Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: 2f5WxRzS9AeXdzZU6AsINe/57x0ZV2TC7syT+66Zzfo=
Subject key identifier: 5E:D4:67:2F:F8:A4:FB:85:27:11:B0:80:9E:06:66:C4:DE:9F:2B:82
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019D98F410B9F75CA3376372D49CE3258286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 1301
Signing time: Fri 17 Apr 2026 01:00:25 +0000
Manifest this update: Fri 17 Apr 2026 01:00:25 +0000
Manifest next update: Sat 18 Apr 2026 01:00:25 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: ZjIEc7UtjPxeeQIdn0NCF2YeESdegYSkl1cTf/iy7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:10:b9:f7:5c:a3:37:63:72:d4:9c:e3:25:82:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Apr 17 01:00:25 2026 GMT
Not After : Apr 18 01:00:25 2026 GMT
Subject: CN=5ed4672ff8a4fb852711b0809e0666c4de9f2b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8c:54:76:6f:e2:72:57:7d:69:fd:6f:b4:cf:
cf:8a:46:52:ff:99:91:48:88:37:17:5d:67:78:38:
09:e2:1b:96:13:f2:4e:98:60:92:4d:a5:fb:91:52:
60:36:3b:93:ef:23:b1:6f:59:8a:72:47:0e:3a:a8:
1a:27:b4:63:54:f2:07:e8:c2:7a:aa:01:f6:21:2c:
53:7b:7a:25:34:21:40:f1:dc:07:1f:6b:db:72:7b:
a1:32:d5:c4:ec:6a:ee:a6:a1:72:b3:73:96:12:52:
8d:3a:3a:05:f4:39:cd:a1:46:86:24:b9:49:e6:5b:
c7:5e:50:ba:99:da:27:a2:3f:a9:c1:68:4a:57:0d:
ba:6c:24:9c:f9:1c:fe:6f:91:cd:61:9b:6a:22:1c:
01:9d:8f:fb:de:cb:a2:b2:88:89:5a:ab:c9:9d:6b:
51:38:a8:44:4a:91:ce:ae:dd:e3:29:4d:16:34:7d:
15:a0:f3:ef:99:e3:72:67:09:d6:77:78:99:b4:ab:
ef:11:4e:99:10:bf:8d:07:90:41:9b:a2:88:68:86:
3d:92:90:dd:6e:1d:6b:4b:98:d5:f3:55:c5:9d:24:
72:77:d4:8b:56:67:d2:fc:97:72:2d:80:96:6c:ca:
58:7d:e8:db:25:40:74:b7:b8:d7:ec:c4:1c:df:c1:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D4:67:2F:F8:A4:FB:85:27:11:B0:80:9E:06:66:C4:DE:9F:2B:82
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:49:c4:90:02:69:60:2c:90:50:f0:89:dc:f2:5e:6d:db:cb:
6f:90:a9:f5:fb:63:55:25:7f:90:a3:63:14:5b:38:0c:9c:ba:
8a:4f:a6:f4:25:4e:91:00:2f:5c:58:e2:d4:4c:fc:a0:07:59:
dd:1d:3d:c6:80:79:73:10:34:97:7e:79:d3:91:56:6e:3f:ba:
9b:c3:d9:c2:80:f4:8b:81:de:94:72:2a:dc:a2:4a:54:98:ce:
68:1e:47:55:1d:ef:97:ee:50:47:59:5a:09:db:37:1e:c8:7c:
44:55:f6:6d:95:86:4b:5c:9f:51:df:7e:4a:1b:96:49:38:8b:
8b:d4:dd:12:f0:ba:df:38:ce:b0:e4:c6:52:53:c1:05:bc:a1:
4c:48:74:5d:c0:8f:76:2c:12:dc:a1:a3:de:c4:67:7d:06:9c:
ef:44:bc:8b:69:d6:cd:df:9a:9e:22:e9:05:3e:dd:8c:32:7d:
33:cc:ee:14:73:25:8c:e8:06:e7:23:dc:9e:7a:cf:42:1c:55:
4e:b4:dd:06:81:8f:44:4d:10:45:f8:a8:b1:51:ca:45:c1:79:
06:99:1c:14:50:ba:31:43:00:20:16:99:43:53:7b:65:64:d2:
b8:d7:a5:cd:d0:db:47:62:28:5e:00:f1:4c:65:42:ba:d6:bd:
40:8a:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:56 2026 by rpki-client