Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: tM95fY57avqPBbXvZPObrjybV40oLaRF/kzEfcBfEcc=
Subject key identifier: B1:3B:7B:3D:13:58:C3:90:6E:C6:AE:74:44:7C:E0:E2:15:B6:94:CF
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019D973D45B41ABA4424D0EE92B7B423EC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 17:01:08 +0000
Manifest this update: Thu 16 Apr 2026 17:01:08 +0000
Manifest next update: Fri 17 Apr 2026 17:01:08 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: tGQKx9U8gDsDG5++y0IUZdU+wFZwGrjF3JcRcZOwRwM=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3d:45:b4:1a:ba:44:24:d0:ee:92:b7:b4:23:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Apr 16 17:01:08 2026 GMT
Not After : Apr 17 17:01:08 2026 GMT
Subject: CN=b13b7b3d1358c3906ec6ae74447ce0e215b694cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:2f:06:e9:0b:71:6d:dc:f3:76:c4:bd:91:
02:e9:92:5c:2b:52:4f:b1:3a:c4:fe:0b:63:8f:c1:
1c:41:c1:76:67:1f:da:d5:b9:5f:cb:16:96:4f:15:
a4:9f:0a:39:e1:f2:fd:97:4e:a0:71:2d:7e:4f:0f:
5d:c9:b1:06:07:8a:da:bd:03:e7:b9:3b:58:93:0a:
82:b0:bc:e4:46:49:d8:50:8a:bf:03:c5:f8:d3:5e:
53:42:10:ca:bc:2e:a3:72:61:bc:ed:9c:81:35:9a:
23:fa:59:52:c3:62:d6:d4:7a:3e:c1:c3:8b:20:0c:
68:53:da:9f:f5:38:79:ec:89:0a:5f:b7:0d:25:88:
7f:89:74:a9:29:05:f9:59:97:2c:88:95:32:22:25:
f6:fd:7a:44:c1:81:7c:7c:84:5b:ba:2d:cb:11:c7:
83:7f:5a:ae:3b:ab:6c:34:4e:20:79:e0:a9:43:e9:
2e:c9:3e:3a:08:7e:a1:fc:08:87:e8:64:a5:06:46:
49:ef:0c:f1:ea:1b:bd:71:b1:17:9f:e0:36:d8:c9:
f0:30:bf:9b:3c:e5:39:04:5a:0a:b1:47:32:fc:c9:
01:ca:85:ed:62:21:39:2c:69:e6:63:69:fc:dd:b8:
0e:7b:67:36:e0:b2:76:f9:fe:42:21:10:3a:28:9f:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:7B:3D:13:58:C3:90:6E:C6:AE:74:44:7C:E0:E2:15:B6:94:CF
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:b1:91:83:e3:31:5d:b6:a2:ee:77:94:4c:80:ac:ab:9e:5b:
aa:a2:db:4d:3f:e8:4b:aa:45:71:5b:f1:96:66:c8:0f:63:1b:
21:db:cc:5f:41:be:e5:0d:aa:e9:4b:d3:fe:93:ad:a7:8b:93:
34:05:69:d4:a4:57:c0:2e:3a:0f:77:28:f7:49:04:ab:7f:bf:
0d:ac:48:2a:50:67:b7:2f:bc:69:c0:e7:37:c8:e1:ae:ca:25:
01:d7:1d:1d:e5:1f:7b:52:a6:22:3f:64:d7:4c:d4:26:43:4e:
58:74:66:30:35:d3:5a:fa:43:e4:c1:1d:68:6a:4c:7f:f0:04:
99:94:4a:bb:7a:8f:82:df:64:e2:da:b8:d2:da:d8:e4:4a:1b:
8a:51:e3:58:23:20:4f:22:70:c6:96:f8:f4:c2:71:79:61:4f:
11:bb:7c:b2:28:e7:7f:42:3a:9e:5c:35:cb:9e:1f:4f:af:47:
f8:28:27:19:38:43:2a:6b:7e:a9:65:04:38:52:a7:a9:01:7e:
0b:e2:a4:cc:3f:d1:e1:73:92:99:12:34:4f:5d:07:f1:e5:d4:
d1:61:52:a7:a6:d2:06:ee:8c:18:6c:f1:7d:b7:70:c8:89:17:
90:87:a5:cb:6a:56:1d:83:bd:45:c8:58:8b:67:c9:91:e9:4c:
0a:24:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:11:26 2026 by rpki-client