZjKJ9wcJuV7Re/QXGLllE911rPI9PSNxxDWdaRXwN7r1K8yvEHDeg
pSaGGIg6glHnqzGHFU3NNczkVNzS8jd9Y9gf5FotuPERl7oo41TXTknumqW2DKSI
agE72rfw6tLn8ETccVMvUzmppquBYTKPx9Aku3M6WZrn0DVnXCGOgw8/sNGjAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUiLZJcoft/qdzkfgw8Qv2coXRvnwwHwYDVR0j
BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv
MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG
Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3
MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF
NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAIEXA9e24BTvQgC73c7
wf2I1vJSaFgFN4GDSmAG9EZDSuu0AyAK/fhzk5OrETZLZrrRsbwinPK+yFEcWdPx
jYV6Nc3eLTHohlAVNwK00hpHCHePD/DNDLLzoDtVXHtNhQh5GeMKlPjeqp1ejpFC
6uACr7kMx5AsW2L/ZbIbX9u9vpOaPXJMAIpQ7L0qGr8sy1cMilF/jx4LXuQeBYbf
h494BtDgmq3XAfre/TaOZaN4TwgBliX5JHSGYPCScjvBMe6nObgDw5oo1VB0h+t8
bcziyEYshlG+x7Y7VccMV5NoWX3esGkgAnCHVLckHksmou7VFh2FjfixS/LEPjfj
/OE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:20:36 2026 by rpki-client