Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: L+kntxPUWfEQPDl1tL4aDk0zAMCUks8obvsmTmBDJQE=
Subject key identifier: 61:8D:6B:07:0E:64:4F:CA:88:80:43:36:11:EF:B0:9E:1C:4F:0E:38
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019D389BCF73370127114182B538C8F324B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: uengplHOJagr/NmMfqP6NsyvAJw4LN4AXkA0geTazUg=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cf:73:37:01:27:11:41:82:b5:38:c8:f3:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=618d6b070e644fca8880433611efb09e1c4f0e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:f2:81:94:d4:46:1a:3d:e6:f0:77:d6:a4:
a8:bd:14:70:bf:ee:12:d3:9a:1e:66:7b:e6:8f:8a:
f3:4b:40:b3:8a:45:ac:d3:9a:d0:7a:a2:3d:57:9f:
f7:18:68:57:f0:90:a0:91:28:3e:55:50:2f:d3:93:
f7:95:1d:17:eb:e1:ab:19:ae:de:dc:5b:81:c0:b5:
cf:6f:5d:b7:8b:d0:b9:3e:8f:ae:db:aa:4a:7a:0f:
b7:e3:dd:1e:b3:a0:4e:37:c3:34:bf:e1:66:b2:22:
df:4a:b8:cf:69:07:fd:0b:24:f6:25:9a:9b:97:b3:
68:ac:61:0a:2b:f1:15:6d:b8:71:5e:38:86:36:70:
4e:a8:bd:6a:e3:95:48:1c:9b:fd:82:78:33:00:51:
25:7b:93:3c:08:64:a7:11:16:70:0e:c4:0c:fb:a4:
4e:35:dc:17:f1:30:80:c0:bd:de:f0:ba:53:ce:c0:
e8:97:94:53:bd:48:f2:24:37:82:ee:b6:8e:60:99:
e1:d6:3d:15:91:47:bd:84:a5:5a:34:a9:8d:e1:59:
1c:2e:be:ca:6d:89:85:3c:03:d4:50:54:db:a6:c5:
d7:e5:02:a1:32:97:76:83:70:c7:41:53:77:64:72:
e9:dd:4e:e9:05:53:bf:78:57:9e:8a:51:3c:ba:22:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8D:6B:07:0E:64:4F:CA:88:80:43:36:11:EF:B0:9E:1C:4F:0E:38
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1e:09:70:b2:24:e8:4a:51:cc:78:86:fd:8e:cc:be:63:e0:
85:aa:5a:fd:6d:71:3b:e0:2c:72:84:68:6f:d4:b5:a8:e6:50:
8c:d3:b5:d1:15:8b:50:fe:41:b0:14:c0:be:7e:fa:10:ef:39:
84:65:02:53:fe:b0:3a:17:80:a0:71:41:a3:c6:cc:90:23:a3:
59:fa:5e:af:a2:9a:04:07:e5:09:fa:06:94:24:ef:2a:0f:34:
87:0f:60:b5:eb:47:3a:61:53:df:2e:6a:63:15:14:ac:d2:3a:
fd:8f:4e:37:f9:68:f6:db:93:0d:76:f5:1d:ec:81:0e:71:76:
00:e7:4e:22:c5:66:e3:75:b0:18:c8:7b:2c:46:2c:c9:75:8a:
f9:8f:3b:7b:76:9a:9a:eb:cd:f4:a6:5c:be:5a:be:6b:66:f0:
ba:98:02:72:d5:d8:49:4a:86:4e:fb:cd:21:df:9b:23:3b:1f:
19:fe:e8:89:e9:3e:f3:0d:e1:b7:ce:0f:d8:2d:6c:dc:e5:5c:
5f:9f:ec:42:1a:67:0a:94:4f:64:70:18:cd:d4:14:42:71:8f:
81:65:39:12:a6:66:3d:2b:6b:e0:ef:3e:51:2c:b7:bd:ac:3c:
93:5d:aa:19:6b:99:d6:27:eb:84:0f:08:4d:c4:e0:3e:c4:88:
0b:29:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:36 2026 by rpki-client