$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: C0aZIk0XPVvp5ciW1QXx7RGtPValII561/kccleCKIQ= Subject key identifier: 78:A0:A3:D5:B8:F3:39:09:41:9D:33:79:E5:AE:86:8E:55:20:69:2C Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 33234F8F405D8FC1EC3AEE0F9520DEB92A3C6156 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 027C Signing time: Tue 12 May 2026 11:00:02 +0000 Manifest this update: Tue 12 May 2026 10:55:02 +0000 Manifest next update: Wed 13 May 2026 11:17:02 +0000 Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: Jhs2MpyGCm8RABZUxJ28KpmOHUuIBSbQIbpm5tol7lo=) 2: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) 3: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 4: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 5: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 01:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:23:4f:8f:40:5d:8f:c1:ec:3a:ee:0f:95:20:de:b9:2a:3c:61:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: May 12 10:55:02 2026 GMT Not After : May 13 11:17:02 2026 GMT Subject: CN=78A0A3D5B8F33909419D3379E5AE868E5520692C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:09:60:be:bb:22:75:6b:dd:fe:9d:7b:94: 4d:aa:85:b9:a4:90:55:4e:cd:c6:8d:5b:4d:c8:1c: 33:58:5b:48:ab:3f:c5:8f:61:ef:e5:b0:3b:19:59: ca:48:11:4a:36:99:29:4c:ac:a3:03:82:cc:3b:23: 07:5f:26:99:23:7a:e0:8a:d3:df:87:b2:45:ab:bd: 22:47:b1:85:0e:c3:0d:96:8a:6f:c5:be:9b:e6:ee: d2:cb:11:97:aa:fb:1b:a4:c6:53:ce:14:a4:b4:2f: e3:37:4d:47:49:8f:78:33:bf:56:d3:c9:21:4d:98: 2a:16:80:c5:08:d5:49:20:c9:67:c5:90:0a:05:e4: 7f:e0:16:8d:1a:5d:77:bf:2e:1d:a9:28:93:ba:5c: 59:f0:5d:80:03:df:b8:6c:d2:38:c8:66:d0:13:8b: b3:f8:3e:2a:12:8e:b5:04:49:8d:3f:2f:75:dd:e5: e3:98:44:f5:5d:c7:81:fb:6d:f1:b9:14:5b:5a:83: bb:d6:66:e5:79:1f:bb:05:4a:00:e8:53:56:bf:30: 92:2b:5f:96:fa:85:2c:01:38:72:33:74:87:a1:35: 9d:ad:af:89:b3:04:f6:7a:17:84:41:53:d9:57:4d: 2a:6a:99:e3:ea:20:2a:a1:44:7a:79:24:7b:be:67: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A0:A3:D5:B8:F3:39:09:41:9D:33:79:E5:AE:86:8E:55:20:69:2C X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e2:31:db:25:44:7c:0b:38:99:5b:d6:f2:d4:bf:23:24:0a: 93:f3:ea:7e:c3:18:8f:60:b4:c1:f1:b3:d4:6d:c6:cd:33:17: 6d:97:df:23:1e:3c:67:d3:63:c8:50:02:a5:13:71:84:64:54: 42:81:c5:ea:5c:c4:7b:8b:7f:90:a1:3c:70:82:3c:67:e5:53: 9e:79:87:5f:64:3b:56:8c:54:d7:ee:ab:d2:bc:59:72:77:18: 66:4a:db:7a:67:07:23:ec:d3:3b:0a:4b:98:96:6d:a4:84:ff: 99:88:ae:94:a3:b7:29:cc:0b:8b:6f:e4:83:d9:6c:a4:8c:13: aa:8c:79:c8:ae:70:bb:e1:f2:f9:d5:51:0c:79:7b:39:d9:cc: d0:8f:77:52:2a:2d:01:d4:39:24:af:f0:4e:09:b6:1e:94:2d: 9f:90:c5:e5:ad:59:7f:e5:f7:bf:62:33:c4:58:84:05:5d:4b: 84:d2:24:25:e2:48:9f:4e:02:ae:19:5d:a7:23:46:da:66:73: 87:cb:0c:8e:8e:39:e0:2b:61:1e:e4:a4:6f:73:4a:a7:33:99: fa:82:a4:b7:97:64:e3:d6:24:84:81:fc:bd:8f:67:5b:d0:0a: f2:6d:73:58:51:a1:e0:cd:9c:9d:ee:95:01:12:cc:75:fa:51: c1:93:13:59 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMyNPj0Bdj8HsOu4PlSDeuSo8YVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjA1MTIxMDU1MDJaFw0yNjA1MTMxMTE3MDJaMDMxMTAvBgNV BAMTKDc4QTBBM0Q1QjhGMzM5MDk0MTlEMzM3OUU1QUU4NjhFNTUyMDY5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlglgvrsidWvd/p17lE2qhbmk kFVOzcaNW03IHDNYW0irP8WPYe/lsDsZWcpIEUo2mSlMrKMDgsw7IwdfJpkjeuCK 09+HskWrvSJHsYUOww2Wim/Fvpvm7tLLEZeq+xukxlPOFKS0L+M3TUdJj3gzv1bT ySFNmCoWgMUI1UkgyWfFkAoF5H/gFo0aXXe/Lh2pKJO6XFnwXYAD37hs0jjIZtAT i7P4PioSjrUESY0/L3Xd5eOYRPVdx4H7bfG5FFtag7vWZuV5H7sFSgDoU1a/MJIr X5b6hSwBOHIzdIehNZ2tr4mzBPZ6F4RBU9lXTSpqmePqICqhRHp5JHu+Z6BXAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUeKCj1bjzOQlBnTN55a6GjlUgaSwwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY4jHbJUR8CziZW9by1L8j JAqT8+p+wxiPYLTB8bPUbcbNMxdtl98jHjxn02PIUAKlE3GEZFRCgcXqXMR7i3+Q oTxwgjxn5VOeeYdfZDtWjFTX7qvSvFlydxhmStt6Zwcj7NM7CkuYlm2khP+ZiK6U o7cpzAuLb+SD2WykjBOqjHnIrnC74fL51VEMeXs52czQj3dSKi0B1Dkkr/BOCbYe lC2fkMXlrVl/5fe/YjPEWIQFXUuE0iQl4kifTgKuGV2nI0baZnOHywyOjjngK2Ee 5KRvc0qnM5n6gqS3l2Tj1iSEgfy9j2db0ArybXNYUaHgzZyd7pUBEsx1+lHBkxNZ -----END CERTIFICATE-----Generated at Tue May 12 22:17:47 2026 by rpki-client