
$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
File: BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft (raw, json)
Hash identifier: F9eeY6LcjJ4Dj1a0pAsJdAhgm5ywRX8r1OtIlP5KtLE=
Subject key identifier: EC:FD:4B:A7:EC:6B:E0:DD:7A:C8:FA:42:65:D2:95:65:C8:CB:17:CC
Authority key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Certificate issuer: /CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Certificate serial: 3553C672EE443AC3112D82C251D6E283828CB693
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject info access: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
Manifest number: 43
Signing time: Mon 21 Sep 2026 08:10:43 +0000
Manifest this update: Mon 21 Sep 2026 08:05:43 +0000
Manifest next update: Tue 22 Sep 2026 10:46:43 +0000
Files and hashes: 1: BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl (hash: pBVBB8F/aBqc0JHVqrgdhojjJHCJHFc6XaL1ePzkD8Y=)
2: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: 0WfGIbdnCqY+ccClEvoLWkuTmchpzxdgcLtMMvZROJk=)
3: 326131343a373538333a653162303a3a2f34342d3434203d3e20323135373630.roa (hash: Sbur0LFeWPNeDmxIDkcbbfwfykhvNRJQKSdXoitfsqA=)
4: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: BaRn+VV9Mjv1d3bI1ejWVjhYGt/Z44aYBaRQrdawqUg=)
5: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: ZlZazCwIM5LGuIaeyYSvXDahbBBCJ7o6hK9PdYVxgtg=)
6: 326131343a373538333a653130303a3a2f34302d3430203d3e20323135373630.roa (hash: 9iYXqz2uZswuFGmbb3I2IKAg+SWvtdIdDTWgAWdK6sI=)
Validation: OK
Signature path: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:53:c6:72:ee:44:3a:c3:11:2d:82:c2:51:d6:e2:83:82:8c:b6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Validity
Not Before: Sep 21 08:05:43 2026 GMT
Not After : Sep 22 10:46:43 2026 GMT
Subject: CN=ECFD4BA7EC6BE0DD7AC8FA4265D29565C8CB17CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:d2:e1:d4:27:77:7e:72:08:04:c1:6c:4b:
40:5f:15:d7:38:3d:6b:a0:fe:ba:30:e6:32:08:05:
57:b2:a9:12:d2:9d:da:d0:38:3c:a9:e4:2c:b2:9d:
6f:5e:1e:bd:52:f5:cb:5d:4f:ed:bf:cd:d2:b4:75:
e3:64:26:34:21:2c:96:f4:67:47:b6:41:9e:d4:55:
48:2f:1f:2e:89:3f:f2:75:7b:79:33:32:ee:f2:af:
65:7a:b5:b6:03:b3:b7:b5:65:88:b5:cd:c7:87:36:
e3:b0:01:54:7e:da:1a:cd:79:2a:19:59:bf:04:2f:
1a:5a:01:57:41:4e:60:c0:7c:a0:85:33:b3:f1:e8:
dc:a9:c6:ca:10:08:05:d6:a6:4b:3a:82:be:a8:e2:
63:61:06:9c:9a:0d:c0:d9:d9:83:35:97:90:19:9d:
3f:51:fb:a6:ee:df:eb:12:23:9e:f9:7f:1f:b2:2d:
f0:10:16:bd:d6:92:4b:6d:25:fa:22:62:7e:20:04:
b7:0b:81:52:72:cc:7d:e3:88:42:79:14:24:23:2c:
cf:ae:46:9d:87:1c:4a:ce:45:94:45:6a:c2:99:ac:
b1:e5:74:20:0a:a6:8c:24:f6:0a:84:f4:be:65:58:
66:be:a5:ea:cc:74:82:d5:61:1d:f0:57:95:3c:73:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:4B:A7:EC:6B:E0:DD:7A:C8:FA:42:65:D2:95:65:C8:CB:17:CC
X509v3 Authority Key Identifier:
keyid:BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject Information Access:
Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7c:fb:37:97:2f:9f:3d:9c:98:05:9c:9c:f2:fa:9c:72:36:
f0:5d:be:1a:97:50:a9:15:b3:c4:49:96:66:7e:05:f2:29:97:
a4:31:20:9a:bb:85:f8:f1:1d:8c:31:ce:7e:4a:46:5f:37:df:
ea:e1:d2:75:b7:e0:7e:75:2a:85:ba:59:32:bc:b5:49:cd:70:
5e:89:63:75:d1:95:96:22:c9:3d:fa:47:00:92:a3:a3:d8:73:
5c:cd:45:72:16:66:ee:53:46:57:a1:de:58:de:fc:bf:12:66:
8e:37:a8:4f:19:0d:ae:2d:ff:c3:65:3c:71:6b:cd:21:dc:9a:
08:40:92:51:cf:a0:b8:0e:17:f5:70:6b:70:6a:47:8a:43:13:
37:10:14:71:d4:1b:2d:a2:0e:3b:9d:04:9c:2a:a7:ed:9e:41:
87:1c:d8:5a:84:3a:7f:2c:a1:be:a9:ce:c2:ad:5c:62:3e:c4:
2b:f4:66:79:14:ba:b3:38:5c:84:29:31:9f:83:41:36:70:1e:
c5:ac:73:86:e2:55:ea:af:84:de:d3:e7:f2:1a:52:51:1a:ab:
d4:f5:10:b5:57:2a:36:f0:50:90:cf:47:d7:a6:54:81:8f:20:
0b:56:2b:c5:ef:53:a6:f2:73:2a:2c:b3:6d:ec:d7:71:32:16:
c3:46:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:48 2026 by rpki-client