Manifest
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File: 4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier: B3cfCsyjDpz7Tuw7DKKCbIqiGQi5twUEZ5Ju65w15KE=
Subject key identifier: 1D:32:94:44:B5:29:05:6E:C5:C9:DF:D1:E7:1A:B6:97:11:57:F6:EB
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer: /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial: 2E3BFA5ECEA88803714664489CBE95570807AB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number: 07CA
Signing time: Sun 01 Mar 2026 17:25:17 +0000
Manifest this update: Sun 01 Mar 2026 17:20:17 +0000
Manifest next update: Mon 02 Mar 2026 20:04:17 +0000
Files and hashes: 1: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: k1L2Of8QfV2MIN/B39N63nTwZ7dvoxi+6OPXT00R6qo=)
2: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: WqnPhejGIpkZ0xjXVvvod9Bjx2w1OURfMjc0Q0hE0uQ=)
3: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 5FkiKEMEsvRMc75EhhhqzQGAWBAp/vUFv5o2r+QS74o=)
4: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: t3pozF0Q4XdWww3/G2UuAQ0FEwaNPnpchhGJePANxu0=)
5: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: +0GPXjQoS+N412w6ofV8eg2e5UX1asnUPxI6dYS84sA=)
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3b:fa:5e:ce:a8:88:03:71:46:64:48:9c:be:95:57:08:07:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
Validity
Not Before: Mar 1 17:20:17 2026 GMT
Not After : Mar 2 20:04:17 2026 GMT
Subject: CN=1D329444B529056EC5C9DFD1E71AB6971157F6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:28:5d:df:d5:5a:3f:03:ca:92:7b:a1:6a:
1a:a5:c0:41:95:10:f6:0d:a3:e5:cb:03:f0:e4:3a:
be:a4:12:f3:3e:3d:3d:42:23:76:9b:dc:85:b0:ed:
3c:f8:31:70:97:b7:95:51:78:9e:bd:65:f6:a0:be:
89:4f:4b:d8:8f:77:dd:38:7d:91:38:5c:fe:2b:3c:
4e:ba:1e:31:ba:50:61:2b:5c:6b:1f:95:df:23:ca:
de:a0:fe:22:fb:4c:5d:b2:d7:4a:8d:00:be:b0:7c:
3e:fc:0c:d9:bf:f3:71:6c:5f:a7:47:ea:74:62:7e:
de:65:d4:e4:6f:83:76:fa:9f:69:82:ac:2e:e9:c7:
ae:a0:fa:5a:08:9f:df:ba:3e:cf:79:43:9e:39:a9:
ff:b9:fc:a4:d7:e5:32:4e:7f:33:b7:90:1a:fb:bc:
41:25:a1:33:a7:02:76:1a:b2:28:8c:2e:31:cd:2e:
c4:f8:14:11:57:9d:5f:06:bb:c2:8a:23:4f:4e:c0:
04:b6:8a:9f:38:c9:19:7c:92:b2:6b:47:d5:2f:ac:
bd:be:7e:eb:55:1f:c3:07:12:f4:19:2a:8b:41:f8:
1d:28:68:9c:18:e8:47:3d:9d:9a:72:f6:e7:00:e1:
4e:20:cb:ed:52:33:0d:5c:11:9e:10:ad:e2:05:2d:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:94:44:B5:29:05:6E:C5:C9:DF:D1:E7:1A:B6:97:11:57:F6:EB
X509v3 Authority Key Identifier:
keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e6:d4:ec:f6:3e:1f:0c:48:4b:3c:88:7e:32:06:0b:ad:67:
63:be:44:9a:81:2e:ae:ba:9d:3d:e0:97:b1:d0:8d:82:23:03:
57:4d:7b:81:99:d7:d8:dd:75:e0:19:cd:1d:3f:6f:f6:55:bb:
ac:9c:a6:cd:0d:76:2f:7c:f9:ae:10:c4:74:5f:4a:42:91:0f:
04:f1:5e:65:49:a9:ec:3e:49:86:a7:e1:56:a9:74:c7:70:42:
dd:8c:23:b7:ad:a3:49:74:08:94:5e:54:3c:cf:3b:08:ad:d8:
cc:07:44:96:8e:0d:29:ad:24:db:7f:e2:73:a3:75:77:13:d0:
7c:1a:4f:61:0a:56:6c:5d:a0:63:30:d5:24:51:91:29:51:4f:
b8:07:cc:bb:f3:0d:87:c7:cc:a5:b1:ee:2a:18:1d:8a:68:37:
45:0d:b7:c4:51:94:9a:8e:68:a3:ae:28:b3:97:05:f1:e7:bd:
db:5c:67:f7:f0:6a:e9:40:67:6e:82:22:77:9a:e1:0a:90:b1:
1b:5c:e6:ba:96:1b:8e:8b:86:a9:9f:5a:28:8e:90:6a:0b:51:
14:8e:18:50:f4:d2:8b:64:c2:a5:51:57:d3:f0:42:af:93:7e:
d0:a8:cc:a9:2c:04:3e:f0:33:f9:4b:22:c9:6c:2d:7d:83:9b:
4d:01:17:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:04 2026 by rpki-client