Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: 75XkdGmupHpS8quqe1hh4YIMoCSmaYAxNHIWN03Oe/U=
Subject key identifier: 0F:3E:DA:85:1E:19:79:EA:A9:7D:99:75:8F:38:A1:7D:57:46:F6:08
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019E50A255F42A345EDE2A66FCA14A99CFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1923
Signing time: Fri 22 May 2026 17:01:16 +0000
Manifest this update: Fri 22 May 2026 17:01:16 +0000
Manifest next update: Sat 23 May 2026 17:01:16 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: tT6Zjw63fRT8aC1+4H6VqJKM2XkkYx2xnWJv4pEBIlM=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:a2:55:f4:2a:34:5e:de:2a:66:fc:a1:4a:99:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: May 22 17:01:16 2026 GMT
Not After : May 23 17:01:16 2026 GMT
Subject: CN=0f3eda851e1979eaa97d99758f38a17d5746f608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:d5:a8:b0:7e:75:a5:3f:7b:1e:5a:5e:79:
21:06:83:fa:0a:e1:9d:32:ca:5a:16:01:e8:0a:3f:
a8:19:23:ca:b2:98:c2:74:db:22:d0:3f:da:fd:1c:
74:9e:2b:6e:4c:79:af:57:19:01:73:28:e8:fa:f8:
89:f9:f4:c7:d9:3f:e1:3a:88:0e:6b:32:a3:05:95:
76:f9:63:ec:03:92:9c:70:fb:c3:97:f3:c1:a6:df:
ae:44:b9:3f:2c:03:48:e6:64:97:53:25:bb:3a:cb:
cc:60:ff:b7:6c:14:cf:10:56:15:e0:7c:6e:39:90:
bb:26:42:1f:10:29:67:fc:8d:10:de:53:3f:36:87:
31:5f:5d:e5:fd:bd:19:f7:46:e1:3e:6b:cf:fd:51:
9b:c9:8c:bc:3c:62:11:fe:5c:15:18:0b:a0:c6:9d:
25:07:4b:9a:69:6a:d9:62:b0:51:bf:72:13:9e:c1:
96:50:6f:92:54:68:6b:3c:58:9a:9f:b6:8b:f2:4e:
c6:9b:68:05:c0:6d:7a:36:ac:0b:95:b7:48:47:c8:
91:0e:f2:ce:7d:a1:34:fe:6c:06:7d:54:01:0f:fd:
68:c5:4a:cc:56:0d:bd:73:f4:04:b5:94:43:5f:a0:
d3:f1:9a:43:9f:29:cf:97:e4:1d:a8:8e:3e:62:e4:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:DA:85:1E:19:79:EA:A9:7D:99:75:8F:38:A1:7D:57:46:F6:08
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:71:d9:34:a0:f5:bc:a3:a1:d0:82:f7:8b:9f:8b:2a:38:41:
5c:53:74:d8:5b:a6:06:a4:b2:be:72:a3:f7:f0:7f:da:95:b2:
60:ee:2a:04:73:e5:9a:5e:b4:b4:21:73:9f:a6:28:ad:1b:81:
91:af:de:32:20:cd:c2:b4:f8:1e:fb:64:81:ae:76:ee:96:20:
9c:5e:fe:bc:1d:0d:61:9f:10:11:be:60:67:98:9a:55:28:ca:
ab:f4:a3:72:81:cf:41:e1:75:9b:07:b5:85:b9:cf:10:e8:e4:
32:cc:3d:df:6a:e1:dc:37:9a:f3:02:2e:be:0d:d0:d7:07:8d:
c5:7c:bb:8b:8c:e2:1f:6c:ae:e4:cd:35:12:f0:9d:26:47:e3:
7e:0b:20:74:b7:67:bf:e9:91:a7:f8:9c:4d:91:35:f1:e5:1f:
67:4c:93:71:50:53:79:07:a0:c5:cc:01:40:48:e4:41:73:2d:
5b:e2:d7:e0:19:17:e4:56:48:e3:17:ab:da:e1:79:31:24:57:
a9:ec:1a:ea:1f:af:23:6b:79:99:c2:f3:44:e1:8c:04:e0:4a:
32:17:64:66:46:b8:29:c8:c7:70:c6:ee:76:8f:75:77:21:b1:
a2:a8:a9:79:bd:b2:7f:db:7c:ba:74:36:aa:3c:ae:26:b7:78:
58:34:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:23 2026 by rpki-client