$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: Nz5FqxbXa6T9ZiBrLID6pMTCxCg1HQ2O8w2C5GnH1r4= Subject key identifier: 58:47:9C:6F:C2:3C:F5:07:DE:FE:C4:F0:7E:2C:28:76:76:B1:3B:D8 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 0ABDF243F4D13993C128CAB880426107D1F6F56C Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0300 Signing time: Wed 19 Aug 2026 13:59:48 +0000 Manifest this update: Wed 19 Aug 2026 13:54:48 +0000 Manifest next update: Thu 20 Aug 2026 17:54:48 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 2: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: vxUZFWaXHAM49IHy6bTw2KQC6rcGriM5zHo4p7zDcqY=) 3: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 4: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 5: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Aug 2026 14:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bd:f2:43:f4:d1:39:93:c1:28:ca:b8:80:42:61:07:d1:f6:f5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Aug 19 13:54:48 2026 GMT Not After : Aug 20 17:54:48 2026 GMT Subject: CN=58479C6FC23CF507DEFEC4F07E2C287676B13BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:94:78:d7:8a:db:10:8f:9f:21:02:6d:87: 02:89:c6:ce:a0:88:ee:45:7d:4d:27:ae:84:cd:7f: 06:2e:46:e7:b6:c6:93:04:e6:03:46:69:cf:54:a0: 32:ed:f6:83:26:03:ee:7e:f0:da:9d:91:ae:a8:27: 11:9b:49:06:a2:d6:ea:c5:11:f8:01:53:ef:03:ea: 3d:10:24:96:dc:3f:ee:fb:72:71:c3:03:44:33:f7: 51:ae:89:f0:df:0f:6c:fe:a2:92:0a:b7:2b:01:18: 66:94:ec:0d:79:a8:ef:0e:36:a9:f4:1e:f5:f3:14: 1c:18:45:e5:cb:38:65:5c:57:3f:a4:95:ee:d8:db: de:be:91:59:16:67:46:c3:fc:dc:61:64:b3:7b:fa: 2c:e6:5c:0f:dd:e8:87:aa:eb:15:a1:84:ba:26:6f: 9b:88:f6:19:cd:c8:f0:7c:3c:21:f0:62:46:dd:13: ad:ca:1b:50:d1:cd:78:9b:6d:91:bc:ce:b4:02:46: ac:65:1b:0b:df:a5:60:07:56:1b:3b:1a:4a:18:a6: 6d:5b:a5:a0:c2:00:fd:69:f8:59:e2:18:f3:5d:33: d0:fd:a2:d7:4c:5c:e1:17:af:5a:29:5a:b9:1e:25: 0d:bb:df:3a:53:ae:ee:3f:34:50:53:3a:5f:e8:3d: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:47:9C:6F:C2:3C:F5:07:DE:FE:C4:F0:7E:2C:28:76:76:B1:3B:D8 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c3:de:56:db:30:01:fe:e4:70:3c:c0:81:12:b1:e8:a2:5e: e6:e3:61:b5:c7:c9:c2:54:95:96:67:27:46:33:1b:45:ee:12: 41:7c:02:5e:31:fa:c7:69:90:fe:76:55:5c:7c:9d:95:df:b7: 3a:1c:da:04:80:8c:56:1c:be:e1:eb:07:d5:65:91:98:9b:d6: 3b:32:11:58:9e:30:2a:e4:45:5a:d5:54:ec:fe:c0:7f:d5:0f: 6b:4f:7d:18:39:c0:f3:7b:de:e1:88:81:aa:cc:61:41:5c:48: 9b:0f:d4:1d:35:c5:98:ba:ef:45:d4:1b:85:e8:1e:9f:e3:a8: 21:9b:a0:34:51:27:20:83:27:7f:eb:b3:df:4d:83:6e:02:7d: e2:14:94:02:3b:6d:89:6c:2c:48:a3:be:0f:2e:85:c6:68:f9: 2e:99:86:d7:45:bf:d8:3a:3e:37:c4:6a:4c:cf:6f:4c:7e:c6: 31:00:c0:6d:6f:22:42:7f:26:2f:fb:11:e0:6a:e6:e5:95:da: b6:81:20:e0:17:91:d6:80:51:58:92:0e:0b:e7:36:f3:96:33: 1e:3a:19:25:78:a2:6c:d1:64:e7:a6:b8:53:bf:34:c7:b3:29: 18:5d:9b:a7:af:d4:b7:a7:c9:5c:14:4e:9a:64:55:49:19:94: 02:d9:3d:ed -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUCr3yQ/TROZPBKMq4gEJhB9H29WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjA4MTkxMzU0NDhaFw0yNjA4MjAxNzU0NDhaMDMxMTAvBgNV BAMTKDU4NDc5QzZGQzIzQ0Y1MDdERUZFQzRGMDdFMkMyODc2NzZCMTNCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhZR414rbEI+fIQJthwKJxs6g iO5FfU0nroTNfwYuRue2xpME5gNGac9UoDLt9oMmA+5+8Nqdka6oJxGbSQai1urF EfgBU+8D6j0QJJbcP+77cnHDA0Qz91GuifDfD2z+opIKtysBGGaU7A15qO8ONqn0 HvXzFBwYReXLOGVcVz+kle7Y296+kVkWZ0bD/NxhZLN7+izmXA/d6Ieq6xWhhLom b5uI9hnNyPB8PCHwYkbdE63KG1DRzXibbZG8zrQCRqxlGwvfpWAHVhs7GkoYpm1b paDCAP1p+FniGPNdM9D9otdMXOEXr1opWrkeJQ273zpTru4/NFBTOl/oPTg/AgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUWEecb8I89Qfe/sTwfiwodnaxO9gwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQw95W2zAB/uRwPMCBErHo ol7m42G1x8nCVJWWZydGMxtF7hJBfAJeMfrHaZD+dlVcfJ2V37c6HNoEgIxWHL7h 6wfVZZGYm9Y7MhFYnjAq5EVa1VTs/sB/1Q9rT30YOcDze97hiIGqzGFBXEibD9Qd NcWYuu9F1BuF6B6f46ghm6A0UScggyd/67PfTYNuAn3iFJQCO22JbCxIo74PLoXG aPkumYbXRb/YOj43xGpMz29MfsYxAMBtbyJCfyYv+xHgaublldq2gSDgF5HWgFFY kg4L5zbzljMeOhkleKJs0WTnprhTvzTHsykYXZunr9S3p8lcFE6aZFVJGZQC2T3t -----END CERTIFICATE-----Generated at Thu Aug 20 10:47:44 2026 by rpki-client