Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: 3KRynYoYVexkGqDZ8uuCgbi8jgowAfcMGjDgZtBlFtQ=
Subject key identifier: 57:AF:3B:0E:63:91:61:F0:EA:9A:ED:68:D5:1C:32:D7:17:B5:CA:32
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019CABA1FD4993B478F8D74EB4B73C34643C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: InxFiEBEIcPJIDWkuS4GM9W283RzyRnnJ3xdtB3B+HI=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fd:49:93:b4:78:f8:d7:4e:b4:b7:3c:34:64:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=57af3b0e639161f0ea9aed68d51c32d717b5ca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:73:43:a4:4a:05:28:06:47:24:52:90:e1:
d4:ff:71:98:38:a8:0f:60:1a:66:e7:22:12:bb:a7:
b0:ed:63:a2:10:7d:a5:4c:36:c6:80:46:77:29:5d:
17:db:b6:95:3e:2a:00:a8:87:87:f8:4c:72:3a:80:
d2:8e:59:bd:bf:66:a2:69:95:09:3d:bd:b4:c2:8f:
d7:d4:c5:91:f2:a8:92:16:09:a0:ac:42:03:7d:19:
e5:cc:39:7a:7a:4b:a7:19:5d:d3:ee:58:17:f9:da:
c1:50:c9:c6:04:4a:11:79:c4:29:36:33:b1:c8:ee:
76:e4:27:7c:0e:ee:9b:23:32:7e:22:ef:81:24:8a:
c1:be:ea:e6:8c:45:7b:9e:b3:67:76:fa:62:cf:f2:
6b:29:e5:19:bc:8f:2f:5e:a6:95:22:98:15:a5:4d:
ad:82:6d:7b:be:e1:3d:be:88:e6:0d:ca:5f:2f:55:
b3:33:f4:d2:0d:0e:df:d5:89:5c:09:e1:72:5f:62:
b2:c0:dd:ce:b5:3b:16:3f:c2:22:b6:7a:aa:58:50:
74:f1:10:c8:89:a0:2b:40:42:2d:b3:c8:6b:53:fd:
dd:e4:b1:e5:38:da:2d:92:5a:e1:32:62:8d:91:87:
f7:63:7b:dd:41:94:bc:15:a3:de:ff:cd:0f:7f:d1:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:3B:0E:63:91:61:F0:EA:9A:ED:68:D5:1C:32:D7:17:B5:CA:32
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2e:10:3a:ee:24:f6:6c:13:4f:a4:ba:b2:9b:a8:66:18:44:
20:de:c3:d8:05:d7:74:32:a7:07:d2:73:11:54:1d:5f:fc:5f:
6d:0b:e7:53:fc:49:11:7f:1e:27:55:b6:e2:8d:ea:d9:40:f4:
c0:d5:fa:3e:9c:af:30:b6:f7:fd:52:20:3e:b8:8a:de:87:0f:
29:9a:0e:2a:12:22:3a:af:f1:56:f9:a9:d4:0e:c3:26:0e:db:
cc:84:36:05:c5:63:25:b1:0f:ed:cc:9a:4d:94:13:93:2e:25:
4e:5f:d9:47:a6:6a:29:d1:6f:c1:3f:c9:99:0c:26:6a:aa:51:
6b:84:c6:60:31:60:80:7e:fd:01:71:ee:60:ec:59:63:40:81:
d8:04:ab:46:9e:d6:4e:52:61:db:9a:e6:5c:82:ed:9f:e7:ec:
99:ca:6a:c3:ff:9d:b3:5d:e9:55:66:de:8e:18:93:ae:60:90:
3f:f1:6a:e0:93:38:b5:19:b1:a7:61:d1:77:f2:a3:d8:6c:09:
6f:2e:f7:a1:a6:b3:6f:55:d5:9b:0f:79:b3:0d:4b:11:01:3e:
34:38:d8:81:ad:b7:fc:0e:91:b4:85:65:4e:ca:f7:01:ba:9f:
59:9a:85:60:14:a0:08:37:cc:fd:73:cc:fc:9f:d3:a9:6e:28:
03:ef:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:27 2026 by rpki-client