Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: SIxuUuWubJv9vr4isUctd5wZ+hKqppihzmFI9JFkyao=
Subject key identifier: 5C:11:AC:F0:B3:A0:65:A9:4E:D7:97:F0:0B:FA:C0:C4:07:C3:2A:F4
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019D3865A7E0F0066EE35B5BCFF6BB753248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 12CF
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: ZckPTdIys/bwH01k37+HdQYBmCQiPbjegHJh5QHq4Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a7:e0:f0:06:6e:e3:5b:5b:cf:f6:bb:75:32:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=5c11acf0b3a065a94ed797f00bfac0c407c32af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:ab:c1:d7:95:78:9d:e2:a1:47:77:de:b7:
9f:4f:7a:ee:2c:1d:cb:1a:af:27:75:4d:0f:9c:35:
1d:52:d9:7f:54:71:22:99:97:da:6a:e4:84:50:11:
29:4e:06:60:b4:7f:b6:cd:c4:20:12:0e:20:8a:28:
17:1f:e4:17:09:e8:5a:ab:bd:2a:9d:ba:e9:e6:fd:
53:bf:46:2b:be:01:b1:c3:f3:1d:95:b5:9a:0b:6d:
53:07:96:ef:7d:b4:00:05:ec:c5:2f:19:54:9c:fb:
bf:98:4c:df:af:88:b0:6f:2c:0e:85:c4:ca:42:94:
98:15:8d:5e:b3:07:5f:53:b5:b0:2c:ff:5a:21:9e:
96:84:ec:86:d6:98:df:4a:bd:ce:26:9b:1f:73:64:
4a:d5:4d:b4:0f:80:a3:e8:d3:11:d7:ab:60:91:8a:
ed:fa:d9:55:45:f0:04:aa:af:04:00:15:dc:2d:d4:
21:0f:2e:5d:75:74:d1:e2:c1:5e:2b:3c:dd:ee:26:
cf:2c:73:36:10:e4:8a:27:cc:aa:e8:bc:ff:8f:80:
46:a6:c5:ac:9f:2c:7b:b5:b8:ef:95:b2:34:4e:27:
77:7a:78:e8:48:f7:66:76:c6:ac:4e:f2:a3:1a:f4:
98:6a:f1:69:42:63:c5:de:25:35:c3:7e:1b:a2:6c:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:11:AC:F0:B3:A0:65:A9:4E:D7:97:F0:0B:FA:C0:C4:07:C3:2A:F4
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:15:4c:e1:32:b2:1f:69:6c:21:5c:56:14:ea:4b:46:5e:d6:
86:e2:e5:d0:cd:35:f4:86:2e:d0:40:92:52:9b:a6:ee:4d:27:
5e:c7:92:5d:e0:8a:e3:b7:27:bf:2e:b0:00:39:38:66:8b:59:
4d:4e:cc:88:b4:46:c9:8b:c8:69:69:c5:82:7a:62:a1:6d:d8:
af:4a:94:8f:d7:66:66:48:01:a6:9a:1d:16:75:85:03:c6:09:
ef:20:5e:b3:5a:ad:c0:8a:d4:4d:30:3d:1c:4c:63:1b:f4:33:
bc:1d:d7:36:ca:cb:e6:df:f7:39:47:28:90:a7:99:ff:41:df:
18:a3:20:c1:27:e9:84:21:35:38:dd:b5:24:f8:38:7e:6f:b7:
12:e5:cf:a2:9e:c0:d2:22:70:44:58:d8:c9:9f:26:27:b1:1c:
0b:d0:23:ab:a4:3a:bb:1f:9d:4a:8c:61:5e:ce:24:d4:f2:5d:
26:61:0f:9a:74:b6:50:26:7c:d3:2e:57:29:5a:ca:a0:94:4e:
5f:b7:89:2f:d8:cf:07:5d:29:f6:4c:35:c0:84:cd:9d:95:23:
1f:38:be:7f:dd:3a:d8:7c:db:3f:bd:84:76:cd:6b:41:0b:2c:
8b:38:59:4c:15:bc:27:2b:cc:33:6a:15:5a:c7:2b:c5:8c:ec:
b7:94:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:46 2026 by rpki-client