
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft
File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft (raw, json)
Hash identifier: RLbDrs/sG7CAlKuA/uE/RuMCu+mySvza+rOuDYvfQ6w=
Subject key identifier: 55:F9:34:83:D1:C6:D8:18:A5:58:AF:9B:00:7A:8A:6D:F5:38:5E:9B
Authority key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57
Certificate issuer: /CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57
Certificate serial: 1328509A7A506D56208662BF2076D029340B8B22
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft
Manifest number: 46
Signing time: Mon 23 Feb 2026 02:04:30 +0000
Manifest this update: Mon 23 Feb 2026 01:59:30 +0000
Manifest next update: Tue 24 Feb 2026 03:23:30 +0000
Files and hashes: 1: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl (hash: TOkOaZrNPIw4wtMhAdZbxvzy9ILX0eHRrqWetqqS+iA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl
rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft
rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 19:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:28:50:9a:7a:50:6d:56:20:86:62:bf:20:76:d0:29:34:0b:8b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57
Validity
Not Before: Feb 23 01:59:30 2026 GMT
Not After : Feb 24 03:23:30 2026 GMT
Subject: CN=55F93483D1C6D818A558AF9B007A8A6DF5385E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:aa:40:db:dc:a7:a8:06:f0:e7:f3:84:68:
98:13:3c:29:ec:17:23:fe:8d:61:7c:83:74:df:45:
b1:b1:07:4e:85:f4:32:6d:f1:56:9e:07:87:75:b8:
cb:ec:ba:c7:0b:9d:48:5a:7c:08:e4:3f:28:fb:2a:
7d:1e:df:a1:5a:34:36:6a:82:9e:4b:01:e8:f2:b8:
09:13:bd:a4:73:f8:ef:d7:26:98:72:32:77:69:9d:
2f:97:d8:6d:24:34:41:db:4b:1a:fb:07:1a:db:bd:
2e:da:66:32:3b:be:3a:9b:f7:26:eb:92:90:53:02:
9c:88:ce:7d:d8:c7:04:68:f8:8a:88:9d:a7:ab:a8:
01:0e:8f:f9:8a:01:6e:43:34:19:b1:e9:e5:08:a5:
0b:c1:d6:2d:e2:58:45:47:4d:ee:d7:92:ab:0c:58:
17:5e:21:ac:f4:dc:10:f2:2c:9d:25:f0:a0:c4:83:
d4:4a:4d:69:4d:9f:31:aa:d2:41:6b:4f:9f:5c:10:
24:2d:1f:8d:a4:0a:1d:f2:1e:f5:93:07:9d:eb:31:
c1:a1:e7:1d:a8:19:0e:10:e3:44:37:d1:35:b2:0c:
dc:ca:9c:c8:3d:7b:b1:42:f2:81:e7:d1:85:20:c0:
d7:3b:b8:31:9f:a3:dc:c3:e8:e3:cc:33:d9:61:81:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F9:34:83:D1:C6:D8:18:A5:58:AF:9B:00:7A:8A:6D:F5:38:5E:9B
X509v3 Authority Key Identifier:
keyid:0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:30:d8:03:33:68:31:2c:a0:29:ec:4e:dd:51:5c:58:c0:
cd:1a:9f:19:61:57:b0:65:7e:4d:d2:05:06:43:4d:9d:54:6f:
0c:45:65:e6:a4:fb:6d:57:76:6a:28:89:15:1f:d4:22:77:24:
2a:d4:88:28:b7:eb:86:98:52:27:00:d7:35:48:7e:09:98:4f:
f9:c6:dd:2d:22:24:89:45:fd:50:a8:37:fc:3c:d5:8c:a3:af:
25:77:4f:4f:f5:81:ec:0d:cb:6e:37:ac:2b:93:e5:29:0a:2e:
77:fc:e9:9e:b8:69:61:5a:06:5b:86:29:0a:b2:78:e0:b8:f2:
41:ce:3f:aa:99:dd:6b:fb:ba:35:91:89:58:bd:81:db:cb:7f:
b6:37:44:a7:14:12:77:34:56:f5:85:27:84:50:16:98:1e:a5:
cb:c6:74:d2:21:5e:87:4d:a1:4d:ae:62:03:a2:f8:9e:cd:19:
7b:cb:66:2d:24:ec:58:84:c4:90:41:f5:45:b7:9a:6f:ea:04:
ce:01:eb:0f:44:a8:b8:ec:c0:63:b8:e8:bc:b7:73:b7:d1:3d:
50:97:86:09:27:e5:62:24:66:1c:c9:39:90:b2:dc:e9:36:02:
99:03:af:5a:53:5f:f4:dd:c1:49:68:9c:8f:da:9f:4d:fb:56:
fa:a9:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:33:49 2026 by rpki-client