
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier: VIdT6AJQGLbdN/whq+D1E7euV9/JWafvjAaxkxKWF2Q=
Subject key identifier: 3A:AB:7A:66:2A:F3:E2:7B:E2:CE:8F:34:DC:E5:19:C6:C9:19:37:A3
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial: 74C5AC0452152687BEB3E825FF15173D7541FB82
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number: 0324
Signing time: Fri 17 Apr 2026 18:51:48 +0000
Manifest this update: Fri 17 Apr 2026 18:46:46 +0000
Manifest next update: Sat 18 Apr 2026 20:30:46 +0000
Files and hashes: 1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: Jao1neFg7ULTg3WbyqSaBTFRxTjbaohGZXj73AAFKCc=)
2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c5:ac:04:52:15:26:87:be:b3:e8:25:ff:15:17:3d:75:41:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Validity
Not Before: Apr 17 18:46:46 2026 GMT
Not After : Apr 18 20:30:46 2026 GMT
Subject: CN=3AAB7A662AF3E27BE2CE8F34DCE519C6C91937A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:61:af:fc:86:91:23:82:c7:65:a0:3c:c0:
f4:49:f5:42:8e:0b:98:ae:aa:7a:21:bd:98:07:49:
77:f6:25:99:9d:46:0b:83:80:33:43:d0:a2:59:11:
bc:46:c9:df:07:a8:d8:d2:3c:60:56:a1:30:c4:9b:
e6:47:19:43:d4:6c:02:1c:e3:d7:f4:9d:1e:34:d1:
a6:26:c7:ac:6f:14:46:96:66:79:52:1f:7f:02:e4:
98:d9:f3:ea:c8:c8:d8:65:b5:09:d0:a0:4a:0b:55:
7f:4f:12:02:7d:61:12:72:28:c9:c6:cd:7d:8b:73:
11:85:c4:b8:e8:06:8c:12:8f:b7:73:08:2e:06:d3:
8e:d9:cb:70:37:72:51:1c:7a:5d:e2:3b:c3:33:9b:
93:48:fc:a1:b4:ef:99:73:1b:99:9f:05:fd:be:19:
3c:b3:5f:9d:53:3d:66:59:9c:24:df:91:d9:de:ad:
76:63:b1:75:65:69:62:13:37:a4:2e:b1:9a:7c:5a:
fe:b4:2b:1d:7e:73:34:cb:9f:b9:03:3a:d9:1f:b7:
13:a5:3c:52:71:f1:d0:1b:0e:bf:ac:df:c6:92:08:
61:5b:89:3c:77:b8:be:49:07:d7:38:a7:10:43:fb:
dd:b4:4e:45:78:f2:9d:6b:40:7e:66:20:3b:2d:65:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:7A:66:2A:F3:E2:7B:E2:CE:8F:34:DC:E5:19:C6:C9:19:37:A3
X509v3 Authority Key Identifier:
keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:52:e8:9d:5c:2f:47:76:5a:ff:24:f4:15:46:66:31:5b:40:
4d:27:d7:0e:59:80:ce:1d:91:b6:81:c4:b2:ad:ed:e4:85:52:
6b:46:e9:e1:69:c9:cc:86:11:cf:4d:51:d1:c5:47:74:ee:27:
44:a9:28:51:7b:a0:f6:2e:0a:ba:10:3d:75:28:97:65:b9:42:
a5:08:91:78:4a:7d:45:ad:57:66:e8:1b:ba:1f:0a:04:dd:9d:
1f:b1:ee:88:6d:8f:e3:94:6c:8f:d5:96:36:9c:e8:44:68:56:
2c:f0:08:2a:4e:61:66:dd:38:b5:62:e1:4c:9f:73:1f:90:f4:
8c:44:81:64:a3:05:3d:8c:a0:fd:52:18:4a:a8:d6:4f:45:4c:
f0:46:80:56:67:84:db:32:a2:1e:9c:7e:fe:41:e4:50:ab:86:
ad:1e:74:4e:30:39:ed:7d:b2:12:bb:eb:7a:51:a4:2e:b6:1a:
c1:b5:19:c6:bc:07:4b:e3:9e:2c:61:ab:16:e4:cd:96:cc:ca:
6a:c2:2b:4b:99:bc:48:fd:ed:ba:cd:84:94:31:9e:56:1c:b5:
63:a9:a8:6f:09:a3:33:e6:61:fa:40:dc:18:3c:9c:b8:3a:ad:
c4:1d:fa:67:f3:13:88:90:4e:fd:0e:23:02:a8:40:38:10:de:
63:3a:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:55 2026 by rpki-client