Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: f/4FrZOnKx1oIppe078NlWyAR5CtxwXF5ofwgGpSL2A=
Subject key identifier: 60:BA:81:76:57:EB:AA:04:60:42:BC:9D:EF:59:20:E5:B7:32:0C:F9
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 01A0D984102148982A050C9E06179B5EFF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 17:01:45 +0000
Manifest this update: Fri 25 Sep 2026 17:01:45 +0000
Manifest next update: Sat 26 Sep 2026 17:01:45 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: PhEnQVpNVVr6Tcp/qjDVvxmxBvgQ7O++cRGK1b4w5sk=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:10:21:48:98:2a:05:0c:9e:06:17:9b:5e:ff:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Sep 25 17:01:45 2026 GMT
Not After : Sep 26 17:01:45 2026 GMT
Subject: CN=60ba817657ebaa046042bc9def5920e5b7320cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:e6:1d:74:ed:55:fd:9b:d0:f0:61:c1:65:
cb:3c:18:9d:35:a0:33:8d:72:c9:17:c4:7c:34:05:
fe:c9:22:86:4d:67:25:37:c2:cc:fc:28:30:cf:01:
31:99:0a:fd:f1:04:2a:23:78:86:4c:61:68:f5:8b:
50:f2:d1:bd:5a:3c:6f:c0:35:d0:bc:2f:ae:89:91:
a5:31:91:77:6d:38:3e:43:7a:39:a1:78:91:53:03:
f1:3a:c0:e0:f8:f8:f1:19:4c:10:2e:78:42:27:a9:
e2:15:47:dd:01:bc:db:25:83:83:da:06:a7:2e:29:
fe:a5:b7:c9:83:d9:91:d2:6e:79:e4:82:bc:30:78:
9f:68:54:9a:6d:f5:85:54:8b:3f:e2:d5:65:5f:51:
ce:9e:1f:c7:37:2e:5f:0b:29:4c:43:cc:c8:9c:fa:
ad:4e:80:6a:8c:57:6a:2b:61:bf:a3:d9:07:b1:c6:
bd:a4:b4:01:e0:af:48:30:c9:43:5f:12:74:a2:e7:
23:66:fd:e4:d4:35:42:23:a8:22:9b:cf:41:96:2e:
89:be:06:f0:eb:dc:71:83:e7:a8:82:d5:6c:c9:b3:
27:05:20:86:06:48:17:ed:c9:95:1e:fb:eb:fa:8c:
22:77:41:67:b8:4f:cc:9f:26:51:a9:3f:a9:24:30:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:81:76:57:EB:AA:04:60:42:BC:9D:EF:59:20:E5:B7:32:0C:F9
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:73:91:7e:cd:b8:20:de:67:90:63:3e:22:a1:e5:a7:60:b2:
90:9a:3b:70:c3:91:97:5d:a2:b6:3e:91:4a:e4:15:6b:e2:cc:
55:7a:34:cf:ce:7a:a3:12:5d:fb:a6:55:1a:f9:93:21:4f:ce:
b7:7b:2d:bd:02:1c:a8:91:04:97:bd:2d:64:41:e6:59:bf:0f:
53:8d:53:c6:41:a4:56:ec:71:f8:64:b1:1f:29:a5:e6:fb:37:
a0:3d:9b:fe:34:94:cf:c3:2e:cc:4b:53:76:4a:69:c2:9a:98:
69:43:05:68:4f:5b:3b:fe:47:56:8d:08:c5:91:24:18:d0:22:
01:53:36:22:4a:6d:3a:0e:fa:a2:ed:34:8c:50:81:ed:45:d7:
cf:09:ce:22:3e:5a:69:32:29:62:7a:6c:f7:36:7a:e8:13:40:
d3:28:63:0f:c2:aa:20:14:b7:19:a1:5c:2e:87:c6:a5:0d:9e:
fb:78:ec:fb:b8:d7:75:54:76:93:92:56:ba:d9:fc:de:32:ca:
f3:e0:8f:95:5b:93:3b:df:10:0d:e2:7c:ff:d5:af:df:cd:5a:
76:48:83:a6:f6:99:46:d1:67:dc:b9:59:ec:ea:ed:83:97:bd:
7e:66:b9:a2:23:11:0e:fe:e2:6e:d3:dc:2e:cf:49:6e:5e:a4:
d9:2b:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:36:44 2026 by rpki-client