Manifest
$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier: DvY37q+VRMTUWlCBVDNOUGUvr32GrFqTft4+ZEtcYo4=
Subject key identifier: F6:81:8C:36:00:3C:68:53:DC:33:93:AE:7A:F6:F7:64:67:6A:51:97
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer: /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial: 2833B159893F9E9C5D253BB08C13E9C0105CD6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access: rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number: D8
Signing time: Tue 22 Sep 2026 08:15:19 +0000
Manifest this update: Tue 22 Sep 2026 08:10:19 +0000
Manifest next update: Wed 23 Sep 2026 09:22:19 +0000
Files and hashes: 1: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: C0LighYiHmdXP8XYDS0PGxmrdVrJIkKpyOWsym4GtXQ=)
2: AS215110.asa (hash: 8XjGwMUuG9cC3E2HQVmxZ+VSNbwuyJO7IUq0o2HjpeM=)
Validation: OK
Signature path: rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:33:b1:59:89:3f:9e:9c:5d:25:3b:b0:8c:13:e9:c0:10:5c:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Validity
Not Before: Sep 22 08:10:19 2026 GMT
Not After : Sep 23 09:22:19 2026 GMT
Subject: CN=F6818C36003C6853DC3393AE7AF6F764676A5197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:ae:97:c7:b9:f9:f6:7c:f3:2b:ba:13:e7:
8f:45:81:9b:55:6b:52:ea:35:df:11:c9:d1:3b:3d:
31:ac:52:de:b6:3e:9e:ed:af:24:33:4e:43:69:86:
61:5b:25:a3:eb:a7:74:1c:d6:81:25:f5:4f:46:44:
80:7e:1a:0f:59:7f:ae:92:35:f3:3d:59:70:02:0c:
27:c6:2e:5e:1b:f2:a5:7f:52:50:8f:97:8f:5c:9c:
11:51:67:76:d2:84:ce:ce:8f:8d:be:f0:b1:ec:bf:
6f:bc:ab:bc:81:ce:a8:b1:44:9b:1e:b0:ae:f0:ac:
1d:51:f3:5e:05:11:6f:88:43:15:a4:fb:e1:2e:bb:
d3:9c:01:41:1f:c5:87:86:b9:c0:c7:ec:6c:be:d1:
30:96:a2:f6:0d:c8:a7:b0:9d:0c:b0:b8:11:4d:a2:
43:d9:b5:74:40:1c:6b:d0:27:e2:71:37:ee:08:d0:
b5:6b:e6:ae:d1:00:78:a8:49:3e:92:11:7d:62:f4:
e9:a1:71:cf:6c:83:ec:bb:8b:16:59:66:a7:07:1b:
67:58:c3:e4:16:67:00:cd:f8:c5:d3:96:cb:01:dd:
ae:e5:08:a3:54:92:b6:76:47:28:13:7d:92:9d:b7:
af:9a:fd:f8:bf:02:8e:98:7c:db:17:1b:48:b2:ff:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:8C:36:00:3C:68:53:DC:33:93:AE:7A:F6:F7:64:67:6A:51:97
X509v3 Authority Key Identifier:
keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject Information Access:
Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:f3:51:c0:48:40:a9:61:6c:a8:9a:8f:ff:07:79:21:07:
8d:9c:b6:fd:50:fe:24:20:76:b1:f1:9b:99:8d:9c:d1:2d:cb:
93:de:07:b2:a2:58:88:56:8a:eb:0f:ce:06:34:84:25:59:51:
69:ee:b5:dc:41:10:3b:27:d8:60:c1:4e:db:0c:41:a6:b2:9a:
14:36:a6:63:ec:4a:61:0c:5e:f0:7e:d1:7e:3e:cc:28:cf:3a:
d4:49:f5:0c:0b:aa:f3:12:a1:e7:b6:c9:2b:38:e0:94:10:14:
c1:b8:df:af:66:31:20:e3:ab:26:0f:8a:56:87:55:50:66:96:
d1:63:c2:65:ac:94:75:95:04:a9:68:30:74:01:0c:2a:e7:55:
f8:7c:a0:00:a3:33:20:b4:90:70:55:09:b3:c6:7c:d2:5d:6e:
ea:e9:64:a6:d5:8b:af:62:ee:15:52:28:af:c2:98:84:fd:3c:
3f:26:58:bf:63:02:f1:11:26:fc:78:a1:77:59:63:8e:03:7a:
97:71:e1:73:57:f7:2a:e0:59:27:f2:43:bb:08:ad:31:7b:0c:
44:e3:05:7c:e2:97:ab:0d:e5:27:dc:01:69:38:0e:33:84:fd:
8b:ea:71:82:40:a3:d0:42:86:e1:5f:e4:a0:19:53:e9:dd:18:
0e:65:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:31:45 2026 by rpki-client