
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json)
Hash identifier: dMEQ9JASc8QCIMorGCtQ/SM9LeVdN1TZG63LR48HTNU=
Subject key identifier: 20:53:58:F7:DC:C1:D3:70:6B:BE:3D:78:8B:CA:17:68:AD:5E:98:A1
Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD
Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
Certificate serial: 690F700058A9B6C68FA0DE56D53049C0D64CAC5B
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
Manifest number: 0212
Signing time: Fri 24 Jul 2026 03:20:48 +0000
Manifest this update: Fri 24 Jul 2026 03:15:48 +0000
Manifest next update: Sat 25 Jul 2026 05:42:48 +0000
Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: gFrSq6ti340LuE8JEoTSYW55tg/dQhhE3Lc5QfrQOno=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0f:70:00:58:a9:b6:c6:8f:a0:de:56:d5:30:49:c0:d6:4c:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
Validity
Not Before: Jul 24 03:15:48 2026 GMT
Not After : Jul 25 05:42:48 2026 GMT
Subject: CN=205358F7DCC1D3706BBE3D788BCA1768AD5E98A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:81:84:8b:8a:6e:11:ff:2a:6a:f9:8a:25:
ed:03:2b:f2:82:7e:82:59:a6:be:41:f7:4e:f8:b3:
94:4a:77:f5:e4:02:88:f7:21:46:ca:b7:35:40:33:
9e:9f:77:46:9c:15:2b:1d:b9:82:4f:a5:84:8d:06:
53:22:8e:68:8a:e1:86:81:83:01:6e:60:d3:bc:ec:
ae:ad:be:59:92:1c:7d:52:84:66:50:b7:47:b7:47:
52:4b:c2:c6:58:ae:a0:20:38:40:56:e2:c9:3f:be:
94:cf:e5:fb:1f:46:73:ed:9c:77:58:a9:1d:b5:fc:
6e:65:f8:a8:9b:70:8f:5c:79:9b:ad:c9:67:58:5e:
8f:77:64:19:96:4d:d5:62:83:4a:5c:96:1d:72:36:
3e:45:5d:f2:b5:ab:0e:ca:9d:ef:98:e9:95:af:7f:
5a:ab:b5:b2:9e:fa:e8:5e:f0:68:7e:a9:da:40:4c:
0f:a7:08:a7:81:f9:4f:28:1b:f0:59:db:4c:6d:87:
e8:68:04:fd:06:d4:64:49:98:35:90:fd:88:7e:c7:
ec:ca:56:99:fc:f5:00:2b:ce:57:66:a4:98:a4:5f:
2e:43:28:71:02:38:ff:05:6d:05:fb:3f:a2:48:8e:
91:e4:1a:c0:e1:8d:e9:e5:c3:21:b7:c9:64:6c:da:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:53:58:F7:DC:C1:D3:70:6B:BE:3D:78:8B:CA:17:68:AD:5E:98:A1
X509v3 Authority Key Identifier:
keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:ba:8b:6a:3d:bf:f4:58:08:d5:1e:34:0d:8b:10:59:d3:
15:d3:33:76:08:a9:08:cf:a1:f6:85:68:c2:8c:ad:27:70:bc:
82:db:58:f1:4b:3d:30:8a:cc:4a:98:e6:43:9b:17:dd:60:c6:
b5:a3:74:ed:fd:5e:60:f6:35:c2:cb:4b:27:83:06:00:d2:cb:
00:5c:43:13:20:b9:c5:3c:1b:b7:c2:e7:d3:48:69:8b:3b:64:
8d:fb:7f:75:e6:a4:ac:a0:c5:3c:3e:2b:ee:0b:98:9c:48:d1:
09:f3:61:56:ea:bc:e5:23:32:45:78:19:10:b0:9d:4b:6d:1a:
54:30:18:0a:2a:be:a9:fe:77:aa:01:d3:06:12:44:b1:00:8d:
d2:e6:8f:84:85:94:63:b4:2b:89:ef:73:a8:e6:30:e9:cd:d2:
3c:3b:64:a8:9e:fa:35:e6:16:af:14:9b:03:4c:97:c1:76:de:
ca:d0:27:55:5d:3c:a5:9d:bf:8c:7f:ec:91:15:37:7d:14:c1:
5b:bb:97:05:43:84:10:cf:cd:21:bf:cb:cf:6b:13:a1:57:a8:
0f:d5:e3:5c:e2:ec:a5:7c:54:9d:06:20:a1:df:db:80:a2:d4:
ec:81:2d:fd:97:7f:8c:c3:92:cb:77:94:69:60:89:f1:b3:eb:
09:3e:2a:85
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUaQ9wAFiptsaPoN5W1TBJwNZMrFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0
MTRDOThBRDAeFw0yNjA3MjQwMzE1NDhaFw0yNjA3MjUwNTQyNDhaMDMxMTAvBgNV
BAMTKDIwNTM1OEY3RENDMUQzNzA2QkJFM0Q3ODhCQ0ExNzY4QUQ1RTk4QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSYGEi4puEf8qavmKJe0DK/KC
foJZpr5B9074s5RKd/XkAoj3IUbKtzVAM56fd0acFSsduYJPpYSNBlMijmiK4YaB
gwFuYNO87K6tvlmSHH1ShGZQt0e3R1JLwsZYrqAgOEBW4sk/vpTP5fsfRnPtnHdY
qR21/G5l+KibcI9ceZutyWdYXo93ZBmWTdVig0pclh1yNj5FXfK1qw7Kne+Y6ZWv
f1qrtbKe+uhe8Gh+qdpATA+nCKeB+U8oG/BZ20xth+hoBP0G1GRJmDWQ/Yh+x+zK
Vpn89QArzldmpJikXy5DKHECOP8FbQX7P6JIjpHkGsDhjenlwyG3yWRs2sJzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUIFNY99zB03Brvj14i8oXaK1emKEwHwYDVR0j
BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3
MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE
RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0
MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5JbqL
aj2/9FgI1R40DYsQWdMV0zN2CKkIz6H2hWjCjK0ncLyC21jxSz0wisxKmOZDmxfd
YMa1o3Tt/V5g9jXCy0sngwYA0ssAXEMTILnFPBu3wufTSGmLO2SN+3915qSsoMU8
PivuC5icSNEJ82FW6rzlIzJFeBkQsJ1LbRpUMBgKKr6p/neqAdMGEkSxAI3S5o+E
hZRjtCuJ73Oo5jDpzdI8O2Sonvo15havFJsDTJfBdt7K0CdVXTylnb+Mf+yRFTd9
FMFbu5cFQ4QQz80hv8vPaxOhV6gP1eNc4uylfFSdBiCh39uAotTsgS39l3+Mw5LL
d5RpYInxs+sJPiqF
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:04 2026 by rpki-client