Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: QZSf6ZJRF6f6D15AiNdcR3lO2HQTivrBqaRaIlAuatc=
Subject key identifier: 19:C2:19:93:51:0A:8D:10:7B:02:50:AC:02:BA:C0:23:8D:29:FD:03
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 01A0E8F6C7EC62A67B3951309633AC01A3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 17:01:22 +0000
Manifest this update: Mon 28 Sep 2026 17:01:22 +0000
Manifest next update: Tue 29 Sep 2026 17:01:22 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: j3Pw9JeL5ABO/y28SSl/BKIfUJUUM2nPXxuDNBhX/U8=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:c7:ec:62:a6:7b:39:51:30:96:33:ac:01:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Sep 28 17:01:22 2026 GMT
Not After : Sep 29 17:01:22 2026 GMT
Subject: CN=19c21993510a8d107b0250ac02bac0238d29fd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cb:1e:7f:02:2a:e8:e1:91:7f:7c:e9:ba:63:
db:f2:ed:fe:ae:b2:b1:ec:5a:fa:eb:00:ee:cb:60:
bf:46:d0:87:e1:f0:cb:5f:78:01:a8:2e:27:81:bd:
c9:b7:5e:45:c4:27:01:65:78:82:bc:01:9c:57:da:
90:e7:20:b6:a6:16:5d:56:8a:96:ef:db:f2:e1:f0:
7c:84:de:91:8b:a2:ed:0d:5d:a1:5d:f6:63:ad:16:
b1:6c:50:d6:ba:9c:47:7a:85:73:ee:25:48:fa:66:
94:6a:f6:77:b7:fd:d6:c4:12:59:b3:1b:c8:f9:ee:
7e:99:a0:3e:ad:6c:71:74:8c:d3:97:87:44:b1:39:
58:c7:54:fc:51:50:d0:dd:e7:88:10:2f:f3:14:a0:
b9:48:93:83:47:ce:00:64:92:16:22:06:17:35:e9:
b2:6a:e6:5c:c1:73:ef:f2:c0:e3:12:a5:66:a6:ad:
ab:24:5b:bd:ec:f0:00:68:64:e7:1f:69:07:c0:50:
68:b8:f8:d7:d3:03:e1:51:ec:70:72:60:b2:eb:7d:
e3:33:94:ed:71:f1:22:4a:02:da:d0:30:11:cb:14:
79:04:4c:0e:92:09:7b:61:4f:cf:a0:b1:04:ee:8c:
7a:b4:5f:2d:8e:d7:5d:53:36:96:39:29:28:4e:71:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C2:19:93:51:0A:8D:10:7B:02:50:AC:02:BA:C0:23:8D:29:FD:03
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e4:84:ef:25:73:fa:f0:9d:cf:ba:6a:8f:3e:e3:99:21:6d:
a5:7e:56:17:f3:72:fa:a8:d5:88:30:cf:75:84:ef:a2:80:d8:
b2:64:fc:59:19:e2:85:84:b9:d9:aa:03:85:09:79:1a:ba:b8:
1b:49:c5:8a:f1:46:85:93:4f:fd:cc:db:9d:df:bd:6b:43:06:
67:01:b7:11:0e:35:8d:51:94:cf:5c:6f:1e:76:52:44:09:27:
02:61:98:9e:da:0b:57:5e:73:31:66:90:31:d2:a8:2a:04:6c:
2f:a2:0e:74:9e:55:ba:c9:16:fe:6a:58:3a:be:b9:26:53:25:
f2:2f:09:c2:27:c7:03:89:9b:d5:7a:9e:a7:24:ad:20:41:d4:
37:d2:00:bc:d5:40:d3:ec:20:7f:57:20:90:14:89:9c:52:b2:
c2:0c:52:4d:98:2d:0c:90:2f:b4:37:90:ca:b4:e8:97:b8:4f:
4f:f0:41:8e:fd:20:c6:50:40:e0:82:0e:2a:e1:8d:46:73:f9:
2b:4b:42:44:1c:39:5d:e2:83:22:9e:c8:26:e7:83:e8:28:d5:
97:3c:38:41:65:28:5c:bb:10:6f:a5:3a:5b:d3:0d:24:c6:9c:
0f:ef:83:c7:25:34:2d:6b:7e:88:b1:5b:41:cd:82:30:e5:92:
ff:b3:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:59:05 2026 by rpki-client