Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: kXKJIMBssj2gJSBVSwyACKgy0H/BC5djG48+CXhqWjU=
Subject key identifier: 7F:15:75:28:BA:27:A8:26:3F:C1:4C:09:0D:63:27:25:BA:0E:34:7F
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01A1931EC54BF10DD0EC5344C926C010FD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 15DA
Signing time: Sat 31 Oct 2026 18:00:29 +0000
Manifest this update: Sat 31 Oct 2026 18:00:29 +0000
Manifest next update: Sun 01 Nov 2026 18:00:29 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: pcg0/by+uGdRMzhKR5AMcJ8RTX9Hvegc2VDjaIHo9qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1e:c5:4b:f1:0d:d0:ec:53:44:c9:26:c0:10:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Oct 31 18:00:29 2026 GMT
Not After : Nov 1 18:00:29 2026 GMT
Subject: CN=7f157528ba27a8263fc14c090d632725ba0e347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:be:ad:a2:33:c8:a5:45:50:af:ae:08:d5:
34:13:de:5c:dd:44:4d:4f:f9:03:5e:95:f8:83:45:
b0:a9:fe:15:d4:56:46:03:ba:9b:59:54:8a:17:df:
df:3f:73:91:47:6e:e9:ab:0d:40:c3:ec:38:73:17:
7e:90:b1:e5:3a:a0:78:00:cd:8e:d5:41:e1:44:a5:
2c:c6:95:a5:54:36:ca:44:61:57:0b:d4:7f:61:31:
48:aa:41:f2:64:4a:47:45:48:2d:79:cb:1f:84:d5:
5c:4c:b7:49:a3:b7:22:95:15:eb:c2:5f:a3:8b:1e:
65:f2:b4:4c:12:c9:de:e1:b0:71:2e:df:64:8c:31:
5a:9c:ae:16:3f:8d:cc:f1:40:c6:ca:9a:73:30:80:
e9:8e:bd:9d:3d:dc:25:d3:7a:71:58:2d:77:b2:32:
29:e1:85:61:36:00:e1:af:19:1c:17:1b:24:3f:52:
06:e3:23:03:8c:fd:08:aa:d7:f3:71:8d:52:9c:1b:
27:27:2e:9a:a2:48:67:5f:fe:3a:79:bd:b5:30:54:
dc:29:bd:71:43:19:7d:e8:5d:d1:7b:d5:bf:ba:c2:
68:69:6d:4d:89:74:bf:8e:79:78:bb:aa:64:00:ca:
97:61:92:89:90:23:1b:b0:6d:34:81:c1:02:40:3b:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:75:28:BA:27:A8:26:3F:C1:4C:09:0D:63:27:25:BA:0E:34:7F
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6e:e3:af:fc:68:c9:40:0e:17:6e:58:d6:73:48:21:62:f9:
c9:bf:e3:12:89:2c:d9:87:d7:02:17:9c:93:04:3e:a2:f0:ff:
fd:2a:78:ca:01:58:8e:26:c1:f4:60:20:77:7b:a1:46:81:95:
42:97:8a:f6:5c:e4:18:03:ad:58:fa:51:76:9e:53:a0:14:07:
c4:88:ab:6d:15:93:50:16:21:f0:63:18:b5:b9:1b:f7:99:14:
63:6e:65:6b:83:ec:10:4b:31:8a:38:ec:cc:fa:92:5a:e4:30:
cd:63:95:04:ff:87:fd:2a:10:61:06:a5:c6:22:2e:7a:45:1a:
f6:19:d9:4b:98:03:3a:0b:3c:1e:99:4b:25:32:f4:93:fb:ef:
0b:b9:98:0e:ca:30:98:43:46:77:34:4a:95:88:c1:2d:08:8c:
35:87:86:62:6d:d7:da:b2:62:2c:bd:49:16:ca:84:56:d1:72:
71:92:46:f1:81:c6:dc:0f:4a:a3:55:f6:29:af:2d:5f:6b:b1:
fa:5c:3c:fe:ee:92:f3:c1:21:66:a7:39:79:22:d2:1d:2b:68:
cd:0f:26:06:35:aa:e6:9b:8e:f1:ce:d0:26:e0:39:8d:e7:50:
82:96:3a:a4:46:70:aa:b9:40:0b:17:15:47:fc:b1:01:6b:54:
e8:3e:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:04 2026 by rpki-client