Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: G+oWw8m8kWSi7Tx1AxamutvrodYjmWoAnH/1ucOx8PE=
Subject key identifier: FA:57:87:02:DA:67:44:2A:64:A3:48:BC:EC:4A:57:DF:80:21:37:68
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019CADFE7DF10D539A58B0EEF2B66892D86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0398
Signing time: Mon 02 Mar 2026 10:01:02 +0000
Manifest this update: Mon 02 Mar 2026 10:01:02 +0000
Manifest next update: Tue 03 Mar 2026 10:01:02 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: l2wF9c2MWKQxHakkBwwzOzSTkUxfst1vV+PA57EwsuI=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:7d:f1:0d:53:9a:58:b0:ee:f2:b6:68:92:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Mar 2 10:01:02 2026 GMT
Not After : Mar 3 10:01:02 2026 GMT
Subject: CN=fa578702da67442a64a348bcec4a57df80213768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:39:76:b4:2a:32:ab:dd:de:c6:81:3e:73:
10:41:fe:d7:76:d9:15:13:a5:d1:3b:22:2c:78:e5:
76:a9:d1:3d:74:ac:fa:ff:45:85:1e:89:41:ed:c0:
1d:b2:9d:e4:f5:0b:b6:02:57:62:1f:92:1d:2a:0d:
93:09:1f:33:be:73:10:fe:32:50:fc:fd:41:81:78:
96:ca:a8:71:5e:41:6b:a8:46:e8:22:e9:1e:07:53:
61:1a:79:a2:dd:ec:99:91:d5:e0:7e:34:f4:cc:90:
26:37:bc:9b:a3:c5:95:83:9e:09:7a:f7:5e:7b:54:
55:a0:d0:8b:58:e6:23:ee:ca:93:02:65:a9:41:b0:
dd:71:d2:11:9a:04:42:c4:43:d1:80:72:a0:ce:84:
e7:b4:78:2f:22:35:5f:75:d9:f3:a9:78:c8:9b:e7:
d7:5d:a8:be:c4:f8:ce:30:da:83:2a:f6:49:c2:51:
e1:e9:c1:f9:2f:99:1a:77:16:62:01:fa:0e:34:e1:
06:ba:a3:a1:f7:d2:ed:82:6d:e7:70:38:7d:c1:ae:
ed:b5:f6:d3:65:b4:06:b6:1a:9a:ab:26:2a:51:f2:
1b:ab:3d:17:aa:c8:f8:84:c7:51:d9:3b:de:75:ac:
c1:bb:0c:7c:4a:b1:0c:36:b5:d0:fa:12:6b:89:9a:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:87:02:DA:67:44:2A:64:A3:48:BC:EC:4A:57:DF:80:21:37:68
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d4:e9:b7:ae:48:c7:30:1f:40:41:c0:96:39:8e:d3:e7:96:
0d:e3:d4:e6:e1:50:cb:4b:87:f8:45:da:4e:8f:81:40:41:bf:
91:68:51:de:e2:9f:e1:dc:ec:e4:fd:ca:c5:c5:b7:3d:ca:98:
bb:e0:42:26:4c:fd:86:aa:37:4c:65:15:b7:1c:5a:1d:b6:1e:
2a:d4:a6:96:f6:44:e0:a5:e2:df:1e:c3:67:45:39:73:f7:3c:
08:ae:91:ba:f3:12:88:4d:e8:57:76:cf:7d:41:c6:34:7b:04:
1f:ed:08:9e:5e:be:fd:3b:5b:a7:32:e7:e7:42:c4:0b:b3:15:
8c:29:ef:9b:f7:0d:dc:8d:32:87:1b:59:72:91:49:90:e7:63:
b1:d2:86:6d:93:0a:ce:ea:14:e3:ab:c1:ce:04:97:86:5c:7e:
41:56:94:e0:1a:31:f6:9f:13:32:fc:9a:d7:aa:2d:d4:5b:c4:
37:2c:99:58:7c:ec:9d:59:7a:a7:3b:53:62:b3:a9:b5:99:e4:
65:5b:1b:75:69:24:d3:32:b9:37:3d:43:fa:02:5a:7a:11:3c:
0f:93:aa:73:a9:3e:53:ce:5a:8a:50:37:c1:71:61:db:80:06:
26:5e:16:50:f8:96:06:bb:14:ec:12:7b:c3:ec:2a:5e:a9:87:
89:e4:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:32 2026 by rpki-client