$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: IU1RI0A63QsVroWhRfY3iwwe2QHQjBIcQ5gvlDwABjE= Subject key identifier: A5:46:83:94:9A:E2:70:FA:00:13:BD:D5:0F:D8:3D:F3:61:E1:80:4B Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 61615DDAE17EDC8D66F5E77ADAA3DF52E3EC56B4 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: 57 Signing time: Thu 16 Apr 2026 15:59:21 +0000 Manifest this update: Thu 16 Apr 2026 15:54:21 +0000 Manifest next update: Fri 17 Apr 2026 17:18:21 +0000 Files and hashes: 1: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) 2: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) 3: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: aE8Wd/IqvKayMx6C1f2U4h40eT/01gn/44ye5+FXQzw=) 4: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) 5: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 17:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:61:5d:da:e1:7e:dc:8d:66:f5:e7:7a:da:a3:df:52:e3:ec:56:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: Apr 16 15:54:21 2026 GMT Not After : Apr 17 17:18:21 2026 GMT Subject: CN=A54683949AE270FA0013BDD50FD83DF361E1804B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:da:91:13:5d:4d:82:6e:0a:c2:64:63:de: 6e:27:e6:fb:75:18:37:09:ae:08:e2:7d:7e:c2:05: a8:9f:ab:18:2e:6a:90:fc:1d:e7:96:f7:24:05:e6: 00:c3:aa:39:6a:df:a0:e3:b3:3f:12:dd:b1:b6:11: 33:a2:c5:fe:20:b1:f6:11:b1:8b:d7:40:88:92:2c: 42:a6:ff:aa:0f:9c:a2:47:60:4e:f9:85:d5:32:ef: 55:00:d0:b0:ed:c7:56:06:70:ac:d7:ce:ac:e6:24: 15:b4:49:9d:3c:a5:9c:99:21:74:e3:ff:2c:0a:08: 50:6b:9c:e7:04:f5:af:c9:a1:da:1e:95:f4:2d:2d: 4c:b3:b0:93:1e:2e:29:81:1e:c4:d9:74:6c:11:2f: c0:01:db:21:68:8f:10:ec:23:9f:e0:49:75:fd:ec: f0:61:ed:2f:d6:f9:db:34:0f:f0:e9:23:10:35:6a: 02:1b:50:b1:16:0a:f3:28:c1:63:36:97:33:e6:e2: d1:94:4c:14:ca:5e:78:84:36:0f:b1:73:83:a4:64: de:ce:bc:57:d8:43:95:c7:f9:ad:3d:f5:77:95:cb: 72:c1:36:fd:70:8c:67:4b:35:ea:b9:3e:f2:9b:fc: fb:81:5f:68:04:32:25:b1:84:b8:99:94:36:30:08: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:46:83:94:9A:E2:70:FA:00:13:BD:D5:0F:D8:3D:F3:61:E1:80:4B X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:54:55:51:3f:2e:ef:4e:82:7d:a2:fc:66:b7:11:06:70:09: f8:eb:28:86:6d:1d:4c:db:46:56:44:0f:1e:68:d9:74:21:24: 50:24:94:34:5b:54:3c:37:3e:fe:50:00:4e:fb:9c:a8:e1:b7: 60:16:84:71:74:03:c1:e3:55:0d:b2:ca:3b:97:50:91:cc:48: bf:d8:7e:47:6b:95:81:aa:82:c2:dd:fb:c4:68:fc:df:94:59: ae:37:b4:67:66:5a:1b:a8:e5:87:cc:44:3e:3a:f4:27:97:5a: 65:f3:21:10:e6:a6:94:a1:d0:88:7c:dd:14:f2:cf:77:37:49: 11:2a:44:ff:28:d7:ad:a7:38:69:e5:7d:cd:a0:bd:e7:df:aa: 6b:e5:2c:0c:11:a1:b4:4e:4e:96:1b:18:e5:32:03:db:26:7d: cd:4d:cc:f2:ad:c6:05:1d:c7:19:1e:c2:5a:89:a7:d6:ed:28: 56:d9:31:ee:03:8f:f3:c7:7b:d0:38:1e:27:04:b1:90:85:1e: 67:c0:71:14:e8:d3:97:b1:dd:be:7e:0d:60:06:fa:03:3c:a2: ef:f9:36:bf:c3:e0:3a:84:95:11:56:4d:7d:f7:2e:df:29:30: 66:5e:c9:ac:9c:c0:e2:d7:83:ff:44:fb:0d:09:25:96:9e:72: ed:6e:69:9d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYWFd2uF+3I1m9ed62qPfUuPsVrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjA0MTYxNTU0MjFaFw0yNjA0MTcxNzE4MjFaMDMxMTAvBgNV BAMTKEE1NDY4Mzk0OUFFMjcwRkEwMDEzQkRENTBGRDgzREYzNjFFMTgwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYrNqRE11Ngm4KwmRj3m4n5vt1 GDcJrgjifX7CBaifqxguapD8HeeW9yQF5gDDqjlq36Djsz8S3bG2ETOixf4gsfYR sYvXQIiSLEKm/6oPnKJHYE75hdUy71UA0LDtx1YGcKzXzqzmJBW0SZ08pZyZIXTj /ywKCFBrnOcE9a/JodoelfQtLUyzsJMeLimBHsTZdGwRL8AB2yFojxDsI5/gSXX9 7PBh7S/W+ds0D/DpIxA1agIbULEWCvMowWM2lzPm4tGUTBTKXniENg+xc4OkZN7O vFfYQ5XH+a099XeVy3LBNv1wjGdLNeq5PvKb/PuBX2gEMiWxhLiZlDYwCDG/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUpUaDlJricPoAE73VD9g982HhgEswHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7VFVR Py7vToJ9ovxmtxEGcAn46yiGbR1M20ZWRA8eaNl0ISRQJJQ0W1Q8Nz7+UABO+5yo 4bdgFoRxdAPB41UNsso7l1CRzEi/2H5Ha5WBqoLC3fvEaPzflFmuN7RnZlobqOWH zEQ+OvQnl1pl8yEQ5qaUodCIfN0U8s93N0kRKkT/KNetpzhp5X3NoL3n36pr5SwM EaG0Tk6WGxjlMgPbJn3NTczyrcYFHccZHsJaiafW7ShW2THuA4/zx3vQOB4nBLGQ hR5nwHEU6NOXsd2+fg1gBvoDPKLv+Ta/w+A6hJURVk199y7fKTBmXsmsnMDi14P/ RPsNCSWWnnLtbmmd -----END CERTIFICATE-----Generated at Fri Apr 17 10:03:28 2026 by rpki-client