Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: +yUq24TVZMAMT8xfBRejivL6nB+QzNl1WI4dGcRPyfI=
Subject key identifier: E0:D3:F9:F2:38:D7:55:B7:F3:F0:66:D3:DE:9F:0B:14:89:04:8C:55
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019F9323F955968232A29F4A39B7466091FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 08:00:36 +0000
Manifest this update: Fri 24 Jul 2026 08:00:36 +0000
Manifest next update: Sat 25 Jul 2026 08:00:36 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: 3KbH0NYC3m64gXJsMLuZiL6x3obo0QTw6f5M9fcOyAs=)
2: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (hash: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f9:55:96:82:32:a2:9f:4a:39:b7:46:60:91:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Jul 24 08:00:36 2026 GMT
Not After : Jul 25 08:00:36 2026 GMT
Subject: CN=e0d3f9f238d755b7f3f066d3de9f0b1489048c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:74:b1:15:44:20:b8:a8:97:7e:8b:5b:59:
05:6f:6c:81:2f:bc:80:4d:66:31:78:7d:47:9b:1d:
71:5a:8a:53:c3:06:eb:b4:0a:64:f8:3e:df:2c:f8:
57:f0:a0:8f:2c:43:ea:81:6d:aa:12:76:b2:b6:29:
20:2e:73:53:0c:bf:55:57:fd:de:f7:26:66:51:30:
a4:81:9d:74:73:74:5e:f5:73:74:54:22:36:ec:66:
dd:08:24:dd:f6:c4:48:e6:9d:9c:38:1d:15:89:08:
12:fb:c1:01:7a:ab:bc:d1:75:a1:c9:08:a8:d8:16:
b4:29:be:0f:00:bd:6a:eb:21:8a:5c:1d:df:84:ea:
b7:63:06:cd:87:0b:8d:a4:57:59:93:36:23:3a:7f:
db:66:90:31:e2:be:a0:d3:9c:44:2e:be:bc:73:dc:
82:d8:e8:cb:ba:e8:55:d5:db:55:42:88:0e:cc:fa:
88:60:01:8b:f1:09:eb:1b:b4:b0:59:20:7c:89:7c:
d3:68:a3:af:ff:2d:42:88:96:c6:89:47:27:c6:6a:
d8:b8:ef:5f:e8:ba:c8:e3:d0:30:ce:a9:47:ad:63:
2b:3b:aa:07:2a:f4:90:13:1b:c4:95:67:28:8d:f1:
c4:76:a9:fe:6b:f5:83:a3:35:c0:9e:89:4b:5e:2e:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:F9:F2:38:D7:55:B7:F3:F0:66:D3:DE:9F:0B:14:89:04:8C:55
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2d:4c:f6:aa:11:00:68:e8:9c:26:dd:62:e3:0e:98:07:01:
1d:c1:a7:f3:c4:18:73:3b:80:b4:4c:bc:1b:1b:c9:bf:49:20:
d6:d2:91:4c:47:cf:55:a4:de:d9:2f:54:77:ba:cb:91:8c:fc:
3e:96:d4:94:d4:cb:41:a2:01:ef:0d:66:b6:4e:4f:e2:4d:33:
20:3c:65:af:9b:f3:a2:32:7b:c5:c1:e9:4a:6c:2a:91:7c:cb:
79:6a:fc:03:77:e9:05:a9:5e:b0:0f:64:b1:d0:dd:03:52:ad:
97:84:35:2b:41:a1:c2:88:f9:99:08:8e:18:c9:25:fe:a0:45:
b3:4a:df:81:b5:62:69:7d:28:07:68:9d:25:35:78:64:89:40:
07:71:2a:2f:a5:f4:7b:64:b2:bd:ad:1e:31:5c:57:b6:b8:9b:
40:4c:e6:49:a4:e7:d7:66:ff:25:e8:00:91:3a:50:17:88:c5:
fc:bc:a3:93:55:60:bd:82:80:92:8d:2e:03:7d:16:dc:c6:17:
06:b4:4f:90:9e:0d:88:03:7a:19:3d:99:27:c4:97:2c:91:c5:
d3:01:f5:f2:74:78:46:9a:7a:43:2d:eb:d8:2c:87:5b:b3:d8:
20:c6:03:55:cb:7e:11:29:ff:6a:ac:51:50:c3:22:ca:7d:4d:
ec:0a:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:09 2026 by rpki-client