Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: I58XQcojAqzAVybo5QvT/PfN/7bmxwMye+UNoKMsBvA=
Subject key identifier: BA:9F:85:04:22:C4:59:1C:BA:2A:40:DF:C5:36:68:E9:E0:8A:C1:B7
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 01A0D6147726FACBC1FA80EC7574F8F53FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 05BF
Signing time: Fri 25 Sep 2026 01:01:00 +0000
Manifest this update: Fri 25 Sep 2026 01:01:00 +0000
Manifest next update: Sat 26 Sep 2026 01:01:00 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: VwJFYdQbvTF8EnecFzUErelW04EWQmenL+2Jz70CGyQ=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:77:26:fa:cb:c1:fa:80:ec:75:74:f8:f5:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Sep 25 01:01:00 2026 GMT
Not After : Sep 26 01:01:00 2026 GMT
Subject: CN=ba9f850422c4591cba2a40dfc53668e9e08ac1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:85:ee:10:c1:6b:f1:44:1a:d5:c4:10:35:
33:cd:70:38:da:4a:e1:49:24:32:8d:c2:fd:8b:4d:
3d:03:f1:18:c7:3c:df:e5:71:f0:8e:24:d7:93:11:
0f:3c:5f:42:c5:32:13:d2:55:d9:c8:c0:fa:b9:3b:
b1:bc:a6:f5:23:dc:e1:09:f1:7e:c4:e3:6a:6b:26:
2d:18:7f:11:88:c0:82:0e:28:57:a8:01:b4:32:0c:
3f:ca:46:95:b3:97:0e:0a:40:05:ef:02:65:47:c5:
6d:78:e5:a5:9d:0a:b1:b6:56:43:2f:b4:30:e8:74:
88:ec:ee:45:f2:47:57:9f:40:a9:75:c4:92:07:b3:
8c:87:ac:74:a7:ae:c3:42:43:68:d2:c6:93:b3:50:
38:6e:0e:6a:89:d4:a1:71:9e:84:23:69:c0:72:ab:
e7:85:04:5f:01:92:b5:4a:09:b8:1b:39:ef:1f:ea:
25:9f:8c:73:20:d4:a6:7a:10:58:24:b8:cd:cf:59:
58:20:ad:5e:82:3b:d2:3a:b1:1e:71:bc:dc:fa:bf:
ac:65:f9:65:d1:72:73:c4:e7:30:b3:03:db:d3:19:
e3:27:1f:aa:63:60:37:02:01:52:ab:2a:43:53:cd:
0f:1a:ce:14:bf:3f:e0:69:d4:c7:72:7f:92:ba:22:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:85:04:22:C4:59:1C:BA:2A:40:DF:C5:36:68:E9:E0:8A:C1:B7
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:f2:24:51:3e:9f:19:dc:2a:e5:64:1d:a8:93:2c:8f:54:
73:e9:c6:ea:ca:73:3a:70:4b:2e:50:7e:39:2a:43:f1:6e:15:
d0:8a:71:79:8f:45:b5:b6:ac:07:7c:fd:fb:c1:83:53:2b:8f:
77:3a:09:62:da:bb:a8:44:06:bc:11:f5:39:b5:01:a9:a4:49:
0b:cc:59:c7:c0:4c:eb:da:83:9f:f5:0d:c2:11:af:02:7c:c6:
14:02:ce:6d:82:25:7f:4f:e0:d3:6f:9e:4d:d7:28:c8:5a:e9:
67:2a:90:d1:87:53:d0:8c:40:39:6e:fd:8a:33:8c:66:48:5e:
9f:5a:5b:0a:ed:65:8a:79:25:fe:04:2f:55:40:aa:a9:17:b4:
1a:0f:d7:f1:db:16:ce:6f:02:60:45:d1:b2:e8:5d:be:23:b0:
5c:60:ae:4d:9f:56:dd:7d:5e:16:bf:b1:ac:15:87:70:fa:c4:
6e:ed:86:29:c9:1d:cf:f8:ef:8c:bc:ad:51:9b:23:5c:32:fb:
e4:63:8e:cf:81:e9:8f:ea:a7:db:99:8b:c1:25:dc:78:c2:2e:
99:72:1f:a3:6d:f8:2c:89:c6:bc:64:8e:51:3d:20:f6:2e:d4:
a7:b8:63:27:99:b3:b1:7a:f4:10:1e:75:ee:96:d2:f8:50:5d:
fe:af:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:13:54 2026 by rpki-client