Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: HBLKjX49q5a3JRpF16NqPNR1tnf6EHRxH8zhkDt7xwI=
Subject key identifier: F6:EF:4A:5A:CC:8B:30:E2:55:4E:44:B2:20:67:61:78:46:6D:7E:82
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019FAABEBB3FC44C68A19F735B23E29CE380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0524
Signing time: Tue 28 Jul 2026 22:00:54 +0000
Manifest this update: Tue 28 Jul 2026 22:00:54 +0000
Manifest next update: Wed 29 Jul 2026 22:00:54 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: 7KTkqDQ+cYnkCXghwNlidLdpWhWVlPqQjn5ey1gL2o4=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:bb:3f:c4:4c:68:a1:9f:73:5b:23:e2:9c:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Jul 28 22:00:54 2026 GMT
Not After : Jul 29 22:00:54 2026 GMT
Subject: CN=f6ef4a5acc8b30e2554e44b220676178466d7e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:e8:5c:6a:8a:50:c9:39:f8:e2:27:6a:4b:
37:bc:de:c7:ca:f7:04:c3:5b:36:3b:f3:5b:b9:1c:
28:a1:c0:91:4d:66:a6:c5:8d:1b:1e:db:43:37:18:
72:d1:2b:c9:33:f2:d4:bf:59:94:2e:90:97:e7:1d:
72:93:fd:3e:b4:fd:19:a8:6e:f2:1e:8d:5a:a8:22:
6e:33:bf:9a:88:99:31:35:7e:01:7c:1f:fb:01:72:
47:26:62:5d:81:25:cc:79:a6:74:ff:e3:71:5e:62:
3f:da:36:b7:06:db:57:ed:14:ad:db:79:a4:c5:d9:
90:e6:d5:90:d9:8c:8d:ca:76:d1:87:52:d5:94:50:
aa:f9:41:ad:e4:04:36:a4:f8:c2:bd:51:f8:e8:60:
0d:35:bf:04:fe:90:33:3a:72:91:ba:d6:46:0c:16:
78:a3:e3:4b:04:4c:43:d1:f2:cc:55:07:02:26:ba:
e1:d8:9e:56:38:38:05:f8:9a:7b:32:48:8f:f7:af:
ab:d3:90:6a:ab:23:90:60:b3:dc:3d:19:8f:30:11:
0a:d7:29:46:be:2b:1e:e4:f1:bd:9b:7e:b7:a9:85:
08:25:0f:26:98:74:d7:9f:1e:70:56:39:54:73:bd:
3b:dc:7f:e5:f9:a7:0f:09:3c:79:36:9d:ae:6e:cb:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:4A:5A:CC:8B:30:E2:55:4E:44:B2:20:67:61:78:46:6D:7E:82
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:33:06:61:cf:0a:60:71:68:bd:d7:33:90:34:fc:7c:02:83:
15:92:90:58:99:dc:8a:08:11:0e:27:f0:f8:e3:af:4e:3d:09:
0a:ae:b3:6f:c7:10:a0:5d:af:d2:6b:dc:31:43:e3:cb:3d:62:
59:9e:66:ad:26:2a:62:ea:70:97:6c:5a:0d:4f:2d:09:53:b1:
ab:bd:94:5c:bd:bf:37:a6:88:7d:3b:34:72:fb:49:55:74:ac:
c7:d5:92:c3:d1:e0:e0:d8:e4:8e:9e:dc:32:6f:c8:b2:2a:6f:
d0:94:53:df:08:50:34:31:e9:d6:fe:04:72:d6:7a:5d:7a:eb:
38:26:72:f8:35:da:b0:3c:d7:9f:73:58:d3:26:0e:34:e2:80:
f9:57:b9:f3:cd:6c:cf:d1:1f:fe:dc:b2:17:ce:8c:bc:34:05:
19:13:fe:fc:6d:ae:fc:8f:92:65:1d:12:70:06:99:26:05:1b:
d7:f9:f1:8e:ca:ee:b3:cd:f0:fd:04:8f:f1:cd:bf:5c:34:b4:
48:19:19:25:18:43:52:8e:29:b1:47:96:71:67:35:0f:9b:4c:
10:a5:c4:cc:bc:ab:3a:e8:2f:49:ce:f8:34:94:d7:78:e7:85:
05:2c:ad:30:7a:48:cc:f3:5d:8e:c3:97:5e:2e:6e:83:b2:0d:
74:f8:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:52 2026 by rpki-client