$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: Q6bMAIy+l7mK9o8DvfeFYUhiw8fDp5J9pTr0M9TDIik= Subject key identifier: D1:BD:48:A8:53:9A:86:BD:33:BE:FF:16:41:32:77:47:26:B6:F2:3B Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 2A8A37BA6B5F1C980D252D64379BC7CE97D9DA4F Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 027E Signing time: Wed 13 May 2026 22:40:02 +0000 Manifest this update: Wed 13 May 2026 22:35:02 +0000 Manifest next update: Fri 15 May 2026 02:08:02 +0000 Files and hashes: 1: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 2: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 3: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: SZhZD3O0IzSlseGMWkIvRRSVhgZxN0WBgdJmuKUBZls=) 4: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) 5: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 04:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8a:37:ba:6b:5f:1c:98:0d:25:2d:64:37:9b:c7:ce:97:d9:da:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: May 13 22:35:02 2026 GMT Not After : May 15 02:08:02 2026 GMT Subject: CN=D1BD48A8539A86BD33BEFF164132774726B6F23B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:c2:b3:7e:09:95:f9:ea:02:c1:df:9c:42: a4:9c:13:db:1c:e6:ce:d4:f4:30:78:21:ce:bf:c1: 3d:ea:df:f5:2e:4c:7e:57:53:fb:3c:f6:f5:20:0d: fe:6b:73:e0:b2:59:35:de:59:6b:27:8f:19:1b:20: 74:e7:3f:83:ff:d8:6f:a0:c9:61:71:df:79:67:a4: 4b:40:72:c8:92:ae:cf:12:db:be:7f:43:a4:54:21: d7:e6:c3:e5:5d:37:75:fe:a9:ad:98:ca:89:6c:fc: 7c:50:fe:c8:ef:af:c0:4a:fd:cb:cd:f5:e7:a0:a9: 5c:5a:9a:23:80:45:86:2c:2d:08:41:27:0c:45:cf: f4:76:a1:0c:b4:ce:d6:7e:44:b4:ba:17:59:b0:f5: c3:6e:de:80:ce:e2:a3:6c:d6:9c:17:ae:bd:cb:07: e8:98:13:91:76:74:59:55:3f:c5:93:eb:e6:32:12: 2e:11:d6:14:38:ae:c2:5b:9e:1f:33:76:d9:46:ab: de:28:75:53:85:b5:1e:00:ff:24:58:1a:9d:df:08: d8:1e:bb:7c:a7:16:d1:fa:4e:f5:50:f2:59:8b:e2: 8b:81:63:d1:bb:77:67:75:a3:e8:00:60:80:0f:1c: 8f:b3:cd:7a:20:9c:05:cb:e5:81:74:86:71:b3:c1: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BD:48:A8:53:9A:86:BD:33:BE:FF:16:41:32:77:47:26:B6:F2:3B X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:49:38:28:d6:aa:da:02:2f:d3:7f:a0:a1:61:bd:c0:d6:2c: 5d:b6:3f:6b:34:a2:6c:e0:68:43:96:4e:8e:03:ae:2f:72:7f: fa:36:6e:01:19:11:99:4f:59:c0:98:e8:0d:7d:4a:98:25:bb: be:bf:96:e9:41:f0:11:ce:08:31:14:e8:0b:2b:e6:20:bd:a3: 89:d6:68:60:e5:51:67:47:81:9f:07:f7:d5:1a:79:97:fd:b7: 36:4a:e9:98:2b:b8:18:91:43:84:80:6a:23:52:14:dc:dd:86: 6b:8b:96:2a:46:6c:fd:8d:97:f9:ae:0e:85:0c:ae:db:1b:56: 6c:ec:3b:17:09:81:20:dd:3a:31:5e:45:a5:94:b1:e6:05:85: ac:bc:fc:10:41:a1:44:92:f6:da:b2:e7:da:ed:1d:6b:a4:9c: 82:65:98:a8:59:42:31:ca:23:9c:ff:55:52:b9:cd:3a:01:4d: ff:45:1a:55:11:06:46:54:87:ce:72:89:fb:0c:c8:aa:5b:2d: 29:a9:53:4b:73:2c:35:7a:3d:0a:83:e2:5b:b6:c7:25:2c:dc: ab:0a:1d:9b:e4:4b:af:79:4f:7b:7c:e6:d2:ff:76:2d:e0:0b: be:1a:ce:85:92:8f:09:2b:18:3a:9f:11:ab:6a:7a:be:52:a8: aa:ed:eb:20 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUKoo3umtfHJgNJS1kN5vHzpfZ2k8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjA1MTMyMjM1MDJaFw0yNjA1MTUwMjA4MDJaMDMxMTAvBgNV BAMTKEQxQkQ0OEE4NTM5QTg2QkQzM0JFRkYxNjQxMzI3NzQ3MjZCNkYyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i8KzfgmV+eoCwd+cQqScE9sc 5s7U9DB4Ic6/wT3q3/UuTH5XU/s89vUgDf5rc+CyWTXeWWsnjxkbIHTnP4P/2G+g yWFx33lnpEtAcsiSrs8S275/Q6RUIdfmw+VdN3X+qa2Yyols/HxQ/sjvr8BK/cvN 9eegqVxamiOARYYsLQhBJwxFz/R2oQy0ztZ+RLS6F1mw9cNu3oDO4qNs1pwXrr3L B+iYE5F2dFlVP8WT6+YyEi4R1hQ4rsJbnh8zdtlGq94odVOFtR4A/yRYGp3fCNge u3ynFtH6TvVQ8lmL4ouBY9G7d2d1o+gAYIAPHI+zzXognAXL5YF0hnGzwaFTAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU0b1IqFOahr0zvv8WQTJ3Rya28jswHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDWSTgo1qraAi/Tf6ChYb3A 1ixdtj9rNKJs4GhDlk6OA64vcn/6Nm4BGRGZT1nAmOgNfUqYJbu+v5bpQfARzggx FOgLK+YgvaOJ1mhg5VFnR4GfB/fVGnmX/bc2SumYK7gYkUOEgGojUhTc3YZri5Yq Rmz9jZf5rg6FDK7bG1Zs7DsXCYEg3ToxXkWllLHmBYWsvPwQQaFEkvbasufa7R1r pJyCZZioWUIxyiOc/1VSuc06AU3/RRpVEQZGVIfOcon7DMiqWy0pqVNLcyw1ej0K g+JbtsclLNyrCh2b5EuveU97fObS/3Yt4Au+Gs6Fko8JKxg6nxGranq+Uqiq7esg -----END CERTIFICATE-----Generated at Wed May 13 23:57:49 2026 by rpki-client