
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
File: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft (raw, json)
Hash identifier: ygqWDAuyQzHKZW9NgrXwpW8F2ySk3+RXzWA8BAyX5CQ=
Subject key identifier: BD:D8:64:30:7C:16:F2:9F:0C:C3:8B:8D:9B:DA:D7:A5:49:E0:CE:B3
Authority key identifier: 3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24
Certificate issuer: /CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824
Certificate serial: 17527A7EB046659D4A5BEA55D7476A190386095F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
Manifest number: 7B
Signing time: Tue 28 Jul 2026 23:11:41 +0000
Manifest this update: Tue 28 Jul 2026 23:06:41 +0000
Manifest next update: Thu 30 Jul 2026 02:19:41 +0000
Files and hashes: 1: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl (hash: vNCQ4SDNeB6N3CiIYzYs0wG18+iSt9d2ujLV49nWZKs=)
2: 326131313a663263303a666665333a3a2f34382d3438203d3e20323131333730.roa (hash: v6P7lVcBcrvneKUvz62ZdwKzn3zDH59Qve86pHfHkj8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:52:7a:7e:b0:46:65:9d:4a:5b:ea:55:d7:47:6a:19:03:86:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824
Validity
Not Before: Jul 28 23:06:41 2026 GMT
Not After : Jul 30 02:19:41 2026 GMT
Subject: CN=BDD864307C16F29F0CC38B8D9BDAD7A549E0CEB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:c3:24:a5:42:85:88:78:34:4a:cd:78:72:
f5:ba:4a:56:9c:cf:53:ef:03:7a:01:c6:b4:b4:46:
83:6f:c7:7c:52:51:5c:0a:ce:5f:22:3e:25:d8:93:
f3:72:7a:a7:95:7e:02:a1:6d:2a:eb:ab:38:c4:3e:
6a:cb:10:c1:98:d2:6d:6a:f8:d2:bc:a2:9e:4a:7a:
a4:f3:bc:75:5a:f7:86:f9:b5:df:6e:0f:c8:e1:77:
0a:a0:43:92:af:ea:62:62:43:4a:8c:32:0c:90:93:
1c:e7:36:fb:ff:35:85:c3:69:c1:6e:f6:d8:ef:f1:
09:78:93:0a:5f:93:0b:75:77:ec:8c:0b:f3:ad:2a:
05:53:93:23:17:9b:8b:ec:58:a0:5e:81:41:0e:dd:
cb:43:a9:56:b8:bd:0d:a5:b7:d3:93:94:3f:10:52:
bd:12:37:06:98:a6:c8:6b:e6:db:a8:cf:c5:41:07:
10:46:b7:33:36:e3:89:29:6b:e3:c8:5d:8c:0c:f9:
ef:62:a5:e8:ca:10:44:6d:ad:4b:50:8b:36:3c:c3:
a2:de:5d:ee:2a:55:cd:7c:60:59:61:12:4d:1a:7e:
78:d1:94:2e:2d:18:9c:73:5f:e3:14:a8:70:5f:f9:
af:5c:61:a4:0f:65:80:1f:43:55:6d:41:17:67:a1:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D8:64:30:7C:16:F2:9F:0C:C3:8B:8D:9B:DA:D7:A5:49:E0:CE:B3
X509v3 Authority Key Identifier:
keyid:3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:33:e5:3f:30:da:5a:7b:55:77:d3:ff:8f:48:bc:06:63:92:
3d:99:63:05:35:fc:f4:4f:09:0b:83:59:19:d6:13:25:94:4e:
78:54:d9:e6:92:a1:ff:95:ef:e0:0a:65:a3:9c:da:0c:e5:54:
28:14:2b:f0:94:c8:19:1f:25:2e:b5:7f:90:6e:df:eb:0a:bb:
a4:a4:d3:f7:7c:e8:39:e9:49:bd:0b:86:76:d1:f4:c7:f9:ed:
75:2b:3d:3b:38:6d:fa:10:9c:8f:d8:c3:e6:77:bc:9d:bb:95:
72:7b:69:23:7d:ba:d9:27:d6:b9:ef:ae:9d:81:48:1d:5e:0e:
7d:5f:8a:f7:35:af:6f:85:f9:f7:f2:3a:73:95:61:e5:5d:33:
75:a6:b6:35:2e:43:e5:bb:c8:bc:55:23:05:8a:36:61:49:3c:
87:d6:c5:60:7d:3b:d3:10:9c:4f:48:c7:09:ed:76:4a:61:74:
e4:59:76:04:5a:40:32:21:9d:91:f4:00:ca:26:e5:20:6f:ec:
51:60:77:ea:69:54:9f:c0:d7:5a:f4:32:eb:d0:9d:33:e5:ee:
22:bd:5b:45:4c:3d:64:18:ee:97:81:82:5b:6b:05:91:9b:40:
86:52:f3:13:93:d4:df:33:88:52:d8:e8:b2:d7:5f:c5:b1:4a:
a2:5f:f8:51
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUF1J6frBGZZ1KW+pV10dqGQOGCV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIw
OTI3MTgyNDAeFw0yNjA3MjgyMzA2NDFaFw0yNjA3MzAwMjE5NDFaMDMxMTAvBgNV
BAMTKEJERDg2NDMwN0MxNkYyOUYwQ0MzOEI4RDlCREFEN0E1NDlFMENFQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TcMkpUKFiHg0Ss14cvW6Slac
z1PvA3oBxrS0RoNvx3xSUVwKzl8iPiXYk/NyeqeVfgKhbSrrqzjEPmrLEMGY0m1q
+NK8op5KeqTzvHVa94b5td9uD8jhdwqgQ5Kv6mJiQ0qMMgyQkxznNvv/NYXDacFu
9tjv8Ql4kwpfkwt1d+yMC/OtKgVTkyMXm4vsWKBegUEO3ctDqVa4vQ2lt9OTlD8Q
Ur0SNwaYpshr5tuoz8VBBxBGtzM244kpa+PIXYwM+e9ipejKEERtrUtQizY8w6Le
Xe4qVc18YFlhEk0afnjRlC4tGJxzX+MUqHBf+a9cYaQPZYAfQ1VtQRdnoeo1AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUvdhkMHwW8p8Mw4uNm9rXpUngzrMwHwYDVR0j
BBgwFoAUP/KYLUyK4Q8/TqvcgWPx0gknGCQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2NmOGE0ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAv
M0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIwOTI3MTgyNC5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8zRkYyOTgyRDRDOEFFMTBGM0Y0RUFCREM4MTYzRjFE
MjA5MjcxODI0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NmOGE0
ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAvM0ZGMjk4MkQ0QzhBRTEwRjNG
NEVBQkRDODE2M0YxRDIwOTI3MTgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEQz5T8w2lp7VXfT/49I
vAZjkj2ZYwU1/PRPCQuDWRnWEyWUTnhU2eaSof+V7+AKZaOc2gzlVCgUK/CUyBkf
JS61f5Bu3+sKu6Sk0/d86DnpSb0LhnbR9Mf57XUrPTs4bfoQnI/Yw+Z3vJ27lXJ7
aSN9utkn1rnvrp2BSB1eDn1fivc1r2+F+ffyOnOVYeVdM3WmtjUuQ+W7yLxVIwWK
NmFJPIfWxWB9O9MQnE9IxwntdkphdORZdgRaQDIhnZH0AMom5SBv7FFgd+ppVJ/A
11r0MuvQnTPl7iK9W0VMPWQY7peBgltrBZGbQIZS8xOT1N8ziFLY6LLXX8WxSqJf
+FE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:23 2026 by rpki-client