Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: 3WaTEEmH5nnXnBletgbIi1bL8BrxcrFJjoTy/+BYXGI=
Subject key identifier: 35:3E:C2:D6:B6:8B:68:7E:DF:E7:08:87:D6:B5:C6:F4:C5:25:8A:4A
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019D99996A1A747749B31C6F01068AE8443D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0412
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: YEcqp6Mwdvbs3DXgMzaF6g48+xcp3AlNKsFjpHpGOzs=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6a:1a:74:77:49:b3:1c:6f:01:06:8a:e8:44:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=353ec2d6b68b687edfe70887d6b5c6f4c5258a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:ad:23:b3:6b:f5:a1:e7:16:1c:3c:e1:c2:
6a:83:06:5c:ce:21:f8:63:7e:e8:ef:77:c5:81:9c:
95:0c:33:51:39:b9:6c:e0:34:a2:05:cb:44:03:8b:
46:8a:94:b5:86:12:7e:c1:29:44:dc:11:fa:fa:23:
24:4b:e4:e3:0f:cf:db:d8:17:88:cf:cc:9a:89:65:
b2:05:29:fa:67:70:3e:2e:04:db:cd:7e:61:2d:70:
94:5a:bb:eb:64:47:8e:f5:95:19:3e:a2:43:81:ce:
66:5b:fd:4a:d2:de:ad:4d:27:2b:a1:a8:0d:2d:88:
3a:be:5b:bc:1b:d2:aa:d0:5e:52:8c:74:4c:c7:0c:
97:87:a1:ae:71:91:e7:dd:09:1f:1d:33:bc:cf:97:
08:77:14:3f:ab:01:b7:ba:6d:21:56:3d:4e:d3:74:
03:dc:b2:e2:2b:89:51:d4:7a:13:c7:e1:f5:8b:03:
ff:3a:34:71:b1:d2:51:56:14:2f:c2:4e:e4:72:1e:
de:29:6b:58:ff:68:66:57:16:36:14:40:1f:18:f8:
f9:ee:14:ac:0c:13:c6:35:d0:0f:18:af:95:7b:d3:
71:a6:b9:d0:04:80:b1:20:ce:10:e6:02:29:33:5c:
72:92:88:8e:03:a8:37:be:2e:fb:99:de:9a:11:53:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:C2:D6:B6:8B:68:7E:DF:E7:08:87:D6:B5:C6:F4:C5:25:8A:4A
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:45:90:49:fa:e4:60:03:d7:a7:8f:93:f3:90:58:ac:4c:
ed:a6:e5:b2:d0:1d:ab:8a:61:62:3c:5f:16:8c:16:22:c5:df:
3f:9f:84:c2:34:5c:df:a2:52:83:c6:24:82:18:0c:7a:80:1c:
b1:1d:85:8a:c9:8e:5e:77:36:2f:0c:09:e8:8f:83:d3:7e:c8:
39:77:4e:a6:24:f4:1d:f6:2d:56:b8:26:b8:e2:8c:44:64:0e:
17:05:e3:05:ff:29:fe:74:93:d2:32:9d:c9:b7:21:29:4f:14:
45:30:fe:52:f8:1a:5e:54:10:39:56:4c:d9:f2:33:d9:f5:73:
e6:e5:31:a5:b7:be:c3:56:9c:a4:5b:d6:0d:40:01:60:0f:e1:
40:13:a3:cb:42:dd:11:4c:36:2a:7c:c4:ad:1b:8a:eb:3e:22:
87:90:84:ce:9f:3f:af:94:6c:00:ab:da:00:b0:de:47:c7:28:
31:91:81:84:3e:3d:59:53:ec:3a:60:73:f8:c6:e1:20:b2:f5:
e6:b3:6e:f0:74:69:e2:43:c2:34:60:52:8f:97:49:eb:82:cb:
48:ce:9d:d7:28:27:a6:4c:23:89:93:2d:f0:3e:83:a1:c8:38:
64:a6:f2:8a:49:55:72:2d:bc:97:ed:cc:57:fe:29:03:71:7e:
34:4f:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:21 2026 by rpki-client