Manifest
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File: 4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier: vYaN+VOZ1t1pwZuhhUxuDfFHDr5UWAIVNStOjddomsM=
Subject key identifier: 73:08:7F:8E:B3:F2:30:9F:31:CA:D6:05:F8:14:7F:D0:7E:DF:D5:E5
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer: /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial: 6D09821CCE9197AD93DE24FD8A96F71B4A4BA21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number: 07CE
Signing time: Mon 02 Mar 2026 10:24:42 +0000
Manifest this update: Mon 02 Mar 2026 10:19:42 +0000
Manifest next update: Tue 03 Mar 2026 14:17:42 +0000
Files and hashes: 1: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: +0GPXjQoS+N412w6ofV8eg2e5UX1asnUPxI6dYS84sA=)
2: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: k1L2Of8QfV2MIN/B39N63nTwZ7dvoxi+6OPXT00R6qo=)
3: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: WqnPhejGIpkZ0xjXVvvod9Bjx2w1OURfMjc0Q0hE0uQ=)
4: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: +/sjxJc7UzEm617eVAjWZ5wogfYqlofquY1fFh4J5/Y=)
5: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 5FkiKEMEsvRMc75EhhhqzQGAWBAp/vUFv5o2r+QS74o=)
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:09:82:1c:ce:91:97:ad:93:de:24:fd:8a:96:f7:1b:4a:4b:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
Validity
Not Before: Mar 2 10:19:42 2026 GMT
Not After : Mar 3 14:17:42 2026 GMT
Subject: CN=73087F8EB3F2309F31CAD605F8147FD07EDFD5E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:c8:04:4c:cd:b0:5b:3f:69:24:cb:5e:b7:
90:94:fe:bd:0d:07:53:72:aa:7f:05:87:f3:78:19:
47:9f:be:26:3c:be:7e:df:a4:ec:73:91:3a:de:f2:
e3:11:80:d5:5b:08:a7:96:76:c3:1f:bc:3f:09:68:
2d:c5:6a:08:6d:51:8c:34:66:81:0d:33:20:eb:78:
ea:a5:ba:f8:43:46:d3:13:f7:fa:c4:18:2a:07:dc:
b0:8c:03:81:49:c8:18:30:f6:74:27:40:9a:da:ed:
b9:49:90:c3:19:c0:f4:83:69:a2:54:1a:1a:ae:f2:
74:01:2d:c7:22:dc:44:d6:de:f7:fc:50:d9:09:2a:
bf:42:ef:31:aa:89:d3:a8:87:06:68:f2:45:49:c1:
09:99:0c:f2:89:78:04:5f:b1:bc:a5:5f:24:ee:3c:
e9:8a:22:2d:15:14:3f:e5:6f:93:bf:7d:0d:96:c1:
71:7c:04:21:95:74:bb:74:93:16:1b:18:0b:3e:df:
47:c4:77:77:2b:48:93:bb:dc:15:58:09:d9:97:03:
49:f7:8b:5f:c4:c1:f7:97:f5:10:2b:6a:16:24:3b:
66:96:58:7d:e0:6a:f5:ac:a5:b7:7d:7a:1b:b4:95:
0a:93:d2:7e:c5:ce:c0:8f:8c:c5:61:82:18:b4:64:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:7F:8E:B3:F2:30:9F:31:CA:D6:05:F8:14:7F:D0:7E:DF:D5:E5
X509v3 Authority Key Identifier:
keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c9:44:2d:0c:31:e4:7a:32:32:05:37:07:9a:e4:4f:b6:85:
5e:39:28:44:60:44:7a:e4:b5:d5:a5:aa:af:11:9c:cf:44:7c:
f2:1b:80:5e:93:b9:42:ed:7f:59:67:45:fe:9a:3a:85:3c:fd:
ba:69:64:95:7c:a1:b9:30:7a:da:1c:87:cb:da:44:ed:73:2e:
16:39:bc:80:42:1a:c2:73:25:03:26:b1:3b:df:94:5e:ae:39:
f2:9e:a1:1c:be:1c:ff:46:8d:c0:22:5c:b3:ad:36:eb:83:a0:
c3:73:0b:0d:ff:e0:bd:b6:bc:8a:95:36:af:9f:e8:9c:d6:42:
30:d6:26:7c:3c:98:70:1e:97:fd:7d:d2:f1:a4:96:e3:e3:31:
d1:26:04:cf:3b:09:7b:d8:56:96:47:16:9e:2b:2c:7c:4d:15:
4f:c7:43:57:f7:9b:9e:54:f6:45:ef:d4:3c:9e:84:70:f2:71:
7a:94:09:06:2f:30:6f:3a:64:40:78:61:fb:ef:b1:19:cc:a6:
07:27:0e:22:e4:f7:8e:33:f9:a1:79:8a:ca:3d:41:1d:fd:d5:
ed:4a:5e:fe:04:59:2a:a3:a3:dc:2f:b1:5c:2e:58:09:0f:93:
75:09:c2:dc:37:dc:b9:f5:64:0f:c9:6e:f4:c0:bc:48:a6:38:
2c:db:9e:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:16 2026 by rpki-client