Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: bCetdBbmybIB+HJlv+CFm9Hli08iupA0LLpysH5iyp8=
Subject key identifier: EE:F1:51:78:24:44:5A:50:1E:54:63:D6:EA:C3:58:C9:04:3D:63:4C
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019D38D38BA9AD118B2991F7BAD251A1782E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1399
Signing time: Sun 29 Mar 2026 09:01:20 +0000
Manifest this update: Sun 29 Mar 2026 09:01:20 +0000
Manifest next update: Mon 30 Mar 2026 09:01:20 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: Ec9+0PiglwqLmTzH6bgJ40hWKCaxNPI9AbT64TqvHm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8b:a9:ad:11:8b:29:91:f7:ba:d2:51:a1:78:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Mar 29 09:01:20 2026 GMT
Not After : Mar 30 09:01:20 2026 GMT
Subject: CN=eef1517824445a501e5463d6eac358c9043d634c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:af:a5:df:2c:a5:e1:bb:42:2e:b0:21:f8:
c3:de:52:dc:96:4a:4c:fb:37:30:5a:1b:dc:a3:58:
05:56:0e:a2:77:29:2e:d0:b9:e0:d8:33:c0:ea:37:
c5:14:5d:38:c6:f3:13:0f:32:55:26:69:dc:dd:94:
80:74:dc:43:2c:74:e4:dd:30:79:28:f7:ad:16:4f:
1a:63:4f:a5:89:a3:26:4f:9e:b7:3a:bd:5f:b4:f1:
88:30:b5:ef:3a:3c:9e:34:a5:2e:8c:a6:f0:ca:42:
80:f8:08:83:47:56:7c:40:af:52:61:62:a9:f0:d2:
28:23:e4:b1:33:95:81:1a:bc:2d:d4:d5:ae:80:b3:
ec:68:cb:93:87:9f:ce:79:84:e1:c4:44:1e:0e:d6:
51:03:27:c1:1f:4a:00:41:a6:9a:a4:c2:06:85:81:
d0:11:1a:26:35:f7:a1:91:96:3f:b9:e1:bd:0d:3d:
19:bf:76:8e:01:ed:99:85:6c:ee:bc:4f:98:39:29:
6c:d7:ed:85:fc:ba:b2:4c:e2:23:4b:d7:77:4c:96:
d2:2c:6f:d7:6a:13:7e:7e:5e:96:5e:d0:a7:07:73:
4b:c7:00:4c:67:4b:10:be:b0:22:bf:00:21:87:9f:
68:e6:0d:78:11:2b:44:9d:b1:07:27:3f:45:bc:0c:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F1:51:78:24:44:5A:50:1E:54:63:D6:EA:C3:58:C9:04:3D:63:4C
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8f:34:03:ef:fc:68:ef:72:af:9a:ac:0d:af:a0:21:ad:b4:
76:74:d7:78:3a:41:f3:81:08:82:9e:f4:40:d0:8f:d2:de:3f:
56:72:9a:c4:cb:03:e4:dd:2c:0d:64:16:e3:48:de:1f:7e:ec:
ac:b2:d3:e2:1f:97:71:0a:14:ca:1e:fb:26:e1:68:90:cb:4c:
e7:31:32:45:1a:b5:f1:d3:ca:3e:2d:1f:25:33:70:11:e5:99:
29:39:50:6b:c9:d2:2e:90:18:dc:df:e1:02:86:a8:a6:27:89:
45:7f:67:6a:74:31:0c:1e:60:fc:86:f9:78:14:da:21:50:ed:
90:5a:b5:90:e5:10:66:4c:5c:2c:f3:8e:08:25:1e:cd:cf:e4:
5e:8a:c5:e2:2f:87:fa:01:00:2e:79:4b:91:03:39:0a:cf:bc:
4d:2c:05:d8:34:ef:e1:ef:de:53:ea:9e:3a:33:01:46:83:b9:
30:1e:2a:38:ef:a9:0a:22:0c:05:47:a8:1d:e8:94:47:5f:1c:
bb:79:a8:bd:0c:d3:d9:34:69:76:1b:9f:4f:0f:9b:f9:9b:d3:
9f:b0:fc:49:e9:c7:6c:44:90:42:a1:86:f0:3d:93:80:6e:99:
d1:6e:68:24:80:23:3f:45:b6:4e:e6:03:04:74:4e:2b:39:54:
6a:8d:d6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0404uprRGLKZH3utJRoXguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy
NGU2YTYwHhcNMjYwMzI5MDkwMTIwWhcNMjYwMzMwMDkwMTIwWjAzMTEwLwYDVQQD
EyhlZWYxNTE3ODI0NDQ1YTUwMWU1NDYzZDZlYWMzNThjOTA0M2Q2MzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4+vpd8speG7Qi6wIfjD3lLclkpM
+zcwWhvco1gFVg6idyku0Lng2DPA6jfFFF04xvMTDzJVJmnc3ZSAdNxDLHTk3TB5
KPetFk8aY0+liaMmT563Or1ftPGIMLXvOjyeNKUujKbwykKA+AiDR1Z8QK9SYWKp
8NIoI+SxM5WBGrwt1NWugLPsaMuTh5/OeYThxEQeDtZRAyfBH0oAQaaapMIGhYHQ
ERomNfehkZY/ueG9DT0Zv3aOAe2ZhWzuvE+YOSls1+2F/LqyTOIjS9d3TJbSLG/X
ahN+fl6WXtCnB3NLxwBMZ0sQvrAivwAhh59o5g14EStEnbEHJz9FvAyT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7xUXgkRFpQHlRj1urDWMkEPWNMMB8GA1UdIwQY
MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut
ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1
LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAso80A+/8
aO9yr5qsDa+gIa20dnTXeDpB84EIgp70QNCP0t4/VnKaxMsD5N0sDWQW40jeH37s
rLLT4h+XcQoUyh77JuFokMtM5zEyRRq18dPKPi0fJTNwEeWZKTlQa8nSLpAY3N/h
AoaopieJRX9nanQxDB5g/Ib5eBTaIVDtkFq1kOUQZkxcLPOOCCUezc/kXorF4i+H
+gEALnlLkQM5Cs+8TSwF2DTv4e/eU+qeOjMBRoO5MB4qOO+pCiIMBUeoHeiUR18c
u3movQzT2TRpdhufTw+b+ZvTn7D8SenHbESQQqGG8D2TgG6Z0W5oJIAjP0W2TuYD
BHROKzlUao3WHA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client