Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: 5PxJM+dztAyv3CtHsuiasjjwNfQD08/aUxWJFNgByiA=
Subject key identifier: 29:C3:C8:A6:1A:44:6B:66:96:01:57:0F:1C:0B:17:E5:EA:7A:AD:79
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019FAA5047212891C2BE5DFCC6442227D655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 20:00:15 +0000
Manifest this update: Tue 28 Jul 2026 20:00:15 +0000
Manifest next update: Wed 29 Jul 2026 20:00:15 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: J2l7lY6PVrJtclGRMDb/vFs8K5T5+R4cEGj3t+wm37I=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:47:21:28:91:c2:be:5d:fc:c6:44:22:27:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Jul 28 20:00:15 2026 GMT
Not After : Jul 29 20:00:15 2026 GMT
Subject: CN=29c3c8a61a446b669601570f1c0b17e5ea7aad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:66:4b:4f:da:ed:85:94:fe:a3:4f:0a:10:
4f:e3:39:b1:ef:99:c9:cc:7b:00:25:48:4f:54:4b:
d2:f7:fd:ba:8f:56:52:7f:ea:65:cf:3e:e0:a4:df:
78:e5:8a:25:3a:12:8d:15:94:9d:35:8f:75:e4:fc:
ab:05:ef:0c:a5:d1:5a:2c:57:a3:58:7a:38:5d:73:
f6:a5:9d:1b:6a:b9:fe:30:c7:d6:c7:07:d7:2d:bc:
04:d6:04:ab:ca:2e:31:f1:6e:02:94:23:6b:36:d8:
60:94:a3:9d:65:b0:02:c4:85:1a:b2:1c:b9:11:fd:
f7:8d:98:18:30:06:ae:ab:24:cb:b0:42:2c:d0:66:
21:01:74:2d:0a:c9:2d:c4:c3:9c:06:8e:6a:62:57:
f6:81:87:92:b2:bc:c4:db:59:21:40:95:23:76:d4:
d0:55:eb:93:c6:56:19:48:cb:1b:2a:e2:19:17:49:
83:75:73:47:19:2a:09:d2:16:fb:8e:32:57:1f:cb:
04:f2:47:7d:53:5d:c1:d0:57:9c:f7:34:4c:39:f2:
c6:52:b4:d4:0f:c0:ad:ea:9d:21:a5:3d:01:1e:75:
74:5e:3c:f4:c9:eb:00:17:4b:53:4e:fd:5c:6c:55:
ae:25:86:27:be:2f:47:33:cb:c8:43:bd:62:68:7a:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:C8:A6:1A:44:6B:66:96:01:57:0F:1C:0B:17:E5:EA:7A:AD:79
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d4:8c:f3:81:bb:36:93:46:56:43:33:d0:aa:87:94:53:dc:
32:eb:f3:11:99:2f:21:9f:4b:5c:d2:65:0e:14:55:71:22:56:
bc:77:b5:76:7f:31:dc:c6:a2:83:54:a3:fb:78:f2:d7:7a:5b:
38:00:05:d0:0e:88:5d:62:0c:c0:34:97:8e:9d:95:11:46:84:
3f:3c:b6:00:f6:db:ed:5a:4f:63:df:38:a0:dc:e1:6c:3e:17:
91:4e:2d:80:0d:f1:a0:d2:fc:73:52:83:35:e2:14:53:23:f0:
39:68:7f:bf:09:59:12:97:36:88:42:c6:d8:ce:cd:a4:cc:4f:
6f:82:09:c0:50:51:b3:ea:8b:7a:c5:ee:b1:e4:5b:ed:e9:7f:
af:8b:0b:44:8a:e9:5b:84:17:5f:d1:52:6b:d1:e2:ee:6c:ec:
21:f7:d6:5d:7a:d1:c0:dd:40:0f:b0:4a:2e:2d:cd:e6:67:ab:
a7:20:1b:5f:40:35:32:15:3f:cf:ab:11:d4:56:fd:f4:16:6c:
c5:6b:6f:79:96:a8:e1:7c:44:44:ac:fc:67:eb:e9:82:bb:cc:
f9:92:f2:d5:89:74:90:74:7d:7b:45:e4:69:ac:08:16:4e:e8:
8c:e5:dd:ec:41:a1:84:5f:23:0e:0b:32:38:f0:58:ab:20:e9:
7d:5d:95:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:10 2026 by rpki-client