
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json)
Hash identifier: aVhhvq/2IJoK0bnPygm/XbGsQXizjrXhrh8iCXXqybA=
Subject key identifier: 16:0F:E2:FD:61:C7:65:54:C8:D0:6A:D4:CA:ED:51:DE:D3:40:55:FF
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial: 66B7E9D7A16C297077254F91B325CAB85FE3273C
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
Manifest number: 01CD
Signing time: Sat 13 Jun 2026 04:28:13 +0000
Manifest this update: Sat 13 Jun 2026 04:23:13 +0000
Manifest next update: Sun 14 Jun 2026 06:35:13 +0000
Files and hashes: 1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=)
2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=)
3: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: DMt7/DipNCCyJbY+JwmNZkPxbu6OzZRAoqYAADZ5tps=)
4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b7:e9:d7:a1:6c:29:70:77:25:4f:91:b3:25:ca:b8:5f:e3:27:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
Validity
Not Before: Jun 13 04:23:13 2026 GMT
Not After : Jun 14 06:35:13 2026 GMT
Subject: CN=160FE2FD61C76554C8D06AD4CAED51DED34055FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:ad:d0:c6:f9:b6:ea:ca:58:9f:e2:f0:2e:
87:f5:50:7d:56:5c:11:f3:7e:cf:52:2f:a6:67:f3:
f3:34:a5:8c:de:79:ba:14:c4:2e:d0:d7:e5:52:0a:
0b:c6:ac:19:a2:5a:6e:6a:a7:c1:d3:8e:57:10:c5:
1e:11:d5:56:ef:1c:76:4f:e3:ef:dd:5c:34:bc:24:
7d:37:95:62:8d:6d:66:b1:bb:b1:4e:9c:ce:26:2d:
fc:65:33:c5:f6:b1:9e:4b:eb:9d:64:91:c1:1a:79:
96:b6:e6:5d:e8:85:5b:20:d0:08:62:c1:d0:1c:93:
ca:0b:04:f5:0b:3b:9f:4c:b4:80:f3:e1:23:16:16:
07:93:ab:54:e9:56:5b:4e:a6:85:22:e5:22:a7:f9:
01:91:f8:8e:7f:f2:0f:0c:bb:3e:7a:62:8e:b9:39:
fb:0f:34:2f:45:5d:6a:38:13:36:28:22:e4:ce:74:
17:fe:5e:85:5c:c7:54:d7:a0:63:c5:cc:b6:7f:ce:
f5:c9:d9:f7:86:f0:e8:60:b7:ac:42:f6:9c:f0:ec:
ae:9f:d7:1b:92:fb:5e:8e:b6:94:a3:b7:c5:ea:91:
05:0d:ca:8b:0d:8e:ed:e4:dc:89:e0:14:92:87:ee:
3f:17:0a:26:36:27:64:76:87:37:a4:6d:e1:1e:62:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0F:E2:FD:61:C7:65:54:C8:D0:6A:D4:CA:ED:51:DE:D3:40:55:FF
X509v3 Authority Key Identifier:
keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:d0:11:b5:3a:b6:7e:35:e0:c0:0e:ed:6c:73:2a:75:98:
e1:75:b3:c2:e5:fd:2f:86:bf:cb:9d:f8:d5:90:90:d2:b8:79:
e2:93:3f:aa:49:65:d8:c0:24:cf:30:1b:f4:cb:17:0a:13:42:
dd:d0:97:39:41:50:59:30:d2:76:b0:1b:48:69:38:eb:3e:43:
af:50:cc:00:2f:33:fe:1d:f9:0e:81:75:d6:82:f4:63:0d:2e:
cd:c6:16:a0:05:55:50:98:f6:d1:8b:45:43:ff:a2:38:b2:64:
47:95:52:16:53:fb:9b:41:40:66:12:fd:39:45:42:04:66:a3:
c2:c8:38:53:02:91:d8:07:41:56:71:fe:ce:82:72:7f:cf:88:
9b:f2:01:0b:ee:41:53:aa:a8:66:84:cb:6a:4a:a6:8a:dd:8b:
21:ce:7b:59:98:6d:a8:d0:db:0b:07:d9:79:4f:dc:35:d6:15:
85:62:8b:f5:a9:a6:42:94:7b:f3:5f:d3:2b:51:b2:85:61:24:
d5:c5:96:53:8a:67:7b:32:7f:3a:fa:4a:42:63:75:8a:c5:14:
2a:3d:b2:a3:c5:95:4a:8d:eb:10:71:31:49:8a:00:0b:53:9e:
0b:87:6e:ac:a0:8f:14:d8:b0:d3:d8:be:bc:05:4a:da:2b:68:
b3:f5:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:26 2026 by rpki-client