Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: 1TT44Uegv7N197huQxw0G5h5FO3nofZVYKgcwQLwfBQ=
Subject key identifier: D9:B0:C0:E7:9C:4C:8D:5A:35:4B:B8:D7:D0:29:5B:07:66:98:CA:1A
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019CAB6BA100CA4A26967C170257CD70821A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 1286
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: 9/lSTPjHDvNNPijaheeUFl91+FdkBbBWMOe67j+OAPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a1:00:ca:4a:26:96:7c:17:02:57:cd:70:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=d9b0c0e79c4c8d5a354bb8d7d0295b076698ca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:cb:77:6b:3c:89:58:69:86:70:7f:81:ef:
8b:5f:87:c1:38:d4:09:06:ad:15:79:2b:68:7c:d4:
28:40:7a:a0:92:c1:fe:b8:da:f4:fc:25:95:a7:3d:
08:01:b8:12:70:e7:fe:59:fd:5c:69:d5:c6:97:17:
f5:4b:33:89:e1:6c:f3:0b:a6:79:1c:95:d8:60:8e:
7d:1b:78:ed:74:09:29:e4:4f:2d:c0:8a:fb:42:04:
79:45:6a:7d:fc:f9:6f:90:64:22:a2:51:0a:14:6a:
73:fc:21:8c:66:a1:0b:14:92:c2:2d:6a:cf:c0:49:
06:50:77:14:a2:f5:20:d3:fc:d2:5b:44:00:20:d3:
51:91:70:ac:12:ed:99:6c:85:97:00:fa:9f:8e:d3:
23:13:49:b4:25:1b:ca:73:23:26:ac:2d:7d:b7:7b:
d1:c5:86:4f:64:b6:26:72:f3:81:16:d3:08:4b:0e:
be:81:81:6a:f9:42:1e:5d:15:02:ba:5a:ef:13:2e:
2c:f2:ef:18:f0:8d:16:5a:57:d9:7f:d5:47:8d:45:
e0:24:30:dd:8d:76:b6:47:21:49:3d:52:23:e3:77:
63:64:ac:c1:56:e9:35:17:5a:3a:77:76:c9:bc:e2:
34:b7:15:e7:47:60:58:11:20:b1:69:ee:47:b3:e3:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:C0:E7:9C:4C:8D:5A:35:4B:B8:D7:D0:29:5B:07:66:98:CA:1A
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c9:ed:0d:a1:ec:98:ce:00:85:11:59:92:73:6e:68:0f:9b:
52:29:81:86:26:42:07:02:23:96:0e:3a:4e:b6:8e:0a:23:aa:
08:e3:9b:73:e4:dd:33:1b:b9:86:90:1b:ab:8c:62:69:3c:c7:
ed:9d:6d:66:02:c5:25:69:c0:12:77:64:73:16:b5:13:77:44:
62:35:bb:16:08:4b:df:77:cd:2b:0d:32:2f:67:b0:b4:74:32:
66:0f:35:78:ce:f4:d2:b6:86:39:01:b2:c9:1f:ab:72:89:72:
0d:be:c7:e6:fc:4a:8e:f4:e5:78:74:fb:ab:1e:a6:e2:f9:1e:
20:10:5a:03:00:ba:54:26:a8:71:26:9a:37:53:3f:1d:c3:25:
66:37:47:e4:69:5d:b2:5d:09:c3:00:4d:19:f7:60:fb:60:80:
24:87:08:55:db:8e:aa:3e:f6:05:b7:4d:07:8f:1d:8c:91:81:
09:67:6d:cf:09:5e:a0:a6:de:16:3d:ba:f9:0b:79:d3:92:af:
8f:ab:61:7b:eb:9d:c5:32:07:3c:99:4f:b0:28:ea:7a:41:69:
b6:1d:a8:c0:c8:23:71:bf:4d:25:39:c1:ec:c1:9b:6b:71:f5:
38:95:99:da:14:b2:17:10:4a:fe:f0:0f:4d:9a:04:3c:00:2d:
39:aa:4e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6EAykomlnwXAlfNcIIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjg0Y2JhNzc0YTljMjFhMjk4NjZkNDhlNWRjZjA3NTlj
ZDRhYTkwHhcNMjYwMzAxMjIwMTIzWhcNMjYwMzAyMjIwMTIzWjAzMTEwLwYDVQQD
EyhkOWIwYzBlNzljNGM4ZDVhMzU0YmI4ZDdkMDI5NWIwNzY2OThjYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtvLd2s8iVhphnB/ge+LX4fBONQJ
Bq0VeStofNQoQHqgksH+uNr0/CWVpz0IAbgScOf+Wf1cadXGlxf1SzOJ4WzzC6Z5
HJXYYI59G3jtdAkp5E8twIr7QgR5RWp9/PlvkGQiolEKFGpz/CGMZqELFJLCLWrP
wEkGUHcUovUg0/zSW0QAINNRkXCsEu2ZbIWXAPqfjtMjE0m0JRvKcyMmrC19t3vR
xYZPZLYmcvOBFtMISw6+gYFq+UIeXRUCulrvEy4s8u8Y8I0WWlfZf9VHjUXgJDDd
jXa2RyFJPVIj43djZKzBVuk1F1o6d3bJvOI0txXnR2BYESCxae5Hs+Px2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmwwOecTI1aNUu419ApWwdmmMoaMB8GA1UdIwQY
MBaAFGD4TLp3Spwhophm1I5dzwdZzUqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYt
ZWI3YWE2MmYzNTZiLzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYtZWI3YWE2MmYzNTZi
LzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMntDaHs
mM4AhRFZknNuaA+bUimBhiZCBwIjlg46TraOCiOqCOObc+TdMxu5hpAbq4xiaTzH
7Z1tZgLFJWnAEndkcxa1E3dEYjW7FghL33fNKw0yL2ewtHQyZg81eM700raGOQGy
yR+rcolyDb7H5vxKjvTleHT7qx6m4vkeIBBaAwC6VCaocSaaN1M/HcMlZjdH5Gld
sl0JwwBNGfdg+2CAJIcIVduOqj72BbdNB48djJGBCWdtzwleoKbeFj26+Qt505Kv
j6the+udxTIHPJlPsCjqekFpth2owMgjcb9NJTnB7MGba3H1OJWZ2hSyFxBK/vAP
TZoEPAAtOapO3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:01 2026 by rpki-client