
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft
File: CE62AFC506F1860480AAF6A723393278644CFD7F.mft (raw, json)
Hash identifier: HJaqd6mJPJ5ZqP1jZJ1AEJ5H+Hvqtt8rVNCjMl4hO4E=
Subject key identifier: F3:1A:BF:09:DA:92:09:2B:91:13:D5:A3:D2:55:42:2D:CE:EA:38:27
Authority key identifier: CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F
Certificate issuer: /CN=CE62AFC506F1860480AAF6A723393278644CFD7F
Certificate serial: 57A5C1FED929D6441A2B0357A1FCFB8A3D2BEA06
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft
Manifest number: 1F
Signing time: Mon 02 Mar 2026 08:40:06 +0000
Manifest this update: Mon 02 Mar 2026 08:35:06 +0000
Manifest next update: Tue 03 Mar 2026 10:13:06 +0000
Files and hashes: 1: CE62AFC506F1860480AAF6A723393278644CFD7F.crl (hash: EVqsGIxzCG27CTGbBm8MNGPe//jDm0uN3mLNtTQNOyw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl
rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft
rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a5:c1:fe:d9:29:d6:44:1a:2b:03:57:a1:fc:fb:8a:3d:2b:ea:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE62AFC506F1860480AAF6A723393278644CFD7F
Validity
Not Before: Mar 2 08:35:06 2026 GMT
Not After : Mar 3 10:13:06 2026 GMT
Subject: CN=F31ABF09DA92092B9113D5A3D255422DCEEA3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:03:62:b3:72:b2:64:35:18:b6:92:00:2d:
f7:1b:73:ed:0c:50:35:0f:89:71:e1:af:c5:c3:70:
eb:d6:c1:9b:1b:b4:c9:fe:de:ed:57:44:9a:61:ea:
bd:5c:b2:97:73:8c:51:1d:b1:17:24:5d:b3:6b:2c:
37:13:eb:e8:f6:6b:2c:b0:d0:75:37:b6:c1:3e:9a:
03:ff:da:95:89:6f:42:7f:10:01:b1:b0:50:70:bd:
7f:6c:1d:ae:62:43:a6:d7:61:be:ef:6a:76:c8:91:
4d:f3:f0:c5:e2:cb:56:c4:0d:3e:f8:2b:de:d5:1f:
1e:6f:2a:ed:e6:d8:5c:5d:2f:91:1f:34:93:df:fe:
06:34:0f:3e:22:23:4a:c9:c6:c8:21:de:2d:7d:1b:
5e:43:7a:d1:e1:e9:c8:94:bc:06:55:84:3e:6f:95:
80:2c:0a:90:a2:03:76:25:85:f0:77:92:41:4e:c5:
e9:d7:41:0c:a7:25:52:23:30:a9:db:64:81:69:a6:
31:40:a7:e2:1d:9a:0e:ed:e9:70:ec:c1:29:bf:df:
8c:48:b6:7d:27:fb:d4:ec:03:95:40:79:b0:99:d7:
68:b6:f9:1a:52:dd:77:3a:3b:fb:c5:14:de:ce:c5:
46:5c:b5:1f:c3:70:f0:94:8c:12:15:ac:e5:f7:30:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1A:BF:09:DA:92:09:2B:91:13:D5:A3:D2:55:42:2D:CE:EA:38:27
X509v3 Authority Key Identifier:
keyid:CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:cf:19:0d:7d:91:c4:ee:91:52:d7:6c:7e:3f:90:81:8b:
d8:a3:8e:d3:e1:2c:60:c6:05:f6:7b:a6:d3:07:ff:c5:25:a9:
71:29:5a:98:75:f7:67:ba:d7:56:8d:f8:21:36:6d:14:9f:27:
41:5b:b7:9a:69:64:e3:32:5e:c8:d6:0e:21:11:f3:05:b5:0e:
c4:3c:04:37:d6:82:e0:b9:6c:0a:a8:36:60:ac:9b:19:f4:d2:
53:a1:83:fe:e4:6c:e5:4c:da:8a:e0:48:7c:2f:50:48:14:22:
95:4e:bb:46:e7:9e:8e:90:c8:43:d8:9a:3e:08:b5:ec:f5:70:
ba:e2:73:be:d7:9b:31:75:9d:19:4c:84:f7:ae:e6:ee:6e:06:
eb:00:0a:0a:c0:1f:39:5a:50:70:db:87:7c:1f:7a:ec:5c:47:
ff:eb:df:35:83:9a:02:8e:60:bf:24:86:05:dc:c7:27:8d:80:
3b:4a:43:7c:e3:30:8d:fa:ee:7f:76:8f:6d:27:ff:02:63:c5:
3c:56:88:c4:bd:86:74:e0:5e:a6:20:28:fc:47:3d:58:8f:d3:
29:d5:f3:fe:6d:31:42:02:fd:7f:5e:5a:e1:25:d3:0f:a9:1f:
24:09:6c:8c:d3:b4:43:51:95:91:7c:26:8e:d9:56:7a:da:e7:
8a:ee:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:12 2026 by rpki-client