$ rpki-client -vvvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: zZ3ow6USwR/WtL3L7zZ9JTexewLDEb1PEFfBFxvPXAQ= Subject key identifier: 93:D6:65:E3:74:DE:9E:DD:51:FC:85:63:7C:9C:4F:C3:8E:DA:78:B0 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 7DDC5CC173ACA9E0EC1FFA1771FEB2626208705F Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 032F Signing time: Wed 23 Sep 2026 04:44:35 +0000 Manifest this update: Wed 23 Sep 2026 04:39:35 +0000 Manifest next update: Thu 24 Sep 2026 05:14:35 +0000 Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: y6XVk3Cn4XBYEYWpLfV8kDXpjBeEFU2siNQPwva6vE4=) 2: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 3: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 4: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) 5: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 21:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:dc:5c:c1:73:ac:a9:e0:ec:1f:fa:17:71:fe:b2:62:62:08:70:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Sep 23 04:39:35 2026 GMT Not After : Sep 24 05:14:35 2026 GMT Subject: CN=93D665E374DE9EDD51FC85637C9C4FC38EDA78B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:76:6b:45:15:86:14:19:ca:d2:b6:4e:af: e9:87:ac:64:94:ed:17:ec:79:08:a2:af:b9:04:6c: 46:c5:5e:9a:d0:6e:0a:6d:0b:65:07:3f:94:f1:49: 9a:98:ee:24:4b:42:6e:b9:10:6d:87:7a:8e:a1:8b: e3:21:39:ff:98:4b:7a:45:50:ef:eb:44:37:4c:52: 0c:84:81:7a:05:75:b8:18:bc:da:a5:ed:5d:91:15: 73:c7:fb:fc:fa:54:75:dd:fa:1b:97:14:92:eb:39: 7a:5d:e6:bb:4d:15:1c:90:49:d7:3f:da:ee:4a:cb: ae:e9:27:96:6e:d2:e0:72:87:b1:0e:d4:2b:c8:60: 0b:b5:22:2a:dd:f3:cf:62:be:40:06:ae:c3:8a:72: 5e:c3:2e:72:4f:19:27:f5:fd:1c:cc:ff:bb:8f:77: 93:4f:5d:da:f5:23:86:da:a9:f1:bb:13:68:f9:e1: c2:d0:4a:e5:a7:e8:0c:0a:93:c3:8c:33:48:28:de: 74:47:84:b7:a6:31:cb:15:cc:d1:ab:db:de:72:e0: 70:a5:fd:94:ee:81:57:f2:61:74:9b:a2:2a:e3:ab: 7d:b7:bc:85:39:05:c2:71:66:e4:ec:65:fb:2d:ba: 4b:f9:b7:8a:e8:0d:ea:14:46:81:a6:48:a2:ba:ae: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D6:65:E3:74:DE:9E:DD:51:FC:85:63:7C:9C:4F:C3:8E:DA:78:B0 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1a:4d:4e:6e:79:bc:81:c2:39:d5:3b:4a:a7:57:ef:9f:c1: c2:c5:34:aa:bd:38:6c:58:e1:db:d2:41:cf:8f:3f:28:e8:ff: 4e:65:ea:d2:a6:f7:01:cf:4c:52:64:ef:6f:09:cf:c3:f3:b6: 38:01:2d:a6:bb:98:0c:2b:82:45:c6:37:2f:0d:59:dc:d0:a9: 12:c5:84:e0:21:14:8f:ce:95:bd:8d:74:f5:54:0c:5f:66:5f: 7e:9e:96:67:a0:10:71:64:30:48:4b:b5:8e:c6:65:4a:1d:ad: ce:d9:85:40:3f:7e:7c:ee:40:c9:97:4a:a3:2d:a6:04:01:fd: 94:63:bb:6b:1c:68:c8:2c:4e:93:e9:59:d2:4b:e7:56:bf:90: eb:fa:17:f9:04:4e:90:21:3b:7a:0b:5c:5b:08:5f:dc:73:5b: 0d:70:d7:23:41:3d:1e:cb:f4:1d:20:bd:63:b4:0b:46:fe:f4: 95:01:cf:96:2b:83:8d:8d:93:0f:b9:e7:38:92:da:f8:b9:ac: de:7b:6d:f9:ef:b0:9f:aa:8c:fb:c0:7d:7d:7a:ee:8f:bf:f8: f6:b7:48:94:07:ec:96:ab:69:e0:ed:6b:f8:50:92:a5:9e:3e: cf:59:2c:6a:c7:22:a5:44:14:89:57:4a:8e:fa:2e:dc:22:cc: ef:96:97:a9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUfdxcwXOsqeDsH/oXcf6yYmIIcF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjA5MjMwNDM5MzVaFw0yNjA5MjQwNTE0MzVaMDMxMTAvBgNV BAMTKDkzRDY2NUUzNzRERTlFREQ1MUZDODU2MzdDOUM0RkMzOEVEQTc4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjD3ZrRRWGFBnK0rZOr+mHrGSU 7RfseQiir7kEbEbFXprQbgptC2UHP5TxSZqY7iRLQm65EG2Heo6hi+MhOf+YS3pF UO/rRDdMUgyEgXoFdbgYvNql7V2RFXPH+/z6VHXd+huXFJLrOXpd5rtNFRyQSdc/ 2u5Ky67pJ5Zu0uByh7EO1CvIYAu1Iird889ivkAGrsOKcl7DLnJPGSf1/RzM/7uP d5NPXdr1I4baqfG7E2j54cLQSuWn6AwKk8OMM0go3nRHhLemMcsVzNGr295y4HCl /ZTugVfyYXSboirjq323vIU5BcJxZuTsZfstukv5t4roDeoURoGmSKK6ruWDAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUk9Zl43Tent1R/IVjfJxPw47aeLAwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhGk1Obnm8gcI51TtKp1fv n8HCxTSqvThsWOHb0kHPjz8o6P9OZerSpvcBz0xSZO9vCc/D87Y4AS2mu5gMK4JF xjcvDVnc0KkSxYTgIRSPzpW9jXT1VAxfZl9+npZnoBBxZDBIS7WOxmVKHa3O2YVA P3587kDJl0qjLaYEAf2UY7trHGjILE6T6VnSS+dWv5Dr+hf5BE6QITt6C1xbCF/c c1sNcNcjQT0ey/QdIL1jtAtG/vSVAc+WK4ONjZMPuec4ktr4uazee23577Cfqoz7 wH19eu6Pv/j2t0iUB+yWq2ng7Wv4UJKlnj7PWSxqxyKlRBSJV0qO+i7cIszvlpep -----END CERTIFICATE-----Generated at Wed Sep 23 18:51:37 2026 by rpki-client