
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json)
Hash identifier: 3s6xPkvd/0bGPHPZz1bQuNGzX7TBVuSQQwuNvGWtiy4=
Subject key identifier: 16:49:77:A4:65:69:EA:F8:5C:3F:36:00:A3:61:34:AD:2D:A3:F4:33
Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Certificate serial: 7DE1B775602F8200ACBB9408B1D590A96F385B47
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
Manifest number: A3
Signing time: Sat 13 Jun 2026 06:26:31 +0000
Manifest this update: Sat 13 Jun 2026 06:21:31 +0000
Manifest next update: Sun 14 Jun 2026 08:52:31 +0000
Files and hashes: 1: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=)
2: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=)
3: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=)
4: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: SVJQHodWo+N/FSWkIEV4lEgduyyFC+Eun0CAJuK1tb4=)
5: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e1:b7:75:60:2f:82:00:ac:bb:94:08:b1:d5:90:a9:6f:38:5b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Validity
Not Before: Jun 13 06:21:31 2026 GMT
Not After : Jun 14 08:52:31 2026 GMT
Subject: CN=164977A46569EAF85C3F3600A36134AD2DA3F433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:c2:18:92:10:31:36:ec:7c:87:e9:90:0a:
ba:78:23:a8:4e:a7:01:c7:9e:4b:33:8b:3a:c0:77:
b9:f2:2c:78:52:86:c9:c8:aa:bb:10:f5:73:ae:d7:
91:cf:6f:db:a7:2c:05:d7:7d:89:75:2a:7d:89:89:
fe:13:e1:01:da:56:73:e7:23:0f:b0:50:d4:66:68:
27:d0:a5:ee:f4:87:0e:93:02:e2:b4:73:26:41:4f:
8b:ac:d8:a2:a1:70:e8:b5:50:44:4a:aa:ea:10:a7:
34:7b:d5:18:49:81:60:d4:c0:9a:23:f4:84:39:8e:
9c:0b:3d:ca:73:8e:ef:a4:2a:24:a7:d5:f2:6f:40:
04:51:80:8f:27:c8:d1:d7:db:f4:a9:e4:a3:94:ce:
e5:43:f2:23:e9:b4:35:b1:ff:a2:94:63:8f:fa:dc:
89:d2:2a:99:5a:3d:61:40:9e:28:3b:b9:7e:83:c5:
5d:31:2e:8a:c1:04:b3:c3:52:88:6a:4a:b0:8f:24:
4d:8e:4d:27:28:7f:af:c0:88:02:23:bb:69:16:2d:
50:db:df:1b:b7:52:1c:3b:86:0d:14:fb:1a:fb:de:
ed:e5:ed:0c:2e:e1:d2:f9:1f:51:5e:62:dd:32:c4:
00:3f:33:76:25:46:73:5c:70:37:97:d1:cc:90:7a:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:77:A4:65:69:EA:F8:5C:3F:36:00:A3:61:34:AD:2D:A3:F4:33
X509v3 Authority Key Identifier:
keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c5:98:e8:b2:17:59:85:d7:be:ab:10:15:26:56:71:a0:9c:
f2:6d:14:9c:df:2d:7d:36:dc:3b:66:2c:35:e0:88:69:62:d9:
d2:af:d2:5b:fb:81:49:32:42:38:4c:3e:e1:d9:95:d7:b2:91:
2f:6d:06:40:21:f3:13:2a:27:90:cf:ab:60:10:fc:6c:80:f3:
9a:d7:fd:a0:98:00:79:a8:98:09:ae:48:e2:a2:4f:68:4f:2f:
67:88:b3:43:74:df:de:30:9c:47:2e:02:16:cb:28:2f:6e:56:
cc:80:43:9b:2e:5c:fc:78:49:ac:06:35:33:7e:eb:e5:91:f1:
14:6c:25:e8:ac:72:60:9d:25:10:7c:5b:35:75:68:30:98:1e:
6c:57:5f:ec:de:c7:f3:ef:5f:fe:c9:da:08:6e:0e:a5:35:8b:
db:1e:12:1e:3e:15:04:6f:6c:46:ae:b8:45:9a:07:1a:35:70:
40:f9:36:35:25:b0:36:bf:11:13:bf:39:ae:66:48:21:1e:78:
6c:53:20:12:22:ca:5c:86:4a:ef:66:bf:d0:d3:d9:36:92:dc:
d8:d8:df:3f:c0:f5:3f:d5:31:5a:2a:2a:1f:16:fe:1a:e4:91:
8a:a2:53:86:dc:d9:ff:dd:2e:7b:4c:6f:c9:78:eb:d8:43:61:
75:de:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:01 2026 by rpki-client