Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: z9QWDgEWxOvjBeyq9g2dA5j7ur57mCx14G+Wtierm90=
Subject key identifier: 26:EE:74:A7:94:CE:5B:E2:5F:2E:0D:35:EC:23:D1:8E:A4:FA:FA:5D
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01A0D7CD70CA00DDBAB0B78119748B1319A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1579
Signing time: Fri 25 Sep 2026 09:02:40 +0000
Manifest this update: Fri 25 Sep 2026 09:02:40 +0000
Manifest next update: Sat 26 Sep 2026 09:02:40 +0000
Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: QZTwmLXBai0nRvJlYeXpSDhrWM1CP77YCAzgIDnWXPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:70:ca:00:dd:ba:b0:b7:81:19:74:8b:13:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Sep 25 09:02:40 2026 GMT
Not After : Sep 26 09:02:40 2026 GMT
Subject: CN=26ee74a794ce5be25f2e0d35ec23d18ea4fafa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:18:01:8b:dc:61:d1:68:f0:ee:5f:5c:82:
40:21:a9:32:fc:32:a5:52:e3:63:de:2f:78:3e:90:
11:5e:19:0d:08:f9:cd:98:7a:1a:2f:9b:38:9f:98:
af:80:a0:4d:66:be:d2:3f:04:23:35:31:68:83:aa:
6d:e1:ac:a5:63:9d:9a:b3:f1:41:e3:76:36:69:36:
fe:64:32:24:e3:f5:4f:88:2f:31:c1:f9:23:44:c1:
be:b0:8b:86:7a:6e:29:65:5d:c2:d0:45:90:d4:e4:
0c:ec:f5:c4:6b:67:86:3e:de:9c:2d:0e:28:5f:d3:
c8:0a:dd:d3:29:a4:c5:b0:33:a1:e1:2d:28:67:8b:
66:45:3e:04:a3:56:e5:95:1e:04:ab:72:5d:a2:eb:
f5:b3:55:73:68:52:9f:fe:5c:ee:ae:c0:b4:45:33:
06:49:f5:c4:11:2d:9e:eb:5a:c3:49:8e:14:c4:dd:
8d:e4:c4:75:a9:b8:85:ab:5a:7d:9d:ec:19:6b:62:
bb:6a:45:3d:c3:df:06:08:c7:06:8d:fc:09:2f:de:
52:bc:06:fe:2b:79:aa:62:2f:7e:d9:b7:90:ca:50:
b4:29:d3:bc:97:dc:12:f1:3b:62:79:72:2e:13:32:
c5:58:58:41:75:f9:12:ae:d4:82:5d:ab:5d:52:30:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:74:A7:94:CE:5B:E2:5F:2E:0D:35:EC:23:D1:8E:A4:FA:FA:5D
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:80:91:f1:75:fe:98:0e:ba:ec:fd:fe:7d:d4:bb:fe:dd:64:
a3:29:a5:91:a9:7f:65:a4:14:d7:13:b1:70:a9:4d:f4:56:a8:
64:98:ca:67:59:60:54:87:85:95:ef:39:3e:4e:ea:ec:24:74:
09:1d:18:13:09:27:c3:57:25:b6:00:15:13:03:3d:a4:96:09:
62:dc:cb:dc:0c:1f:66:2c:e2:0b:4e:79:39:f6:d4:f5:d7:ab:
3d:c3:50:1c:f9:a1:b4:7b:a8:28:70:88:f7:a8:11:d5:f7:9f:
e2:ac:73:2a:29:88:8f:bd:71:77:26:86:33:0a:34:12:03:fb:
e7:bc:f6:4c:3a:9f:d7:49:5f:dd:43:96:9b:ad:30:cb:69:38:
e8:c7:d6:94:56:67:85:1e:35:c7:3f:c6:ef:3a:e7:53:3b:af:
43:c2:de:7c:f3:bf:49:71:0c:14:99:1a:92:74:c7:7f:52:28:
c6:82:ab:a1:4b:66:77:ef:9b:f4:6a:f7:2d:02:2a:75:e8:8f:
a0:de:48:cf:e1:16:cc:c3:78:5c:46:1b:90:58:50:dc:96:ce:
3c:0b:ed:c4:d5:1d:14:7a:37:f2:1d:98:2c:22:e0:07:81:a9:
18:c3:98:af:d6:9e:e1:05:eb:5e:bc:31:ef:e4:0d:62:41:11:
ba:ef:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:09:17 2026 by rpki-client