Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: q7C5a9qruWe3kjIIcUStEfWkL64Aj/7jswaYXNF/GLQ=
Subject key identifier: F8:6C:F9:16:EF:9A:E3:C2:B6:D0:83:FA:E2:02:C2:41:36:1C:84:4A
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019D27A937B1A2D7C72302F47089309DD065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 03D7
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: uktBS4w1ZujT4M0LHU5DNusaT55unjXE6Dvr7hAUuXk=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:37:b1:a2:d7:c7:23:02:f4:70:89:30:9d:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=f86cf916ef9ae3c2b6d083fae202c241361c844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:75:03:1b:18:26:17:23:1f:10:eb:2a:99:
90:94:d4:c2:21:24:d7:fe:57:d2:2b:51:8e:b6:75:
cb:c0:a8:8d:e0:5f:b1:73:d6:81:00:da:4e:e1:8d:
01:7c:c2:7f:b5:4d:71:32:8f:3b:52:2e:80:4f:ce:
64:a3:ac:2d:a9:c9:c3:61:20:49:f3:fe:2d:cf:c0:
26:b8:fb:9d:c2:48:c1:92:c2:11:c8:e4:8b:04:b7:
a6:23:e1:ef:d6:44:13:0d:ec:b6:98:8b:91:44:4f:
35:a2:5d:fb:91:f6:e5:76:83:54:d9:e5:34:58:19:
12:8f:e1:4e:70:91:4e:e7:5b:8a:ec:29:b8:45:ad:
87:1d:33:52:71:b2:77:5a:a6:ed:30:b6:7b:e5:29:
da:44:70:e1:f8:b7:9e:29:a3:66:d5:a2:ab:a2:b1:
99:20:1e:1c:71:6f:6f:80:48:cf:4d:92:e5:bb:d3:
7a:59:92:a1:62:6e:0c:01:7c:35:88:31:78:2a:1b:
d8:0d:74:17:11:40:04:4b:42:c7:af:3f:61:d0:b3:
fd:b3:45:5f:67:71:7e:13:76:09:c7:0f:18:8c:e6:
95:ec:35:ca:a2:25:3c:84:01:7a:32:d1:1c:35:c9:
e7:bf:34:f7:b9:93:24:f3:d3:b9:4a:c2:f6:5f:5c:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:F9:16:EF:9A:E3:C2:B6:D0:83:FA:E2:02:C2:41:36:1C:84:4A
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:e6:4d:61:c2:c8:54:f9:0b:43:31:66:cf:25:d4:ce:bc:
73:98:4e:a3:f0:12:6f:ae:a0:2d:c8:fa:1e:f7:a7:fe:40:23:
d4:48:d2:16:12:50:1d:56:2d:75:d2:c8:39:24:03:f2:55:b2:
26:9d:84:54:19:90:59:cd:ae:1a:f8:14:e8:e7:fa:78:82:17:
b7:8b:a6:cc:28:7d:a8:8b:21:f8:1a:04:45:e8:6a:3a:03:87:
0f:b2:bc:00:2f:9d:2b:51:01:19:6b:51:35:d0:0f:e9:44:f3:
b6:24:8c:d3:b1:e9:35:0c:cd:84:86:d9:89:dc:d8:d1:62:39:
99:a6:65:3a:8f:f1:b6:e5:74:2d:12:24:b8:81:96:8e:98:5a:
03:90:d6:73:b5:91:c2:09:d2:df:8c:9f:c6:f0:d9:18:0a:ba:
93:dc:05:c6:31:9b:57:27:2d:1c:2d:21:d9:fb:03:e1:10:2c:
b0:f5:5a:d9:d6:ee:89:d7:53:ff:3a:a6:93:7a:cb:34:33:ba:
1e:28:db:3a:31:a2:f4:0a:89:1b:47:fc:80:00:ec:d4:8d:43:
86:0e:73:c9:04:d1:f4:44:74:93:e6:26:11:4f:a0:79:a6:99:
7a:2a:f3:9b:11:6c:a5:aa:49:11:d8:a1:16:e1:93:35:de:86:
4c:3f:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:49 2026 by rpki-client