Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: mR1BpeSZ/B5Bc5TgMJQS86qXyeDpxse3dc9HwZ8+Jco=
Subject key identifier: C8:D4:02:83:A1:72:46:42:81:FB:2C:FF:0E:C8:03:58:82:B1:A2:00
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 01A1DEA7CE650820C4747656841982E9980E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0648
Signing time: Sun 15 Nov 2026 10:01:41 +0000
Manifest this update: Sun 15 Nov 2026 10:01:41 +0000
Manifest next update: Mon 16 Nov 2026 10:01:41 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: BHcj3WAUVl2XqW0JpHP6c4oHpqk4bANqV4ROqi83e+4=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:ce:65:08:20:c4:74:76:56:84:19:82:e9:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Nov 15 10:01:41 2026 GMT
Not After : Nov 16 10:01:41 2026 GMT
Subject: CN=c8d40283a172464281fb2cff0ec8035882b1a200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:35:44:d6:37:c5:6e:ab:00:39:64:be:ba:
35:47:e9:00:f5:f3:bf:7d:4a:22:31:20:91:6a:46:
7d:d8:1d:49:8e:7a:9a:37:f2:58:96:05:e7:d0:d7:
ba:60:32:ab:9a:6f:1a:f6:40:05:ce:eb:25:59:e6:
93:85:33:48:4f:67:31:e0:6c:5d:7b:c3:56:62:d3:
cf:ec:f4:a8:43:2b:4b:da:9b:3b:bf:36:8d:ba:2c:
ae:a8:e3:1c:03:7c:f5:e4:98:c2:19:db:2e:2d:e2:
e3:f0:96:03:24:d6:9f:c2:1e:49:95:b6:d1:1e:70:
b9:b8:b7:70:4b:13:cb:ea:78:46:28:e9:51:7f:93:
5e:54:84:bb:16:f2:e7:4b:13:44:a7:c3:04:4a:8b:
c3:e0:34:ec:7b:f9:7f:58:21:8f:53:0f:23:fe:ec:
a2:65:ea:98:14:14:11:1a:fc:60:d8:b1:1b:cd:9c:
22:30:e3:1b:ab:d6:a1:71:39:67:53:d4:ef:50:37:
b3:a1:aa:3f:25:07:6b:de:bb:8c:1c:ed:52:fb:ea:
79:83:38:6c:e4:f5:30:f3:7d:cc:16:d3:82:a3:32:
1f:e7:25:78:62:b9:83:6d:a2:df:08:9a:06:a9:6a:
b5:fe:e9:64:82:80:fe:ed:5f:d0:21:46:d9:b2:64:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:02:83:A1:72:46:42:81:FB:2C:FF:0E:C8:03:58:82:B1:A2:00
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:70:c0:13:1f:9c:fb:2d:9c:4f:0f:31:69:2e:eb:dc:f9:46:
52:73:b8:16:22:63:cb:97:0e:73:2c:ac:9a:ed:59:d0:aa:85:
6f:24:54:50:83:c4:9b:32:34:a3:58:21:a4:ab:3c:8e:58:35:
02:b3:93:f0:1d:b4:bb:88:a9:56:b2:69:81:9d:8e:f9:85:1e:
7b:ce:44:85:ad:4c:d2:94:e1:01:0e:3c:8d:96:37:ae:28:ea:
16:6c:8c:99:a0:c7:cb:1d:5a:6f:5f:0e:25:3e:bc:90:f8:42:
83:a8:e7:7a:a7:27:6c:06:49:9e:60:49:66:23:0c:f8:07:fb:
0f:b7:e9:14:92:d6:df:1c:8c:47:8b:3f:a5:28:66:56:46:80:
c4:b9:59:b5:aa:2f:6e:80:9f:65:6a:00:04:da:b4:e6:b0:08:
fd:d2:5d:c4:dd:43:16:5c:c1:a4:0f:7d:01:66:d6:56:61:6e:
dc:1c:57:a1:aa:a2:76:5e:82:e4:5e:5c:f8:25:43:cc:dd:86:
63:af:d4:8a:1c:60:bf:4e:4e:8b:35:71:c5:3e:e3:67:25:91:
69:d7:51:6f:8e:e2:63:bb:f6:b1:b8:b8:36:88:7d:b5:a7:0c:
a9:23:1c:1a:c5:5d:d3:82:0c:b8:21:f3:70:05:ac:f8:1a:19:
4c:1d:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:50:07 2026 by rpki-client