Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: 1gkY32hmikntw75O1V6wiMxfLtEhoe2PUYy6PQaUkDk=
Subject key identifier: 2C:34:17:F7:E1:A8:E4:A6:EE:21:7F:CD:47:20:59:91:0A:A0:39:95
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019CABD9570A8568AF3B595E1078E3DB8742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1350
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: TANH/Cah8dTq2AqnKIEd3tHzvugmEJomam9M6GJumM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:57:0a:85:68:af:3b:59:5e:10:78:e3:db:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=2c3417f7e1a8e4a6ee217fcd472059910aa03995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:d8:0d:67:2d:4f:96:ac:d3:42:d2:60:25:
e6:5e:26:ff:0a:b2:96:be:42:18:73:25:dc:92:91:
4c:94:97:b7:a4:cd:0e:f4:0f:64:29:87:d0:94:33:
f7:85:7f:a8:05:bf:d4:56:7a:60:f6:9c:fc:fa:bf:
5d:24:e9:ec:52:fb:57:36:10:b8:87:83:08:67:57:
0f:ce:1d:82:7f:e0:a7:75:58:b5:69:01:a7:ba:4a:
d0:a2:8d:c2:29:c8:8f:71:4a:4b:ef:c1:43:36:e3:
4b:37:f6:b6:a6:2e:5d:60:33:4e:4a:a5:64:2e:b1:
51:1c:a0:28:23:ab:50:98:a6:04:2a:e0:f1:87:a5:
14:1e:30:ef:02:ca:d3:b7:ef:1c:fd:75:f2:27:20:
4d:31:fd:7c:9b:97:59:93:0c:9b:02:a7:de:a9:8a:
09:ec:5a:71:21:ee:ac:aa:88:63:56:4c:4a:61:f9:
54:ab:c5:59:fd:54:3e:aa:42:9d:c2:c6:46:5d:9d:
8a:67:10:30:3c:d7:3f:76:52:e6:4f:23:89:3b:93:
2b:d9:3c:bd:bb:31:50:22:07:c0:23:a8:cb:05:6c:
81:e1:85:bd:05:77:e5:9c:2d:83:cb:cf:9a:95:b3:
27:73:5e:ab:85:8d:20:f8:db:22:a8:54:f7:78:a3:
3f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:17:F7:E1:A8:E4:A6:EE:21:7F:CD:47:20:59:91:0A:A0:39:95
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:62:5e:89:1f:37:63:dd:67:f0:27:aa:44:8e:b5:ab:39:28:
de:2f:ed:23:18:57:86:c3:7d:dc:70:6c:54:36:c4:20:25:09:
40:c6:0b:29:df:77:18:4b:6a:3c:7a:2a:ce:63:2e:9c:d3:dd:
cb:19:ba:66:ad:81:4d:c6:be:41:3e:ad:fa:f4:dd:0b:3e:58:
31:36:35:82:67:a3:95:d1:41:8c:80:22:86:99:b9:38:38:c6:
e8:c7:43:b2:c4:5f:b4:4a:e1:7b:26:b7:e0:26:14:64:63:39:
12:7a:86:f5:8c:31:e6:5b:84:9c:59:ce:44:c6:2e:dd:02:62:
89:84:14:ec:3c:56:1a:88:77:f2:a9:0d:99:04:3c:8a:00:7f:
55:33:21:ec:c3:ed:82:df:62:eb:0a:a6:bc:29:5d:87:82:68:
01:29:fe:ce:f9:34:15:fd:83:65:e8:9d:42:69:b6:2a:23:64:
35:11:67:6e:4e:41:2f:8b:ab:97:6c:70:8f:52:0f:fa:d7:2a:
94:7c:e4:91:c8:23:f4:89:76:99:1f:51:94:28:fe:14:6a:32:
8f:5e:0d:bc:eb:02:0a:8a:70:74:9d:4c:e2:16:47:1e:af:e3:
e3:d3:99:2a:27:f7:b3:91:98:53:3c:fc:7d:5f:ee:23:9e:49:
00:7d:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:12 2026 by rpki-client