Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: mFKYAjjvJshIpIwcI/FPmdt+09Y1Fhwzl71Yrkz2KpM=
Subject key identifier: 54:79:49:E0:7C:A6:B8:07:01:0E:13:4A:F2:AE:63:CA:4A:19:E7:41
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 01A025E9C7EA752063065BCAAE9A0FDB3746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1A16
Signing time: Fri 21 Aug 2026 20:01:12 +0000
Manifest this update: Fri 21 Aug 2026 20:01:12 +0000
Manifest next update: Sat 22 Aug 2026 20:01:12 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: PkHbO+bW81+U3gOAD9t/iJpncyhWbk2QHE2LvEev+0E=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:e9:c7:ea:75:20:63:06:5b:ca:ae:9a:0f:db:37:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Aug 21 20:01:12 2026 GMT
Not After : Aug 22 20:01:12 2026 GMT
Subject: CN=547949e07ca6b807010e134af2ae63ca4a19e741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:8d:77:41:6f:96:a2:91:4d:b9:26:54:3a:
f9:7c:98:2c:08:11:c6:8f:52:fb:0a:85:ee:d6:32:
ad:a2:37:c9:ad:bb:03:55:44:c3:f4:d4:eb:bf:69:
ae:e3:f5:25:32:61:8e:1b:93:58:9d:4b:9c:87:d5:
41:08:92:b6:f9:ae:30:53:c0:a3:c0:b6:b9:cf:b6:
d2:ea:8e:df:f6:8e:b1:60:c6:e3:33:fc:47:19:93:
57:0b:c6:4b:5a:ca:34:44:27:e3:99:7b:b2:ae:72:
8a:1c:ae:1f:29:c2:e4:14:f9:6f:83:38:b6:b0:60:
9b:36:58:f5:c5:81:e6:1a:7e:22:f2:3d:e8:1c:ef:
77:10:81:2d:23:43:2b:28:bd:ec:d3:0c:d3:fc:d1:
fb:30:ad:6c:4c:cc:27:cb:2d:3b:b1:25:6b:1e:1e:
26:07:04:26:2a:69:9f:8d:98:52:42:94:10:d3:95:
af:8e:9a:0e:71:c8:a5:cf:f8:75:a8:da:4d:c7:e0:
08:07:6b:03:58:c7:69:8a:43:7d:7a:9b:c1:56:25:
ec:8b:4e:8f:65:e8:02:de:f3:d5:b9:76:89:a4:42:
65:94:60:89:d6:cf:00:ab:fc:30:77:55:a8:dd:c2:
7c:61:59:ff:f4:be:3d:c5:fd:8a:50:20:c6:bb:24:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:49:E0:7C:A6:B8:07:01:0E:13:4A:F2:AE:63:CA:4A:19:E7:41
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b7:7d:cf:1f:1b:d4:9e:25:a4:af:69:2d:13:1e:9c:b4:f5:
7a:32:32:1a:6e:a8:76:f6:05:b7:ca:26:41:a7:47:51:fd:d7:
4d:63:1e:66:2f:a1:e0:52:e0:45:1c:2f:70:8d:2e:55:40:d7:
f3:b1:96:2e:62:a9:96:6f:c3:b8:88:81:01:2f:26:a6:c7:fd:
8f:a6:85:40:93:6e:1d:a7:f3:78:27:be:47:04:4f:a9:c2:e5:
3f:6e:1d:f5:c1:be:67:03:b8:94:d4:f0:a1:5f:f9:77:19:cb:
cd:ed:1e:60:bf:a9:24:68:7c:ea:d8:6b:54:d6:65:cd:d1:79:
5c:ac:28:d0:5d:1a:ed:e4:07:11:65:fa:b1:b8:d8:ff:b8:89:
14:31:76:5a:51:f4:2a:64:86:bf:78:75:16:5c:73:9c:b0:fb:
88:2b:8a:1b:05:1b:93:98:2a:9e:d5:d1:8c:87:d3:bc:b3:a1:
cf:6e:ae:a6:8c:56:ce:ff:18:ba:a4:41:d8:48:5c:31:0b:f2:
f1:d6:8e:95:43:f2:fb:6f:ac:58:26:43:59:9d:0a:20:1d:bf:
fa:c0:8d:57:3e:e3:2d:80:fd:23:0c:11:0c:c9:ad:ae:e1:ad:
53:ac:96:b4:ce:13:68:53:df:59:0b:99:ea:dd:52:61:bb:24:
44:4c:7f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAl6cfqdSBjBlvKrpoP2zdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5
NGU2OTEwHhcNMjYwODIxMjAwMTEyWhcNMjYwODIyMjAwMTEyWjAzMTEwLwYDVQQD
Eyg1NDc5NDllMDdjYTZiODA3MDEwZTEzNGFmMmFlNjNjYTRhMTllNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseONd0FvlqKRTbkmVDr5fJgsCBHG
j1L7CoXu1jKtojfJrbsDVUTD9NTrv2mu4/UlMmGOG5NYnUuch9VBCJK2+a4wU8Cj
wLa5z7bS6o7f9o6xYMbjM/xHGZNXC8ZLWso0RCfjmXuyrnKKHK4fKcLkFPlvgzi2
sGCbNlj1xYHmGn4i8j3oHO93EIEtI0MrKL3s0wzT/NH7MK1sTMwnyy07sSVrHh4m
BwQmKmmfjZhSQpQQ05WvjpoOccilz/h1qNpNx+AIB2sDWMdpikN9epvBViXsi06P
ZegC3vPVuXaJpEJllGCJ1s8Aq/wwd1Wo3cJ8YVn/9L49xf2KUCDGuySxkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR5SeB8prgHAQ4TSvKuY8pKGedBMB8GA1UdIwQY
MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt
M2RiNmYwNTcwZDQ4LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4
LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrd9zx8b
1J4lpK9pLRMenLT1ejIyGm6odvYFt8omQadHUf3XTWMeZi+h4FLgRRwvcI0uVUDX
87GWLmKplm/DuIiBAS8mpsf9j6aFQJNuHafzeCe+RwRPqcLlP24d9cG+ZwO4lNTw
oV/5dxnLze0eYL+pJGh86thrVNZlzdF5XKwo0F0a7eQHEWX6sbjY/7iJFDF2WlH0
KmSGv3h1FlxznLD7iCuKGwUbk5gqntXRjIfTvLOhz26upoxWzv8YuqRB2EhcMQvy
8daOlUPy+2+sWCZDWZ0KIB2/+sCNVz7jLYD9IwwRDMmtruGtU6yWtM4TaFPfWQuZ
6t1SYbskREx/9g==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:39 2026 by rpki-client