Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: OdlE4Z6Jjslx+TvT9EB0eGGa56OINqhz3VvpShG21E8=
Subject key identifier: 01:24:64:D7:DE:96:1D:C0:CF:74:E8:3B:1F:78:DF:D7:AD:8D:58:05
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019D27039ECBBD2C83093B828A4420EFF3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 12C6
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: 9xKWMbKaQqzxsLAF5hXGYnKl5c4Gb/wR0WWdv4iGOzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9e:cb:bd:2c:83:09:3b:82:8a:44:20:ef:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=012464d7de961dc0cf74e83b1f78dfd7ad8d5805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:0d:d6:56:cf:3c:73:4e:38:88:1b:96:61:
50:d6:4f:52:c5:d6:c0:35:a5:fc:91:d4:07:62:98:
57:47:f5:dd:19:1a:6a:d4:54:6e:0f:d6:0c:5f:08:
99:e5:cd:71:11:92:45:8f:37:53:ad:5b:ca:d7:35:
4d:ed:0c:4b:d8:21:2e:ca:17:ef:6d:75:48:3c:65:
cc:e4:ca:7c:45:ca:3c:7b:f2:b1:c7:70:88:e1:00:
02:ca:e8:c9:79:ea:77:dc:2a:22:94:6b:da:19:92:
42:4e:3e:e6:14:a0:70:ec:47:62:f5:17:fd:7b:83:
d8:94:42:3e:e1:e3:72:3c:b8:74:2f:6c:08:5b:26:
cf:e4:ed:ce:97:08:4c:77:54:ec:b7:c3:a1:ea:15:
74:8e:31:13:14:6e:0a:c4:df:f9:9b:15:4a:5e:2e:
a8:59:68:dc:b4:9a:32:95:62:1e:c3:44:19:56:7f:
2a:5a:e1:39:e3:02:71:eb:29:1e:db:94:64:04:2c:
05:00:82:15:81:3e:a0:3d:34:19:80:2d:f6:d6:39:
31:1e:35:13:7a:34:a2:08:d2:c5:c6:17:c2:22:6e:
3b:98:e6:e2:3c:73:97:65:3a:fb:88:18:b7:d8:24:
69:eb:d2:62:b6:45:46:4f:1c:70:92:70:ef:35:b6:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:64:D7:DE:96:1D:C0:CF:74:E8:3B:1F:78:DF:D7:AD:8D:58:05
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ef:02:a3:15:1a:25:96:27:aa:7e:5c:b3:45:23:06:79:65:
07:79:83:c3:b9:60:32:11:bd:57:3d:64:0e:33:87:16:f2:79:
04:55:39:d0:8f:31:64:a7:37:3a:53:2d:23:24:f6:f9:82:89:
33:66:c2:21:f6:1a:e9:4d:10:ef:9c:13:59:c3:b4:38:61:f2:
4b:f6:ce:42:d2:9f:f5:d2:72:0c:1d:a3:75:c7:33:d6:ce:7f:
b4:22:e9:8f:ed:d8:45:13:58:3e:9d:ee:77:5a:c3:7f:5d:d0:
69:87:3b:74:06:81:f2:4d:9d:77:da:2d:b4:ce:c6:93:b4:1a:
2e:35:ff:29:35:05:f1:10:53:59:c2:01:e3:d1:61:ed:8a:9b:
0b:c9:ca:50:c7:37:bd:2c:18:33:e0:b2:ed:98:e1:d3:56:f9:
36:6a:a8:18:89:e7:e8:fd:c2:3b:e2:a0:74:db:81:29:d5:a2:
1c:ea:a5:d7:81:b6:97:a3:c8:f8:1f:77:12:c2:ec:2a:a8:29:
2a:a5:9a:75:64:ee:51:d2:97:3b:43:6a:39:bc:ed:7e:43:20:
56:1f:f3:54:40:29:89:cd:0d:21:c1:bd:71:e9:32:61:6c:0d:
cf:35:ea:1c:f5:e8:d3:30:7e:a0:3a:27:90:39:0d:1e:b8:86:
6e:60:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:02 2026 by rpki-client