Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: +eoUMBhspjonCZ87MsWIOtEM0abwFUg0e0OxQpUIjYw=
Subject key identifier: 42:93:27:D9:65:29:36:4B:D5:4C:64:23:02:26:43:85:0C:7B:6E:27
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019EC0A3BE373F93D3A8CD10E6E2CF2AF543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 11:00:16 +0000
Manifest this update: Sat 13 Jun 2026 11:00:16 +0000
Manifest next update: Sun 14 Jun 2026 11:00:16 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: i8ISXEPwwfqS9ljBLEufplaRTlJZmk1ij+gV1rfdJZM=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:be:37:3f:93:d3:a8:cd:10:e6:e2:cf:2a:f5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Jun 13 11:00:16 2026 GMT
Not After : Jun 14 11:00:16 2026 GMT
Subject: CN=429327d96529364bd54c6423022643850c7b6e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:2d:9f:2d:33:d4:03:81:37:f6:09:01:43:
02:cc:61:5e:dd:d4:c2:bd:cf:23:4e:7d:82:f6:0f:
9e:ee:6c:17:70:40:12:9c:1c:8a:35:7f:4c:4d:42:
06:d7:97:52:00:66:ed:4c:56:07:61:73:cd:89:a4:
f6:f4:9a:1d:83:2e:11:02:59:e9:95:ea:8d:ca:fb:
e2:cf:cc:9c:c1:06:5c:34:93:a8:86:01:65:52:d5:
59:71:da:4e:8b:43:3f:f2:3b:d2:58:7d:10:01:15:
84:4f:1f:4b:83:ca:93:d2:af:10:1a:3f:b4:02:e5:
a7:ec:4a:f7:0e:ea:77:1c:d0:81:b6:42:b5:0c:ff:
50:84:ac:30:60:28:f6:10:3c:b2:aa:fe:eb:ca:4e:
91:ab:f0:4c:19:07:5a:42:0b:d0:6d:ba:9a:78:02:
a3:8b:ec:11:9f:e7:dd:bc:43:25:87:c8:bd:c1:14:
16:ad:1a:47:01:75:f4:25:81:7c:bf:a8:7c:38:68:
db:5e:63:81:85:d4:66:13:c5:c4:64:0f:72:ed:f5:
3f:6d:88:63:9f:4e:01:09:91:aa:4d:57:e4:9f:25:
49:b9:3a:32:7a:75:9e:e7:c5:47:ac:7c:c7:7c:25:
8b:d2:76:ab:8b:d5:bb:16:25:62:eb:fd:78:47:90:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:27:D9:65:29:36:4B:D5:4C:64:23:02:26:43:85:0C:7B:6E:27
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:4b:48:1b:7d:42:46:e0:e5:c8:ab:00:dd:a4:a1:0a:70:
de:3e:01:4c:29:0d:41:c7:95:ac:d5:ca:eb:d0:c9:fd:10:2e:
63:f1:e3:1e:79:39:57:23:59:bb:90:e9:10:02:3f:1f:4c:68:
68:9f:33:93:cd:07:f4:a1:c2:19:59:a9:40:44:f0:3d:28:a6:
26:3d:72:58:6c:79:c3:99:a2:8f:5e:80:9a:21:27:4b:7f:16:
8b:48:cc:13:83:af:3f:5b:5b:54:6f:0f:d2:16:c0:b3:2e:5d:
55:89:1a:1c:87:8d:82:bc:ce:0a:98:6f:a8:6d:6c:32:b4:2d:
08:27:57:cb:fd:31:87:80:14:a9:b9:7c:c0:52:16:99:1e:84:
71:20:d4:8e:5b:eb:4b:e4:33:9a:53:fd:aa:7e:66:fc:a2:60:
9f:4e:33:d3:e1:08:8f:24:09:c1:03:50:35:8f:98:cc:6d:8b:
6b:dd:14:cd:b0:96:1a:1f:ef:cc:33:d6:51:ce:45:1c:f9:7b:
3d:f3:d6:2b:8e:d9:cd:9a:26:e1:1b:31:47:14:19:ec:19:47:
6c:8c:9f:c5:38:82:18:69:cd:75:1c:5f:40:af:71:b5:9f:49:
d3:a7:05:57:76:a0:9c:89:00:65:3a:eb:fc:b2:31:95:08:00:
b9:47:d7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:38 2026 by rpki-client