Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: Dp/6nJ+ueWrGdhk/IwJznJdEnCBRwejL7ZQTRcf1M9Y=
Subject key identifier: 25:A4:CB:72:2D:47:74:43:BA:D6:5F:16:C0:3A:8C:45:9D:11:D4:94
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01A0D200CB1D9613CB89B8D88F7B0130041A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1576
Signing time: Thu 24 Sep 2026 06:01:02 +0000
Manifest this update: Thu 24 Sep 2026 06:01:02 +0000
Manifest next update: Fri 25 Sep 2026 06:01:02 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: 1AMgTTUSmb0tKM31+czGLJsPY1UN5tUn/h7P35nLPFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:cb:1d:96:13:cb:89:b8:d8:8f:7b:01:30:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Sep 24 06:01:02 2026 GMT
Not After : Sep 25 06:01:02 2026 GMT
Subject: CN=25a4cb722d477443bad65f16c03a8c459d11d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:6c:4d:50:3a:d3:b4:09:27:9e:16:6a:99:
8c:7a:bd:da:cf:92:df:99:98:7a:47:9e:69:0a:de:
f9:43:3a:32:47:d1:ee:c0:dd:ba:e4:51:31:19:97:
8c:6e:5f:65:48:91:0f:50:0c:71:db:fe:1a:81:5a:
7e:d2:66:ab:ef:cc:4d:f9:ad:3c:92:46:bb:72:38:
10:cd:96:94:e5:c7:18:3a:6c:56:41:6a:7c:4d:98:
5a:a3:18:68:20:02:0d:50:57:34:56:fb:8f:e8:c2:
e6:2d:57:18:2c:84:d0:0a:ef:a9:2a:0f:18:79:17:
3f:50:ce:69:58:70:60:8e:7a:bc:f5:e9:39:76:d8:
07:ce:00:08:72:8d:3b:2d:94:56:c1:8b:0f:49:48:
5c:cb:83:da:f6:54:ea:d5:57:4b:e4:79:bc:3c:aa:
c4:d7:4c:9f:33:ed:66:79:42:f6:25:a7:78:51:3a:
07:3f:0d:08:6e:69:b2:c4:23:bf:64:86:85:d1:a0:
60:3a:c2:3c:0f:db:92:ef:b5:dc:5b:8a:c1:ab:f0:
fc:ae:24:81:34:f6:16:bd:8c:8d:98:76:df:ff:c4:
6e:e8:57:a9:88:68:78:96:94:9f:5d:51:3d:18:1a:
06:53:bc:31:9b:44:71:30:d3:2a:77:70:9d:f9:7e:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:CB:72:2D:47:74:43:BA:D6:5F:16:C0:3A:8C:45:9D:11:D4:94
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:98:5b:0b:cd:c3:e0:bc:1b:e5:df:7d:34:29:23:cc:87:6b:
b0:be:8c:27:00:c6:00:6e:34:0c:61:04:ad:66:c9:59:93:6a:
de:de:b0:b6:f1:72:1a:fd:53:11:7d:92:76:65:5d:c6:19:1c:
32:02:bd:b2:df:b7:1c:64:00:88:31:cc:ea:33:09:25:23:38:
76:ca:97:5b:93:f8:34:59:c7:21:30:a3:1b:b9:33:26:72:39:
51:ac:04:a5:0d:9f:e2:c4:27:7f:0e:2d:3a:e4:6a:67:ee:99:
31:6a:0b:e0:08:9a:7e:0c:e4:6e:95:9f:85:e1:fc:07:b5:20:
3c:ef:19:e0:55:b3:1b:14:c9:92:15:c8:b8:0a:db:7a:87:5f:
8c:7e:19:99:81:a5:b3:ac:05:0b:e0:5b:2a:b3:da:75:17:6f:
e6:26:aa:0b:05:26:ec:e9:0d:90:be:0a:22:f0:5c:9d:7f:6e:
23:27:44:e1:d0:58:ef:e1:2d:2a:1e:a8:65:a8:96:eb:8f:c6:
e3:12:27:0d:50:28:c1:cb:b3:cd:76:36:99:aa:71:e2:43:f3:
7d:d3:3f:67:58:1f:06:3c:9d:a3:41:fd:05:ba:d4:80:8e:a8:
1e:58:30:09:92:a0:30:1d:87:0c:5f:18:50:30:f5:60:b5:e0:
fa:59:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:26:47 2026 by rpki-client