Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: 0MRG+xDALMVoDwJb+SGQZD2i3l5kvy8LRWTXcL7JhoA=
Subject key identifier: B5:16:7E:5E:7C:38:22:18:4C:AF:5D:CB:B4:5A:97:CD:C7:F7:9F:7E
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019E1EA35D438C46200417DC8C90A6C5BED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1410
Signing time: Wed 13 May 2026 00:01:23 +0000
Manifest this update: Wed 13 May 2026 00:01:23 +0000
Manifest next update: Thu 14 May 2026 00:01:23 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: LoD9PgV7GiFub29r+rMJaXkcgAQ66lDLac2M8zlCH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:5d:43:8c:46:20:04:17:dc:8c:90:a6:c5:be:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: May 13 00:01:23 2026 GMT
Not After : May 14 00:01:23 2026 GMT
Subject: CN=b5167e5e7c3822184caf5dcbb45a97cdc7f79f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:1f:1e:a0:af:6d:5d:31:bd:34:38:6c:8d:
6c:ba:60:20:aa:cc:9f:f1:e9:6d:43:f2:e9:d4:eb:
00:52:00:6c:0e:8e:94:bd:1d:34:07:ec:74:f9:82:
29:6a:de:ca:c4:c2:43:29:bb:5c:ee:8d:28:19:1d:
af:e1:fc:94:49:dd:aa:d5:fd:10:a8:0d:f7:44:b2:
b4:af:33:1a:73:fe:e0:cc:b3:d0:8b:28:76:78:87:
8e:ec:fb:48:6f:be:83:4c:27:3d:78:ac:56:c4:68:
0b:ea:ee:2b:60:00:a1:9b:ac:a9:7d:ab:00:bc:cb:
39:09:92:bd:eb:aa:45:db:b5:8c:f5:a2:8c:bb:18:
c5:c3:4b:c9:1a:4e:c3:67:b7:48:56:ca:0a:74:e8:
da:18:d9:5b:7e:da:f2:a4:f2:cd:20:7b:ea:c6:b2:
bc:6d:4b:9f:a1:4d:fa:ec:80:e7:17:e7:01:3e:fa:
05:40:6e:8a:7d:ea:e9:ea:8c:6a:ad:b3:ea:30:42:
13:a8:02:0f:e6:f1:8b:7d:5e:00:88:24:d6:01:3c:
fe:6c:c3:5c:47:a3:4c:2e:01:22:40:3d:42:d8:f1:
f1:cc:c1:bf:56:f9:e1:61:21:d0:5d:34:93:ac:f4:
f2:36:04:83:22:8c:0c:0b:50:21:32:83:dd:5a:aa:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:7E:5E:7C:38:22:18:4C:AF:5D:CB:B4:5A:97:CD:C7:F7:9F:7E
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e9:a2:0e:6d:17:b2:1a:b6:32:dd:f1:d1:24:a6:e7:76:0d:
e8:30:71:aa:c7:d1:b7:83:9e:ce:18:ac:45:f5:38:b7:1b:08:
c6:cd:8e:bc:59:bd:69:b3:f7:5b:1d:f6:c2:a8:0d:ad:99:ec:
6e:8f:75:04:0c:e4:fe:0c:a1:21:82:45:86:fe:c0:75:73:1d:
71:b7:e5:3b:5a:01:a0:59:77:d2:c5:87:52:02:5a:95:65:ac:
42:30:79:97:5d:36:ec:dd:87:68:46:45:3d:88:07:62:05:82:
96:98:45:95:c4:ad:b6:53:e1:96:86:4a:45:b1:cd:f6:6f:47:
73:2f:6b:80:46:e9:f6:2a:65:2a:62:a9:2a:ed:9f:b9:c1:ec:
db:4f:1d:1b:30:e8:b5:cc:be:95:c6:90:e5:23:a1:6b:a8:52:
15:10:86:15:1c:0d:71:f3:44:64:2c:1b:ee:46:62:a6:23:9f:
97:bf:84:d9:18:19:d4:9f:d9:cd:44:66:e3:93:5a:f8:3d:c9:
fc:da:fe:a0:51:64:57:59:b2:d4:36:29:1e:e3:d1:ce:6d:f9:
8f:f2:e6:81:7b:54:5d:fc:8d:b8:6a:d3:b1:d1:b2:16:59:80:
9a:0a:7e:fe:4b:1c:14:b6:83:7f:cc:01:97:42:52:6f:75:3c:
7c:85:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:49 2026 by rpki-client