Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: IIE08Pmuj3cKFqi7azHzkjT9HeviKfEth/y6BZTHmTc=
Subject key identifier: 99:C4:04:9A:6D:BF:A9:B5:BB:C9:E2:49:FA:9E:16:FF:5B:60:E9:24
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019F29251C87DB71B21682F06F2EA4702778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 149A
Signing time: Fri 03 Jul 2026 18:02:05 +0000
Manifest this update: Fri 03 Jul 2026 18:02:05 +0000
Manifest next update: Sat 04 Jul 2026 18:02:05 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: DUC5DNbrdEnER5e3pEIo7KGPHiZPSOgIp3gIJpQRtDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:25:1c:87:db:71:b2:16:82:f0:6f:2e:a4:70:27:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Jul 3 18:02:05 2026 GMT
Not After : Jul 4 18:02:05 2026 GMT
Subject: CN=99c4049a6dbfa9b5bbc9e249fa9e16ff5b60e924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:de:c4:51:a5:3a:e2:31:2d:b1:05:b7:e6:
99:a6:74:28:74:14:66:ac:6d:ea:72:db:79:d6:63:
70:c9:34:51:82:7f:01:bd:54:05:4b:a0:59:ad:7b:
cc:c2:17:9c:44:f5:2c:da:aa:6b:c8:4b:53:bb:2d:
0c:70:d0:fd:6f:e2:e6:99:6b:e2:4a:40:31:ab:d8:
48:3e:f3:51:d5:8d:55:cc:d0:f5:d0:62:d5:33:3a:
17:b5:2e:a6:56:c7:c4:69:ef:22:63:e6:d4:ed:11:
47:e8:6c:e5:94:d9:2e:34:7c:f7:c8:15:c6:98:b8:
43:3e:db:b6:96:0a:e9:29:1e:aa:17:7c:5e:53:d7:
7f:14:c3:9f:1d:d1:b8:db:da:e6:fc:0c:9a:67:ca:
80:8e:3b:e9:c1:a2:33:03:a5:60:1c:1a:8e:7f:08:
ca:51:58:d0:ad:81:f8:a2:c6:3c:df:fa:f6:2b:03:
8c:2a:59:f8:02:d4:93:3e:54:a0:e2:82:59:ed:47:
b0:9f:b4:7b:b2:ba:e2:09:54:14:52:54:4e:b2:83:
bc:05:cb:23:e3:a6:2c:29:ac:67:77:df:3a:5f:d8:
b5:ec:4b:13:34:d8:20:35:8e:3c:b2:18:cd:02:1a:
1f:8d:4b:7f:a1:91:75:13:33:15:6e:42:61:6d:7a:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C4:04:9A:6D:BF:A9:B5:BB:C9:E2:49:FA:9E:16:FF:5B:60:E9:24
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:d1:29:89:3a:20:92:c5:28:2f:19:1d:0b:77:56:43:8d:
71:8e:a7:8f:cf:24:b0:1d:7d:7e:0f:a7:44:ef:9b:b3:d4:88:
2c:7c:0a:98:6c:51:be:19:ad:0b:93:1b:45:d7:ea:ff:b8:9d:
e9:59:b3:cd:af:0c:9c:0c:65:5d:ca:b8:74:34:8e:be:db:8e:
4e:8d:b5:19:c3:07:7f:b7:23:84:9d:2f:04:e1:3a:82:13:53:
c6:23:d6:c8:67:0b:18:d4:f6:a6:e7:6f:b6:be:b6:6f:39:d4:
0d:c1:31:90:c7:0e:09:3a:f7:15:eb:3a:96:7f:8a:62:2e:7d:
21:56:2c:8f:0b:e2:5f:3a:f7:25:ac:12:e1:e4:40:e8:81:08:
2a:ae:5f:59:61:8a:b8:b4:63:bd:6c:38:ce:b2:9f:36:f5:fd:
fb:72:b4:47:18:76:4e:af:f9:1c:8e:f6:dd:3c:03:26:d5:ae:
60:ea:e0:8b:26:3b:fa:65:f6:28:58:4c:37:8c:a1:a8:8d:c9:
7c:30:62:ee:c6:7c:94:22:46:7f:74:79:c0:61:c2:ea:77:83:
82:f0:7d:2a:b8:c1:6a:97:19:ed:c3:77:80:87:12:0d:c9:51:
e0:1d:b8:49:45:57:3c:a5:8e:81:d8:25:5a:a7:91:98:90:4f:
c0:1e:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:54:58 2026 by rpki-client