
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft
File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json)
Hash identifier: PSkr0hK1mAVhZJu0+rvjB7JCJ2/6Gy5h7yEzNDpGdgU=
Subject key identifier: 26:A3:82:69:40:B1:4D:35:54:CF:68:90:A9:06:3D:A6:E3:CC:E8:26
Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52
Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52
Certificate serial: 08FD6145DCA9C99529D686F5DBC9B8435A9A307C
Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft
Manifest number: 85
Signing time: Fri 12 Jun 2026 20:08:27 +0000
Manifest this update: Fri 12 Jun 2026 20:03:27 +0000
Manifest next update: Sat 13 Jun 2026 21:00:27 +0000
Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: AvGJBn6fRoHRPZ+mg7PHJTDXqPeE0citlSSpVJox/70=)
2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft
rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer
rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fd:61:45:dc:a9:c9:95:29:d6:86:f5:db:c9:b8:43:5a:9a:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52
Validity
Not Before: Jun 12 20:03:27 2026 GMT
Not After : Jun 13 21:00:27 2026 GMT
Subject: CN=26A3826940B14D3554CF6890A9063DA6E3CCE826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:f2:b6:06:ba:ef:11:47:4a:68:1b:ca:bb:
07:b3:bd:3f:20:a8:fa:42:4f:98:1b:49:59:00:3f:
06:87:0d:67:fb:3b:e0:22:43:ee:c2:c5:9f:1e:f3:
bc:c1:bc:13:c0:e2:3f:a1:55:17:65:1f:2c:a4:1e:
38:95:a2:20:51:c3:af:88:8e:08:e9:d8:de:05:a4:
0c:a7:12:b4:cf:d6:4d:92:fc:6b:04:65:89:28:68:
fb:cd:af:92:0a:71:9f:8f:95:4e:bc:3e:f6:b7:05:
f2:4f:0a:f5:77:7b:59:31:a5:72:0a:4d:ea:f0:d2:
c5:6a:58:02:25:e0:a2:86:52:1b:cc:7f:eb:c9:a0:
cb:ba:ae:3f:dc:d3:62:0c:5e:b1:3f:fa:8c:3e:56:
ba:e3:eb:bb:e4:5a:71:e3:1c:a8:79:e2:63:65:49:
84:cc:04:22:a1:98:e3:01:e4:2e:52:78:b9:91:48:
52:d2:18:1f:7c:bf:a2:6c:08:19:13:13:90:79:ed:
62:47:e2:74:e1:df:4e:28:68:b3:e8:90:49:fb:33:
fe:db:7c:90:d5:91:95:f9:c6:a4:f3:42:47:ef:17:
5e:d7:42:6c:6c:62:30:50:74:25:a0:eb:c1:9f:cb:
79:5c:7a:d6:35:3d:3b:bd:8a:81:65:7a:9e:7c:2b:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:82:69:40:B1:4D:35:54:CF:68:90:A9:06:3D:A6:E3:CC:E8:26
X509v3 Authority Key Identifier:
keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl
Authority Information Access:
CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:a3:15:f2:12:55:12:4b:a8:3b:7a:94:ad:45:a9:1e:e8:
bc:21:ca:c2:5c:db:3f:bc:47:f6:e8:a6:e6:63:c2:0e:de:34:
75:70:81:6e:d1:6e:71:71:b8:ac:0c:47:ea:1c:a2:d6:23:37:
91:56:6e:34:42:fa:6c:55:2d:b2:c8:51:2b:7e:e8:f5:74:ad:
7e:c1:e0:be:57:a5:f6:cf:94:9a:f1:e2:87:8f:51:90:7c:f1:
69:02:39:35:89:e7:72:16:fb:db:85:4a:e3:1a:33:e9:d2:05:
c2:08:69:6a:5d:33:93:85:41:fa:4a:d7:d4:da:dc:9b:46:43:
00:25:c1:2d:47:d0:4d:4e:c3:8a:af:aa:70:65:53:7e:db:d5:
9c:0a:04:9d:97:73:15:a5:48:61:c9:00:a6:b2:04:b3:46:35:
11:68:2b:94:7e:8f:9b:0a:59:d6:0b:d3:5b:f5:e3:39:d2:46:
ae:e4:6d:24:c9:e0:86:8d:9a:b4:ce:90:65:f4:85:bb:0a:14:
36:a3:dd:b4:a1:52:70:96:b7:85:59:a9:78:d4:b1:86:f4:f9:
fd:19:50:6e:25:c8:36:66:51:a9:f9:00:c5:f2:94:4e:6b:1f:
f5:ec:8a:ac:dd:14:27:e4:a2:a0:2b:01:51:e0:86:e7:26:e5:
af:50:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:59 2026 by rpki-client