Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: wkUdNOj+BSNV/sPYvkfx042Af2e7n/fkoxqgXJji+KU=
Subject key identifier: D4:7A:31:2D:CA:0C:44:D7:84:45:23:A2:FF:E4:C5:78:0F:7F:B0:E1
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019D2772E9566143E1F0C7879766FBB75DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1390
Signing time: Thu 26 Mar 2026 00:02:15 +0000
Manifest this update: Thu 26 Mar 2026 00:02:15 +0000
Manifest next update: Fri 27 Mar 2026 00:02:15 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: O3ZA6m3bpqONSz/TFPuCofW4zbqBIHRzrtAdgZC7juM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e9:56:61:43:e1:f0:c7:87:97:66:fb:b7:5d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Mar 26 00:02:15 2026 GMT
Not After : Mar 27 00:02:15 2026 GMT
Subject: CN=d47a312dca0c44d7844523a2ffe4c5780f7fb0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:1a:18:e9:46:e5:9d:a8:d4:da:4d:6c:66:
1c:ad:c3:79:cc:fb:dd:d8:92:d3:b4:91:8b:57:70:
78:19:1f:e5:4d:de:c6:32:2f:6e:cf:50:6e:eb:8b:
e4:77:54:be:2e:86:b8:15:ef:e7:a4:f7:fa:37:f2:
24:e8:d0:c1:4e:58:66:21:2f:bc:3e:11:72:9b:12:
54:8f:6d:e0:67:6b:f5:e6:11:28:29:69:8f:d8:0d:
c6:09:0f:ae:7f:b1:03:da:c2:bb:95:b3:a4:45:6d:
38:db:d0:24:97:32:5c:14:86:00:ea:d4:31:51:14:
52:e0:5c:95:1b:9d:c7:e1:95:cb:62:b9:56:23:89:
a5:2c:3d:67:70:60:5c:28:65:15:d4:d9:0c:ef:3b:
33:d6:c7:8a:1d:b3:7c:4f:1a:16:0e:0b:f2:34:4b:
ea:87:1b:ba:5d:13:7a:61:1f:85:d5:71:c7:e8:d3:
fa:61:32:3c:c3:cc:b2:9d:59:ac:41:e9:10:e7:c3:
8f:a9:ea:f4:93:25:00:b9:bb:8b:9d:61:7e:a4:34:
50:5a:70:91:86:cb:c9:e9:2e:29:e6:ea:aa:81:8b:
c3:e5:20:90:84:84:11:81:a4:83:89:1f:a8:cb:6e:
d4:ec:92:8b:44:84:d4:06:af:c5:78:b8:6c:19:3d:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7A:31:2D:CA:0C:44:D7:84:45:23:A2:FF:E4:C5:78:0F:7F:B0:E1
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b2:f2:97:db:53:c7:be:a5:17:0c:6a:d3:4b:34:23:44:57:
31:4c:80:87:e7:a9:54:a4:cb:32:57:5b:3c:b6:b5:11:e9:f8:
12:b3:87:3c:47:69:87:50:8c:bf:ab:3f:3f:c7:ff:05:59:59:
0f:d4:1f:c9:1e:20:f5:d9:93:69:f3:05:db:b2:97:b7:39:84:
99:c0:bf:d7:ba:39:6f:99:f1:c1:08:8a:55:cf:e8:e2:37:3a:
08:76:0a:81:2a:a4:f6:b0:a2:02:8d:dd:26:2d:1a:a6:12:5c:
fc:a6:ba:03:30:9f:0b:5c:ba:c6:ea:ac:57:83:5e:04:d5:08:
4b:2e:82:ae:13:9d:9b:1b:0a:d9:64:52:d0:ae:2e:35:a6:63:
62:77:13:3d:31:d7:df:97:89:b1:d7:35:74:c2:6e:66:93:3d:
c0:eb:4e:fc:1b:c6:98:a9:4e:8f:0b:f7:3f:64:8e:16:5e:1e:
96:56:5b:9c:c7:78:76:c8:fe:bf:e6:dd:1d:79:2f:a9:48:d5:
e9:b9:3a:1a:ed:a0:9d:9a:9e:ac:56:cc:e8:16:e3:42:07:02:
31:14:5d:9d:49:73:e0:09:eb:2b:8c:4f:91:71:9a:d8:ab:74:
a4:3d:d2:31:da:00:89:cb:4a:4c:76:74:1f:d1:05:19:e1:de:
09:77:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:28 2026 by rpki-client