
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft
File: 08B09F355659D14A7514422FF8C0A470E09A616D.mft (raw, json)
Hash identifier: bHV8f7Jo39tvUn6xy4k0D0jBqf5/W2nIhTSPFlSrLnk=
Subject key identifier: 46:B3:6A:F7:81:87:90:16:0A:5B:B9:D3:AE:BB:65:DB:3F:00:78:D1
Authority key identifier: 08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D
Certificate issuer: /CN=08B09F355659D14A7514422FF8C0A470E09A616D
Certificate serial: 6F26E17C3B8A93A70A172E10B17B8E921EDB65AE
Authority info access: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft
Manifest number: 23
Signing time: Sat 26 Sep 2026 07:39:40 +0000
Manifest this update: Sat 26 Sep 2026 07:34:40 +0000
Manifest next update: Sun 27 Sep 2026 10:59:40 +0000
Files and hashes: 1: 326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa (hash: YU6hYmLGunAuLNoT2NkLO6XcvryiKELepJNQzECBZLY=)
2: 326130363a613030323a666631303a3a2f34342d3434203d3e20323034303835.roa (hash: 2BnlrdBOBnxokteS24UUIuAvnkec/LOS5N4pjxZvNQU=)
3: 08B09F355659D14A7514422FF8C0A470E09A616D.crl (hash: 4w7TPLeHsmAtO3C9WKFUFi0HFylqHyckFHtQEoqtjC8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl
rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft
rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:26:e1:7c:3b:8a:93:a7:0a:17:2e:10:b1:7b:8e:92:1e:db:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08B09F355659D14A7514422FF8C0A470E09A616D
Validity
Not Before: Sep 26 07:34:40 2026 GMT
Not After : Sep 27 10:59:40 2026 GMT
Subject: CN=46B36AF7818790160A5BB9D3AEBB65DB3F0078D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:8c:71:9d:7a:c5:6a:e7:ad:3c:20:ef:a4:
bf:63:cf:26:41:10:f9:d9:53:0a:94:e2:78:87:25:
b9:06:2a:7b:44:7b:b3:c2:ce:4b:b1:d7:ca:6c:0b:
66:73:93:da:14:e4:0b:93:b3:1f:e0:e8:9f:0c:e0:
75:73:85:10:ec:52:42:25:91:09:13:14:34:c4:d5:
7b:73:34:a6:1a:c2:0b:b7:bf:02:9f:b6:51:58:27:
70:be:1e:50:af:13:ba:a5:d3:56:28:06:d2:96:82:
fd:19:24:19:90:11:3a:af:fb:cb:2c:c9:73:ce:fa:
2a:16:99:77:79:8a:29:e2:1c:a1:b1:bf:3b:09:66:
62:87:37:34:d3:04:44:be:17:15:48:59:4a:56:f0:
3c:c6:7b:cc:5e:dd:b0:08:8d:cd:72:b2:2d:3c:ec:
ba:b8:53:4d:bf:3b:9f:fc:88:f8:ad:96:a0:58:ef:
90:e3:92:d3:5b:44:c8:ee:7a:b9:b5:53:65:8a:fb:
56:0b:bf:ed:f4:7a:3b:e0:bc:ba:ac:75:e5:af:de:
c0:b4:4b:c8:74:bf:2e:63:83:90:f8:81:3f:da:81:
01:9e:16:f8:15:8a:c4:54:57:97:8c:fd:42:a9:94:
5d:1d:32:bf:ef:90:2e:f8:0a:a7:db:3e:9e:eb:9f:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:6A:F7:81:87:90:16:0A:5B:B9:D3:AE:BB:65:DB:3F:00:78:D1
X509v3 Authority Key Identifier:
keyid:08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ff:ae:13:99:6d:d4:54:b2:7d:be:46:df:65:fd:cc:6b:22:
f6:41:29:26:5b:83:bb:4b:28:3a:56:6f:3c:ab:b9:70:50:32:
d1:8a:f9:8d:d3:ff:e7:d1:13:38:8a:f1:79:b9:5c:7d:da:df:
fb:20:00:e2:35:f2:ff:51:ed:b8:ba:4c:c7:6c:8d:84:8e:53:
41:aa:0f:8d:90:c7:f4:4e:01:41:c8:7a:36:b0:e8:09:f3:62:
91:6c:3d:2d:ae:aa:5a:31:df:21:0a:15:0e:ed:c5:8e:95:ef:
ae:a6:f7:58:bf:3f:cc:68:ee:9d:be:8e:a2:ba:05:6c:25:73:
58:4f:78:fc:65:d9:60:b8:0a:60:92:30:72:be:43:99:99:2a:
5e:c1:a1:3a:ab:3a:78:f1:7b:11:de:01:2d:8f:9c:af:6c:cb:
8b:e5:74:d2:d5:43:53:ed:92:c7:34:d8:31:a0:0a:fd:e6:92:
65:e3:0c:c2:c3:61:72:b9:48:23:b6:4e:6e:17:af:b8:5a:be:
0e:f4:a1:df:ea:8c:15:49:c6:17:ad:f6:12:d8:a5:66:75:c6:
49:3f:92:f1:b2:4c:8b:9c:33:f3:15:1f:91:3c:32:e7:09:13:
39:74:e9:e9:b8:60:08:3b:e2:4e:3e:41:db:79:47:a5:a9:97:
99:13:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:16 2026 by rpki-client