$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: AxhB0XKkrVUEBY/+ebH0MEzvIYIAwgj1B6C3iRnfLB4= Subject key identifier: 1F:3C:C2:AF:9E:CE:EC:87:C8:41:EA:ED:F9:57:D5:D1:0F:71:4C:8C Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 605DE22DB397784162AC33281A23F60CC92D1894 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 016C Signing time: Wed 25 Mar 2026 23:01:16 +0000 Manifest this update: Wed 25 Mar 2026 22:56:16 +0000 Manifest next update: Fri 27 Mar 2026 00:36:16 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: TfBZt71vAGP6piYeLVYpGKzMlwzV4N7kBqtCYEV9NXM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5d:e2:2d:b3:97:78:41:62:ac:33:28:1a:23:f6:0c:c9:2d:18:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Mar 25 22:56:16 2026 GMT Not After : Mar 27 00:36:16 2026 GMT Subject: CN=1F3CC2AF9ECEEC87C841EAEDF957D5D10F714C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:99:15:cc:3a:9b:c0:94:8c:e9:46:7a:20: ba:ff:15:f4:2a:c0:87:d0:4f:9d:20:16:53:d2:32: bf:14:89:d9:a4:e5:91:98:8a:d7:f3:8a:4b:b8:ca: c7:8d:b7:d4:ee:06:88:41:b3:1d:a9:93:5d:e5:68: f9:48:56:0e:8c:21:d1:81:7e:91:f4:09:46:0a:c7: d6:11:fb:b6:92:a5:af:5b:5b:7f:dd:11:c4:d2:61: c8:e1:01:e9:e7:e2:16:b1:3d:e0:3e:9d:a6:87:e9: ba:de:eb:f9:d8:4f:04:e4:53:15:94:d1:c5:ca:69: 15:e0:49:41:10:fa:f0:c9:4e:66:a5:e7:04:a4:d2: 68:4b:df:a9:44:d8:42:b2:64:0f:11:12:ef:a3:f4: fa:bc:95:f0:34:c6:41:b8:c5:d9:c4:54:ae:d9:84: f8:78:3d:18:b9:a7:ba:fc:e1:69:67:c2:73:f8:02: 1d:fb:3c:bd:41:a6:9b:66:c3:e4:5c:d6:04:fe:3c: 30:b0:17:cd:42:e6:84:ca:24:44:9e:00:40:df:41: d1:7e:99:f0:4c:e8:4e:89:3f:33:d5:59:35:d0:e2: 43:60:e5:28:1f:85:5b:14:d7:5b:fd:4a:b8:3f:6c: 0c:98:75:06:01:47:41:59:98:8c:a2:e6:1d:9d:34: ba:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3C:C2:AF:9E:CE:EC:87:C8:41:EA:ED:F9:57:D5:D1:0F:71:4C:8C X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:75:5a:0e:22:81:e2:fe:8d:b4:cd:4b:28:b4:ac:02:d0:3a: 9f:97:93:23:88:0e:70:f1:d0:5f:19:10:e4:3e:50:b4:86:16: a8:26:5d:fa:ad:2c:49:2d:e1:61:44:2a:69:95:13:49:61:97: fe:8d:19:fc:d0:f4:39:1d:1d:4d:7a:be:4b:8a:52:9c:06:5f: 9b:3e:69:3c:34:65:d4:c4:fa:76:b1:0a:54:d4:94:44:e5:ef: c0:1c:a2:12:a5:a2:fa:53:a5:22:29:c8:0e:0e:e5:d5:54:11: 82:d3:12:4a:c1:86:e1:82:fa:5a:85:db:26:57:d6:81:9b:fa: e1:56:a7:49:52:a8:62:b7:68:45:ce:15:c4:e4:f8:7f:11:9d: 89:b4:6d:0f:b6:b3:82:a7:05:a7:84:0f:b0:58:c2:8d:83:12: 4c:b8:ed:5a:8b:b1:7f:25:89:6b:52:c0:86:69:11:0b:43:cc: 68:0f:37:f6:e4:f2:f7:2a:9a:50:64:5a:12:b8:05:c7:57:78: ce:83:0e:3f:81:ba:a1:f3:8a:2b:e7:c3:95:a1:34:1a:71:f1: 7b:95:b6:9e:05:47:2d:4b:20:b6:73:bb:5a:7a:b2:b5:b0:30: e7:21:75:82:eb:fb:6e:0a:0c:f1:4a:2d:7d:de:80:52:11:be: 08:ef:92:69 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYF3iLbOXeEFirDMoGiP2DMktGJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjAzMjUyMjU2MTZaFw0yNjAzMjcwMDM2MTZaMDMxMTAvBgNV BAMTKDFGM0NDMkFGOUVDRUVDODdDODQxRUFFREY5NTdENUQxMEY3MTRDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIZkVzDqbwJSM6UZ6ILr/FfQq wIfQT50gFlPSMr8Uidmk5ZGYitfziku4yseNt9TuBohBsx2pk13laPlIVg6MIdGB fpH0CUYKx9YR+7aSpa9bW3/dEcTSYcjhAenn4haxPeA+naaH6bre6/nYTwTkUxWU 0cXKaRXgSUEQ+vDJTmal5wSk0mhL36lE2EKyZA8REu+j9Pq8lfA0xkG4xdnEVK7Z hPh4PRi5p7r84WlnwnP4Ah37PL1Bpptmw+Rc1gT+PDCwF81C5oTKJESeAEDfQdF+ mfBM6E6JPzPVWTXQ4kNg5SgfhVsU11v9Srg/bAyYdQYBR0FZmIyi5h2dNLqjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUHzzCr57O7IfIQert+VfV0Q9xTIwwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtdVoO IoHi/o20zUsotKwC0Dqfl5MjiA5w8dBfGRDkPlC0hhaoJl36rSxJLeFhRCpplRNJ YZf+jRn80PQ5HR1Ner5LilKcBl+bPmk8NGXUxPp2sQpU1JRE5e/AHKISpaL6U6Ui KcgODuXVVBGC0xJKwYbhgvpahdsmV9aBm/rhVqdJUqhit2hFzhXE5Ph/EZ2JtG0P trOCpwWnhA+wWMKNgxJMuO1ai7F/JYlrUsCGaRELQ8xoDzf25PL3KppQZFoSuAXH V3jOgw4/gbqh84or58OVoTQacfF7lbaeBUctSyC2c7taerK1sDDnIXWC6/tuCgzx Si193oBSEb4I75Jp -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:56 2026 by rpki-client