Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: iQ4lb3tE49NJKvMOluh2kUKfBImus2O8x0A8elPNYUo=
Subject key identifier: 37:60:2B:30:DB:82:4D:82:43:46:BE:64:BB:53:D7:38:14:CA:70:23
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019E1EDA60409541AA0805C4BF01EC4E002B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0457
Signing time: Wed 13 May 2026 01:01:28 +0000
Manifest this update: Wed 13 May 2026 01:01:28 +0000
Manifest next update: Thu 14 May 2026 01:01:28 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: Pg+8o864ZzoJ+FQRGIozmRNkxQXJKtxuPSIKsrV2yrw=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:60:40:95:41:aa:08:05:c4:bf:01:ec:4e:00:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: May 13 01:01:28 2026 GMT
Not After : May 14 01:01:28 2026 GMT
Subject: CN=37602b30db824d824346be64bb53d73814ca7023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:53:df:43:6c:0b:f6:13:91:d9:17:67:0e:
1e:00:8c:6b:8e:ee:5a:ab:54:65:fc:cf:b9:ce:01:
fc:91:d2:a1:eb:bd:b5:e7:da:e3:b6:5b:e6:72:17:
1e:80:66:49:48:c7:c4:98:6d:a1:9d:08:ad:3d:f3:
73:d0:7e:06:60:62:4f:18:41:0b:1a:42:2b:0d:65:
40:9e:a3:aa:71:06:16:51:b1:f9:d2:23:ed:74:e0:
a6:66:ba:3a:61:5e:ca:9b:50:6a:c6:6a:ea:fc:a1:
8c:c8:a7:82:61:4f:5d:00:70:7f:23:a9:e9:ab:8e:
78:35:fe:e5:83:36:1c:95:27:49:6b:68:b9:d1:dd:
7f:63:5a:02:ae:b2:65:ee:83:b7:8a:34:78:fc:aa:
45:26:01:ac:01:31:98:1e:eb:18:99:dc:41:a4:1f:
a1:b7:d5:4f:fa:c2:11:ff:d2:1d:91:fa:46:a7:1d:
5b:10:6a:cf:c8:e1:be:6b:97:ec:0e:22:b2:0a:d4:
b1:6a:a7:ab:49:38:01:57:35:4d:5f:dd:4a:73:a1:
93:e8:df:11:ac:60:56:e1:dd:67:de:2d:0f:68:b0:
f9:d9:7b:84:b7:5c:7c:68:58:af:00:73:b4:04:f7:
36:76:e9:b3:c1:14:da:24:53:89:31:79:de:42:58:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:2B:30:DB:82:4D:82:43:46:BE:64:BB:53:D7:38:14:CA:70:23
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d3:30:2a:12:61:b7:50:fe:6d:ba:b5:60:94:88:de:b9:d8:
c4:db:6b:40:72:38:0a:6f:d3:d5:c0:90:a9:d9:94:6a:98:12:
e9:5c:1b:67:f3:28:23:87:8d:41:52:19:60:9d:c8:dc:91:d0:
a5:b0:13:21:a4:da:68:22:19:fd:e5:27:d9:ab:34:95:a2:38:
d2:8d:bd:69:05:8d:9c:74:c3:f0:cf:46:f9:d5:3a:e9:c8:6c:
6d:a4:78:13:19:e7:20:57:0b:e4:a7:78:53:44:b3:7e:f1:01:
ff:f0:fe:ea:ea:fd:10:4f:6f:ba:d4:d0:b9:b6:4c:ed:35:45:
fe:41:15:27:74:e3:05:e7:ba:10:81:16:6c:2e:5b:cd:c5:14:
98:3e:57:45:4c:27:05:22:1b:24:ee:b2:36:67:98:e9:83:6e:
b5:0d:a9:39:a1:36:d9:51:e2:ca:72:4d:34:3b:84:ea:5e:30:
38:6d:9b:e5:60:f8:07:4a:58:da:5b:c4:b0:9b:c0:ca:61:0a:
97:20:86:40:ed:33:09:08:a6:fc:af:67:54:e2:af:ef:59:db:
2c:3c:44:fb:6d:b1:5a:94:4f:b6:35:ea:fb:8d:6a:b4:62:f9:
5a:11:4d:60:68:54:f6:61:07:32:b3:fd:86:a6:8a:0d:ec:c7:
b6:49:ed:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2mBAlUGqCAXEvwHsTgArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQ3MmMzZjAwNGIwYjcxZjExOGU4NzJiOTgzOGE0ZTBj
NzIxYzcwHhcNMjYwNTEzMDEwMTI4WhcNMjYwNTE0MDEwMTI4WjAzMTEwLwYDVQQD
EygzNzYwMmIzMGRiODI0ZDgyNDM0NmJlNjRiYjUzZDczODE0Y2E3MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOBT30NsC/YTkdkXZw4eAIxrju5a
q1Rl/M+5zgH8kdKh672159rjtlvmchcegGZJSMfEmG2hnQitPfNz0H4GYGJPGEEL
GkIrDWVAnqOqcQYWUbH50iPtdOCmZro6YV7Km1Bqxmrq/KGMyKeCYU9dAHB/I6np
q454Nf7lgzYclSdJa2i50d1/Y1oCrrJl7oO3ijR4/KpFJgGsATGYHusYmdxBpB+h
t9VP+sIR/9IdkfpGpx1bEGrPyOG+a5fsDiKyCtSxaqerSTgBVzVNX91Kc6GT6N8R
rGBW4d1n3i0PaLD52XuEt1x8aFivAHO0BPc2dumzwRTaJFOJMXneQlhspwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdgKzDbgk2CQ0a+ZLtT1zgUynAjMB8GA1UdIwQY
MBaAFKckcsPwBLC3HxGOhyuYOKTgxyHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2Qt
ZDhjOTUwY2FjYWI1LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2QtZDhjOTUwY2FjYWI1
LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNMwKhJh
t1D+bbq1YJSI3rnYxNtrQHI4Cm/T1cCQqdmUapgS6VwbZ/MoI4eNQVIZYJ3I3JHQ
pbATIaTaaCIZ/eUn2as0laI40o29aQWNnHTD8M9G+dU66chsbaR4ExnnIFcL5Kd4
U0SzfvEB//D+6ur9EE9vutTQubZM7TVF/kEVJ3TjBee6EIEWbC5bzcUUmD5XRUwn
BSIbJO6yNmeY6YNutQ2pOaE22VHiynJNNDuE6l4wOG2b5WD4B0pY2lvEsJvAymEK
lyCGQO0zCQim/K9nVOKv71nbLDxE+22xWpRPtjXq+41qtGL5WhFNYGhU9mEHMrP9
hqaKDezHtkntKw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:08:23 2026 by rpki-client