Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: o2mUgejQpyvXL0busC1dnkHjlDPjqvBDfKwL5Nva0Vc=
Subject key identifier: 74:FB:0F:C8:29:B0:6F:75:E3:F4:4C:4D:DB:C4:61:08:B9:EA:5F:99
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019E1E6C2F08BC42F50A39F48DEEA1EFE753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:01:06 +0000
Manifest this update: Tue 12 May 2026 23:01:06 +0000
Manifest next update: Wed 13 May 2026 23:01:06 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: WJnNIWJJOi6i89zOkwtoVC+PFhUoUQF7eHPiBLKRGJ8=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:2f:08:bc:42:f5:0a:39:f4:8d:ee:a1:ef:e7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: May 12 23:01:06 2026 GMT
Not After : May 13 23:01:06 2026 GMT
Subject: CN=74fb0fc829b06f75e3f44c4ddbc46108b9ea5f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:f0:8c:14:3c:2c:1a:2b:d7:6c:22:4c:51:
d9:b1:79:47:ed:a8:11:b2:4f:72:15:b2:4b:af:e7:
0c:59:13:8d:0b:11:f5:b6:44:e6:12:28:0e:77:54:
5b:ad:5f:de:ca:22:1d:ba:a4:7a:2d:c0:dd:95:1f:
ed:80:40:d7:6b:9d:df:2c:1c:3e:8f:c2:02:f7:4d:
02:31:40:6d:d8:f9:2b:0b:57:7d:57:df:43:4c:77:
a2:10:cb:04:0e:85:c8:74:1e:43:7b:09:88:ea:93:
83:60:ee:3c:0a:1d:42:d5:6f:97:81:bb:43:88:b8:
b0:21:4b:0e:d5:1c:af:fe:b8:cd:46:48:a9:79:70:
e0:4f:2c:e9:08:37:84:84:8a:0d:64:be:e7:39:c9:
3f:90:28:b0:6a:44:a4:5c:24:d9:60:43:2e:05:f7:
08:f8:79:55:2f:44:64:e2:9e:e8:a3:18:b8:10:9f:
55:8d:24:a2:1c:38:7e:65:95:ed:fd:2f:f2:38:d8:
5a:5a:09:91:5a:1a:6b:ce:ff:b4:2a:df:f4:b5:6a:
42:08:98:ec:14:30:f2:25:1f:17:7a:1b:cc:53:e1:
bc:2a:15:87:fa:c5:cf:35:e2:56:35:b7:9b:75:2f:
fb:09:70:79:01:7b:4b:c4:38:9b:b2:e3:13:1e:ad:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:0F:C8:29:B0:6F:75:E3:F4:4C:4D:DB:C4:61:08:B9:EA:5F:99
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:80:36:78:74:59:79:bb:6f:a3:b7:f2:c5:9b:9b:f1:19:
58:48:82:c5:94:51:35:29:c9:a2:b4:ce:0f:30:9e:2c:49:bc:
80:db:89:b6:09:0d:01:72:aa:a8:89:40:19:6e:8b:3f:ad:cd:
4e:04:16:89:af:c5:9d:34:47:f0:df:14:fd:ca:9b:fc:d4:01:
65:ef:4e:a6:dd:bb:72:f8:82:ee:a0:e6:8e:58:9a:9f:ad:d3:
fa:1a:a1:fc:1b:86:fd:62:98:fb:b3:4b:66:03:66:d5:c1:2e:
d5:19:72:54:00:3d:c0:0e:fc:75:12:c9:09:a5:e5:7a:04:ae:
c5:7e:2a:da:ff:87:36:dc:5e:20:e9:fb:04:a4:1e:97:60:16:
ff:f5:f0:db:3c:af:9f:f1:4a:6d:80:7e:ef:f2:c0:92:57:06:
06:74:7e:b3:52:43:bc:8e:60:fd:a2:7a:f5:a3:b8:29:ea:6f:
c9:d3:f4:d4:37:8a:2b:63:64:d8:ea:6d:0b:2b:c0:64:53:83:
e7:81:9e:f4:47:d8:7a:f4:38:02:9d:8d:65:80:34:9c:d4:75:
25:1c:10:e7:f3:1b:d1:54:d5:2c:b3:e5:f3:04:ae:d4:51:f7:
db:60:f8:89:fb:75:cb:30:fe:4a:67:86:60:0a:7a:14:af:03:
b2:64:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:44 2026 by rpki-client