Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: oVmutc+MtvUTp/khPEIUUQKcb8fCr/AOfcrFzVq0M88=
Subject key identifier: 15:85:14:CE:A6:9D:14:5E:2F:CE:2F:4C:4D:C9:A7:F2:FD:88:25:89
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019F935BCF623FAF6E12543880D2B6C1AEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 14D1
Signing time: Fri 24 Jul 2026 09:01:35 +0000
Manifest this update: Fri 24 Jul 2026 09:01:35 +0000
Manifest next update: Sat 25 Jul 2026 09:01:35 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: fHH74oY8ubXEwTsaIxka9y1CHbSrxaIMrloPwjy5bb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:cf:62:3f:af:6e:12:54:38:80:d2:b6:c1:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Jul 24 09:01:35 2026 GMT
Not After : Jul 25 09:01:35 2026 GMT
Subject: CN=158514cea69d145e2fce2f4c4dc9a7f2fd882589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:37:f1:ac:89:dd:a1:f7:fa:6a:73:0a:92:
31:c0:6e:22:7e:75:16:72:f0:4a:52:ec:55:28:66:
e1:b6:24:cb:cd:f4:1d:97:17:19:fd:9a:10:9e:9a:
14:b8:13:fc:e1:bd:8a:a3:be:5d:78:5a:c6:57:aa:
ff:68:65:46:0d:7b:1b:5d:66:3e:f7:53:7f:a0:94:
ee:01:43:12:9b:1c:30:2c:56:4f:c1:9e:2a:3d:d3:
76:47:64:0b:7e:de:e9:22:d8:6d:1d:3d:43:c7:00:
4d:73:eb:42:4d:66:fa:8d:2f:21:24:12:3d:69:83:
e7:60:30:a6:5a:f5:7f:0b:34:ea:55:82:07:46:41:
16:cf:23:73:5f:d8:d0:1a:1e:99:48:17:0a:c4:7a:
4e:9d:0c:fe:72:f8:ff:e1:25:67:bd:62:c8:30:47:
4b:0d:50:f8:b7:50:af:ad:f0:24:24:73:49:db:8f:
e7:2a:7a:62:2c:28:57:00:39:fa:7e:e7:ac:a4:2f:
56:aa:b1:bf:e6:84:71:e9:1a:9b:ec:97:29:18:90:
48:44:04:54:3a:a2:2d:31:95:62:94:7a:ff:ab:bb:
5a:15:a7:fc:58:ad:60:d4:d1:d1:34:34:87:1e:5f:
d3:87:1a:84:99:3e:e8:29:4a:8d:22:60:c1:3f:9d:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:14:CE:A6:9D:14:5E:2F:CE:2F:4C:4D:C9:A7:F2:FD:88:25:89
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:af:97:db:ca:85:9e:c4:6b:f6:e2:ca:cd:3e:56:88:16:
c8:64:ac:b1:9e:53:cb:b1:55:12:7a:7a:62:c9:3f:0b:52:f3:
08:ea:ec:fd:65:40:6c:11:30:72:66:fe:61:6c:59:dc:ec:36:
3b:de:32:3f:05:2e:89:dc:93:ce:18:68:5c:35:11:ea:c1:fa:
e8:c1:63:49:73:91:fb:5e:dc:d6:f9:ea:ef:5f:b2:34:82:96:
a7:7c:94:7f:03:61:21:65:94:8f:15:35:b1:98:fb:a2:37:07:
ba:a2:d3:09:5d:99:61:d9:06:65:95:fc:01:63:a3:b0:0c:51:
8c:d3:08:53:df:2c:86:b4:aa:63:48:1a:11:17:9d:c4:2f:c8:
89:41:46:d0:0e:8e:09:ff:a2:77:e6:69:c0:c1:72:37:f9:6d:
44:13:b1:f8:8b:8e:83:8e:ac:3f:08:f6:71:f4:5b:7c:60:65:
f5:91:ca:a3:24:28:24:ce:4e:0f:f9:13:43:45:43:4d:dc:75:
a9:43:a0:04:c2:e1:76:74:7b:cd:fe:b5:98:a6:19:d7:b5:f2:
33:dc:c2:c7:1f:ca:4f:63:90:7d:55:e7:4b:99:ff:a6:6b:fe:
50:4c:b7:95:55:93:38:d2:77:31:b7:db:b3:b0:db:97:42:ea:
26:71:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:01 2026 by rpki-client