$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: irTa17tQ4eXG/xV8GDp45tVSZprT/tt3AAEO14dTG2w= Subject key identifier: 26:CC:52:14:2D:6C:EB:60:34:4A:1E:DB:3E:AB:77:40:6B:8F:74:B7 Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 656BDEC6C4BD2848EA068447EBD2C08205F5E087 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: D9 Signing time: Thu 23 Jul 2026 15:56:48 +0000 Manifest this update: Thu 23 Jul 2026 15:51:48 +0000 Manifest next update: Fri 24 Jul 2026 17:40:48 +0000 Files and hashes: 1: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: trKDbIVx+eTGe+DkQlQ2KyBp/Tu1xw9FTLz4HWG4e6w=) 2: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) 3: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) 4: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) 5: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6b:de:c6:c4:bd:28:48:ea:06:84:47:eb:d2:c0:82:05:f5:e0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: Jul 23 15:51:48 2026 GMT Not After : Jul 24 17:40:48 2026 GMT Subject: CN=26CC52142D6CEB60344A1EDB3EAB77406B8F74B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:5c:5d:dc:8c:3c:18:15:9a:fb:7f:77:91: ac:c6:42:22:ef:06:98:31:30:c5:32:02:25:a3:fe: 96:c2:17:7b:bc:f7:a2:08:fc:47:c6:2d:db:ed:7f: 3b:82:84:38:78:bf:2b:a0:20:c2:9d:ae:af:12:c0: aa:b2:3a:03:13:b0:ca:59:ec:53:23:45:e6:00:6a: 94:f7:90:0c:bb:8b:3e:12:74:30:09:89:4d:a5:10: ac:54:ce:28:24:de:93:2e:8e:42:4d:77:b9:ca:af: 2d:fa:3e:30:63:63:e5:2a:c1:63:ba:be:7a:83:aa: 5a:f8:d4:e8:33:43:af:7c:14:e0:46:d0:3b:fe:4a: 79:ee:53:e7:71:42:59:35:4f:b3:ce:72:68:37:1c: 0e:4e:16:73:0e:ac:b0:1c:a7:69:03:f2:7f:fa:2c: ae:d4:6c:7d:bf:99:e8:ea:a1:45:80:c4:2e:d6:f4: 0b:18:cc:db:01:ca:15:43:82:3b:78:c1:8e:4e:d7: f6:6a:8a:1e:f1:de:eb:b2:77:af:9e:8c:c2:f6:23: d3:98:e8:f8:69:35:67:ae:82:6b:53:59:b0:54:61: 33:89:e6:b4:12:5b:ea:1e:62:76:b0:95:11:e9:8c: 16:34:4d:04:0f:01:e1:aa:67:20:54:a2:72:10:20: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CC:52:14:2D:6C:EB:60:34:4A:1E:DB:3E:AB:77:40:6B:8F:74:B7 X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a1:0c:0b:67:cc:20:02:7a:ee:66:aa:ac:7f:5a:d8:b0:77: bd:b8:f2:96:db:a0:eb:c2:a3:ec:12:02:09:01:62:91:84:e9: 33:df:7b:27:61:6a:91:3b:0c:74:fd:e7:38:b2:a3:12:9d:11: d9:d1:dd:b0:07:bc:ad:8e:1b:46:36:11:1b:a6:8b:e3:5f:ee: cc:d1:ff:8a:e7:d2:59:09:44:5c:9a:b5:76:34:03:10:03:f0: 59:39:fc:85:af:de:a1:ba:7b:bf:79:14:f3:5c:cd:4f:88:8c: 5d:77:e0:14:3f:a6:c7:6c:e0:2c:04:a8:20:7e:87:ca:cc:b2: d5:96:82:b3:46:b2:c2:eb:af:43:a1:6c:d4:b8:41:99:7e:2f: 6d:99:84:7a:c7:e9:d8:f0:cb:5e:ab:fe:d7:03:37:64:62:15: f3:a8:39:d3:cb:a6:ad:a8:82:de:28:35:4a:10:1e:6b:6f:47: c9:2b:cb:90:c4:3b:ac:e2:2c:82:17:c8:43:7f:52:31:b7:2f: 42:69:f5:6c:d8:e6:75:24:c9:df:2e:77:69:0e:70:e6:f9:02: 59:52:93:d3:ff:d6:ee:ed:13:d8:be:7b:8a:7c:59:bd:26:ff: 1d:6b:62:93:7c:8e:62:3a:1d:95:d9:17:12:c8:11:ba:73:76: 3f:6d:9e:ab -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUZWvexsS9KEjqBoRH69LAggX14IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjA3MjMxNTUxNDhaFw0yNjA3MjQxNzQwNDhaMDMxMTAvBgNV BAMTKDI2Q0M1MjE0MkQ2Q0VCNjAzNDRBMUVEQjNFQUI3NzQwNkI4Rjc0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKVxd3Iw8GBWa+393kazGQiLv BpgxMMUyAiWj/pbCF3u896II/EfGLdvtfzuChDh4vyugIMKdrq8SwKqyOgMTsMpZ 7FMjReYAapT3kAy7iz4SdDAJiU2lEKxUzigk3pMujkJNd7nKry36PjBjY+UqwWO6 vnqDqlr41OgzQ698FOBG0Dv+SnnuU+dxQlk1T7POcmg3HA5OFnMOrLAcp2kD8n/6 LK7UbH2/mejqoUWAxC7W9AsYzNsByhVDgjt4wY5O1/Zqih7x3uuyd6+ejML2I9OY 6PhpNWeugmtTWbBUYTOJ5rQSW+oeYnawlRHpjBY0TQQPAeGqZyBUonIQIPx9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJsxSFC1s62A0Sh7bPqt3QGuPdLcwHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4oQwL Z8wgAnruZqqsf1rYsHe9uPKW26DrwqPsEgIJAWKRhOkz33snYWqROwx0/ec4sqMS nRHZ0d2wB7ytjhtGNhEbpovjX+7M0f+K59JZCURcmrV2NAMQA/BZOfyFr96hunu/ eRTzXM1PiIxdd+AUP6bHbOAsBKggfofKzLLVloKzRrLC669DoWzUuEGZfi9tmYR6 x+nY8Mteq/7XAzdkYhXzqDnTy6atqILeKDVKEB5rb0fJK8uQxDus4iyCF8hDf1Ix ty9CafVs2OZ1JMnfLndpDnDm+QJZUpPT/9bu7RPYvnuKfFm9Jv8da2KTfI5iOh2V 2RcSyBG6c3Y/bZ6r -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:18 2026 by rpki-client