Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: urfbShVmaMebokPGBt7WLuI38u3pSiIGi0gHjBPu0Aw=
Subject key identifier: D8:61:87:C0:58:33:C3:49:4F:3D:90:2A:A6:09:9D:97:65:BD:32:48
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01A1950D4CE6531A292080DFFC9CBC9567C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 15DB
Signing time: Sun 01 Nov 2026 03:00:39 +0000
Manifest this update: Sun 01 Nov 2026 03:00:39 +0000
Manifest next update: Mon 02 Nov 2026 03:00:39 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: lgonPsxZcLUePwwJBC63H1TcmsBnT1CeXk+qLUBbf9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:4c:e6:53:1a:29:20:80:df:fc:9c:bc:95:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Nov 1 03:00:39 2026 GMT
Not After : Nov 2 03:00:39 2026 GMT
Subject: CN=d86187c05833c3494f3d902aa6099d9765bd3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:fe:35:fd:7d:8b:1f:a6:72:f2:77:2c:86:
28:c8:a4:05:2d:39:c0:cd:52:a1:a3:00:7a:4f:81:
e3:76:5a:0e:e8:87:11:a7:c1:7a:b3:d8:1e:ec:49:
66:05:fa:3e:36:ed:ed:96:c6:a1:02:ad:9c:04:ba:
4d:09:c6:64:de:90:f7:42:cc:b2:d6:b8:67:d6:7a:
9f:f3:6f:63:34:37:e7:f6:c9:43:00:d1:24:7d:f9:
2d:ce:b2:8c:8a:8c:1b:d8:18:35:ca:5d:1e:15:49:
30:33:9c:5f:1d:3d:16:57:a6:a1:4b:4b:48:fa:92:
d2:f4:eb:fa:ba:eb:c3:a6:ff:d3:93:a8:8a:a3:f4:
1e:7a:fe:b9:81:77:bf:d9:42:af:d9:7a:bb:46:57:
14:8f:f3:50:ea:98:a8:06:dc:5d:ff:89:8e:eb:01:
d3:14:ba:ec:c9:14:74:bf:72:c4:46:7b:6a:bd:c4:
15:99:1a:84:56:be:21:0a:e9:a9:dd:26:45:54:62:
1b:db:2d:39:b6:3d:15:0e:53:e4:5e:00:2c:2e:9d:
b9:ae:85:2b:b1:1b:85:bc:ef:09:61:8f:3a:ac:15:
e7:61:59:13:25:ac:e4:41:2e:1b:5e:e6:ef:bf:8b:
41:23:9e:9c:a5:0b:b9:f1:97:aa:ad:72:3c:24:38:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:87:C0:58:33:C3:49:4F:3D:90:2A:A6:09:9D:97:65:BD:32:48
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f6:34:b5:14:01:c1:e2:e0:9b:62:a8:3f:f1:ef:05:8a:91:
89:15:be:d5:6c:93:7a:b8:c1:12:ba:27:b3:ee:17:42:bb:6e:
9b:03:19:60:01:62:77:8f:db:c7:e8:ff:10:ac:c1:4e:67:80:
25:5f:87:73:42:0f:dd:6d:de:d9:eb:f5:65:3c:5f:b3:86:27:
1a:6b:b8:c9:8e:ec:5a:a5:c4:d5:58:a5:5d:af:f9:57:07:9e:
41:95:c7:7b:f4:3b:f9:db:ec:96:22:00:1d:f1:b9:10:cd:a4:
6f:0f:72:26:65:4d:f9:73:10:50:44:63:63:b8:34:2d:8e:99:
9f:1c:a3:80:a2:16:fe:52:54:65:b3:e6:ba:6c:e3:df:17:d8:
a2:ad:28:65:ff:e1:f4:43:8b:3e:2b:c7:05:3e:52:4c:ae:d7:
9a:97:be:af:e5:16:c8:f1:2b:62:4b:18:d5:42:4d:0a:a9:3a:
b4:00:8b:99:e1:07:ac:68:8d:f1:91:c3:8b:2a:31:67:78:f3:
02:1d:83:9e:b3:fd:c8:55:5f:d8:95:4e:72:1e:84:a7:d8:36:
77:af:36:89:3c:20:86:e2:a7:74:49:70:a5:7a:94:ac:56:09:
81:21:5a:4a:20:61:a4:09:66:d1:0a:8d:34:60:eb:f2:af:18:
9a:2d:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:25 2026 by rpki-client