$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: 7aJfZ36P4pA2Xuz7Xw+udNLNVaOZpAVFaM4vt65NFHU= Subject key identifier: C2:FD:73:B3:DF:24:DA:8A:7F:13:A1:98:17:C2:4D:92:4E:23:EE:3E Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 2087E2F3E888CA37DBDECFF93DEA753DD797019B Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: 1A Signing time: Sun 01 Mar 2026 14:47:29 +0000 Manifest this update: Sun 01 Mar 2026 14:42:29 +0000 Manifest next update: Mon 02 Mar 2026 15:25:29 +0000 Files and hashes: 1: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) 2: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) 3: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) 4: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: f9Ckf5bK/CMNv5joDHIGNmTvOFbAj5BbRvUP5bWpXoE=) 5: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:87:e2:f3:e8:88:ca:37:db:de:cf:f9:3d:ea:75:3d:d7:97:01:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: Mar 1 14:42:29 2026 GMT Not After : Mar 2 15:25:29 2026 GMT Subject: CN=C2FD73B3DF24DA8A7F13A19817C24D924E23EE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:78:01:60:dc:1d:da:7a:5e:3f:d7:09:d1: 42:d0:27:93:76:ec:f2:f8:f8:ed:8c:42:c4:44:85: 1a:6b:e0:72:09:4f:a1:2d:94:31:52:c7:ef:0d:db: 35:fa:7a:48:41:35:77:45:48:4c:ad:0d:e8:d6:5d: ca:fc:45:f7:20:b7:c7:55:5b:50:1a:c5:74:14:ba: 4c:8c:2c:4e:a7:da:b7:aa:9b:6c:b2:e0:4b:65:55: 77:27:c7:8c:1a:ef:b9:d9:a1:0a:15:0a:cb:bf:f2: c9:77:c7:e3:ce:18:33:77:16:bd:07:47:cb:31:aa: fa:ba:17:ff:54:fb:c9:73:0e:2d:14:19:85:cb:c8: 1e:ce:a9:b3:da:80:05:b3:b3:8f:78:0b:f1:3e:91: c0:e9:75:4b:1b:f2:a4:79:e0:66:8b:76:20:62:6f: af:54:bb:a1:51:9c:cc:81:52:f8:85:48:10:33:89: 52:37:a3:58:8d:bb:4f:ee:57:a3:9b:7d:ac:38:98: 0e:57:c2:ba:62:43:0c:9c:c7:28:3d:64:1c:fe:bb: 3f:bf:d2:b5:6c:d5:2f:e0:ea:ad:d6:1a:b3:be:ea: ea:ab:5b:7d:e5:ab:40:6b:f0:f0:c2:16:44:3e:cf: 89:19:53:d3:25:94:0b:e6:40:ce:b7:67:a2:0f:66: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FD:73:B3:DF:24:DA:8A:7F:13:A1:98:17:C2:4D:92:4E:23:EE:3E X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:83:2a:bd:29:ee:67:df:55:b4:b3:d7:5a:97:19:a3:cc:ee: 66:18:44:14:21:16:f3:5f:02:19:af:a5:40:48:62:5c:46:7a: 78:34:76:e6:33:5f:fe:7b:1e:db:70:72:8d:ed:78:a0:a5:9d: d6:2d:32:7f:c4:c5:fb:de:18:68:c1:9c:22:da:20:8f:0e:5b: ac:3c:c2:28:00:0a:87:95:14:14:5f:77:8e:24:60:0b:13:1a: 68:75:59:a5:74:90:a2:e5:23:23:2f:f1:bc:2e:ed:73:c1:fc: d9:30:44:09:c9:4a:f6:91:c0:c9:0d:37:e6:bd:b8:87:21:ff: 44:2f:65:25:35:46:10:13:a4:2f:00:e2:9f:19:49:52:03:1a: b8:7c:c5:fd:3d:85:d2:65:99:4b:a1:82:99:48:5c:11:43:04: 3d:ea:00:4b:dc:13:6f:99:6e:77:2d:15:3f:e1:64:12:25:3c: 2d:b7:51:ce:3a:3c:58:25:88:65:ea:6a:cc:d5:34:c5:99:90: 35:5b:bd:f8:67:3d:be:03:63:0e:3a:1a:f5:44:2d:c7:50:3d: c8:33:c8:ba:29:c1:ad:24:53:a3:33:76:1e:aa:8f:87:4c:d9: 24:19:e0:7d:80:2d:17:62:9f:e1:60:75:41:46:8e:85:1b:45: e9:0c:4e:42 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUIIfi8+iIyjfb3s/5Pep1PdeXAZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjAzMDExNDQyMjlaFw0yNjAzMDIxNTI1MjlaMDMxMTAvBgNV BAMTKEMyRkQ3M0IzREYyNERBOEE3RjEzQTE5ODE3QzI0RDkyNEUyM0VFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0ngBYNwd2npeP9cJ0ULQJ5N2 7PL4+O2MQsREhRpr4HIJT6EtlDFSx+8N2zX6ekhBNXdFSEytDejWXcr8Rfcgt8dV W1AaxXQUukyMLE6n2reqm2yy4EtlVXcnx4wa77nZoQoVCsu/8sl3x+POGDN3Fr0H R8sxqvq6F/9U+8lzDi0UGYXLyB7OqbPagAWzs494C/E+kcDpdUsb8qR54GaLdiBi b69Uu6FRnMyBUviFSBAziVI3o1iNu0/uV6Obfaw4mA5XwrpiQwycxyg9ZBz+uz+/ 0rVs1S/g6q3WGrO+6uqrW33lq0Br8PDCFkQ+z4kZU9MllAvmQM63Z6IPZjjhAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUwv1zs98k2op/E6GYF8JNkk4j7j4wHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDLgyq9 Ke5n31W0s9dalxmjzO5mGEQUIRbzXwIZr6VASGJcRnp4NHbmM1/+ex7bcHKN7Xig pZ3WLTJ/xMX73hhowZwi2iCPDlusPMIoAAqHlRQUX3eOJGALExpodVmldJCi5SMj L/G8Lu1zwfzZMEQJyUr2kcDJDTfmvbiHIf9EL2UlNUYQE6QvAOKfGUlSAxq4fMX9 PYXSZZlLoYKZSFwRQwQ96gBL3BNvmW53LRU/4WQSJTwtt1HOOjxYJYhl6mrM1TTF mZA1W734Zz2+A2MOOhr1RC3HUD3IM8i6KcGtJFOjM3Yeqo+HTNkkGeB9gC0XYp/h YHVBRo6FG0XpDE5C -----END CERTIFICATE-----Generated at Mon Mar 2 03:52:52 2026 by rpki-client