Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: ZvEhU446nie19x8Lm/fgfVAHPpguowSoxiz3xEemJck=
Subject key identifier: E4:FB:E5:85:05:E3:98:DF:4B:06:43:C5:0D:28:A9:2F:C5:A8:89:31
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019CAC10239FEC934199EDFE886521124A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0397
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: Wo36CvWe5K7eewljAWgC5PmShCbHSbQCT1Ni5dY0pwI=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:23:9f:ec:93:41:99:ed:fe:88:65:21:12:4a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=e4fbe58505e398df4b0643c50d28a92fc5a88931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:94:95:60:cf:af:45:fc:94:17:8c:58:fb:
e2:84:08:c7:07:6d:c8:3b:17:df:80:a9:db:c3:b4:
90:01:7b:ce:2e:ad:1d:c9:12:08:8e:79:4f:c9:06:
64:6a:5d:ea:f1:c7:97:b0:81:c5:06:cb:d9:04:53:
9a:36:a1:6f:80:a4:68:c1:87:86:ba:e7:ca:0b:06:
d2:a5:2a:0d:ae:e9:41:5c:fc:14:95:f1:8c:3a:90:
7a:92:17:96:77:f8:32:46:f1:25:76:e5:5f:f4:2f:
eb:b1:6d:62:ec:39:76:58:23:11:b9:d9:68:04:7e:
90:ab:3b:0b:f5:f7:94:e0:4d:8b:89:a0:60:d9:8a:
b7:39:d3:f4:30:6a:b6:c6:d6:78:ff:10:88:c0:8a:
75:56:40:68:02:06:ba:0a:08:65:ca:57:8c:3e:e5:
b0:35:b6:1c:d6:86:23:1e:c8:25:57:46:c5:68:23:
f7:10:0c:30:ea:8c:e4:b7:68:15:a2:71:6f:fd:d3:
59:64:fb:ae:00:b0:aa:21:8e:2a:33:03:a7:41:7a:
9a:65:49:f4:59:44:48:84:b9:17:fb:0a:12:6f:9e:
86:46:da:be:5b:1f:84:ea:52:05:01:ca:12:4f:bb:
3d:9d:b8:63:70:ef:e9:64:43:70:3f:2e:10:c7:4c:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:E5:85:05:E3:98:DF:4B:06:43:C5:0D:28:A9:2F:C5:A8:89:31
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bd:77:f7:07:34:f5:03:e7:4b:ea:3a:5e:a9:df:59:c4:ad:
ac:4f:ae:59:4e:b5:1a:80:db:61:de:ac:bf:be:82:7f:54:0c:
93:e6:ae:97:bd:45:3c:de:a7:ba:02:a3:6f:96:e5:3d:8b:6c:
16:34:3d:d6:98:83:ec:cf:3a:b7:fe:1d:e7:9c:9a:80:64:e9:
ec:83:cd:40:b0:8e:67:b5:5b:08:ea:09:19:a0:91:5e:f3:57:
04:1a:3c:52:82:9c:06:f8:65:34:32:83:0a:55:5c:5a:84:5d:
69:1a:6e:64:f4:85:bf:b0:38:24:7a:4b:75:8a:3b:a5:a7:31:
0d:08:bd:e0:b8:4e:53:a0:c9:61:1f:f0:20:bf:64:af:4f:07:
92:f3:a8:71:79:ae:3c:6d:bc:bb:dd:70:e6:78:8c:f9:cf:73:
4b:de:df:35:a7:61:be:50:da:d0:63:c5:4c:0b:72:bf:15:e4:
41:fe:f2:b1:f9:7e:03:64:69:77:fc:6f:d2:ae:af:7f:1f:8a:
f2:cf:54:d3:18:fa:82:09:28:13:54:53:aa:19:56:eb:d8:ce:
1f:f9:72:39:b8:b8:b1:ff:87:50:50:5e:38:34:13:fd:bd:7d:
e1:56:c2:32:31:5d:7a:de:d2:ea:63:5e:ea:f6:36:35:99:43:
dd:17:0b:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECOf7JNBme3+iGUhEkpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQ3MmMzZjAwNGIwYjcxZjExOGU4NzJiOTgzOGE0ZTBj
NzIxYzcwHhcNMjYwMzAyMDEwMTA0WhcNMjYwMzAzMDEwMTA0WjAzMTEwLwYDVQQD
EyhlNGZiZTU4NTA1ZTM5OGRmNGIwNjQzYzUwZDI4YTkyZmM1YTg4OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdqUlWDPr0X8lBeMWPvihAjHB23I
OxffgKnbw7SQAXvOLq0dyRIIjnlPyQZkal3q8ceXsIHFBsvZBFOaNqFvgKRowYeG
uufKCwbSpSoNrulBXPwUlfGMOpB6kheWd/gyRvElduVf9C/rsW1i7Dl2WCMRudlo
BH6QqzsL9feU4E2LiaBg2Yq3OdP0MGq2xtZ4/xCIwIp1VkBoAga6CghlyleMPuWw
NbYc1oYjHsglV0bFaCP3EAww6ozkt2gVonFv/dNZZPuuALCqIY4qMwOnQXqaZUn0
WURIhLkX+woSb56GRtq+Wx+E6lIFAcoST7s9nbhjcO/pZENwPy4Qx0wdOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOT75YUF45jfSwZDxQ0oqS/FqIkxMB8GA1UdIwQY
MBaAFKckcsPwBLC3HxGOhyuYOKTgxyHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2Qt
ZDhjOTUwY2FjYWI1LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2QtZDhjOTUwY2FjYWI1
LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL139wc0
9QPnS+o6XqnfWcStrE+uWU61GoDbYd6sv76Cf1QMk+aul71FPN6nugKjb5blPYts
FjQ91piD7M86t/4d55yagGTp7IPNQLCOZ7VbCOoJGaCRXvNXBBo8UoKcBvhlNDKD
ClVcWoRdaRpuZPSFv7A4JHpLdYo7pacxDQi94LhOU6DJYR/wIL9kr08HkvOocXmu
PG28u91w5niM+c9zS97fNadhvlDa0GPFTAtyvxXkQf7ysfl+A2Rpd/xv0q6vfx+K
8s9U0xj6ggkoE1RTqhlW69jOH/lyObi4sf+HUFBeODQT/b194VbCMjFdet7S6mNe
6vY2NZlD3RcLtQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:42 2026 by rpki-client