Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: 6f6+Z9qOm2l9w/xqjr237Hkser1f4Cr3xONANPcQy7Q=
Subject key identifier: 96:0B:B4:46:8E:4C:B2:00:44:F6:33:3E:F4:A0:CE:96:80:31:9D:40
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 01A0569F11B958A3D2AC51BFA5CC7E39298F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 057D
Signing time: Mon 31 Aug 2026 07:01:00 +0000
Manifest this update: Mon 31 Aug 2026 07:01:00 +0000
Manifest next update: Tue 01 Sep 2026 07:01:00 +0000
Files and hashes: 1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: Axgi/iokLZh/15MZ7QNpRSn++BtFASlFXaqhRvftFN8=)
3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:9f:11:b9:58:a3:d2:ac:51:bf:a5:cc:7e:39:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Aug 31 07:01:00 2026 GMT
Not After : Sep 1 07:01:00 2026 GMT
Subject: CN=960bb4468e4cb20044f6333ef4a0ce9680319d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:8a:a8:94:5b:4a:54:2e:fa:62:b2:ac:ec:
29:0a:4a:65:1b:e1:a1:63:21:ca:1d:77:f2:5d:c5:
e1:0d:f0:5a:2a:cd:e6:3d:8b:01:2f:88:66:99:dd:
16:02:0a:3e:fd:ce:c7:ae:31:be:5a:0d:da:07:17:
c0:1f:a2:19:91:f2:89:90:ab:4d:3f:1e:24:da:78:
b5:97:34:39:41:84:0d:82:c8:12:d7:56:38:e3:fb:
c6:63:94:3d:92:31:15:5b:6e:32:3b:14:69:40:f5:
86:2a:99:a3:6a:5e:80:4a:16:c5:b6:15:37:b5:ce:
01:d5:49:cc:7f:4b:b9:7b:95:8e:41:e5:3a:c2:2b:
c5:9c:88:16:93:52:08:fa:f8:34:c3:9b:2b:9c:2f:
42:eb:c2:19:65:24:02:e4:2b:73:61:8b:02:5e:30:
35:8b:a6:03:0c:fb:ef:b2:96:e9:41:e5:b9:1b:f3:
0b:42:c4:f3:3c:22:e6:ef:df:77:00:64:d4:e2:22:
5c:47:2a:e2:7e:8e:96:31:8f:9a:67:71:98:13:82:
96:12:6a:50:23:18:91:e1:1b:ed:85:85:ec:90:77:
58:9d:39:c1:2c:3c:7e:58:ec:58:18:ee:31:58:5c:
6b:3e:09:ca:83:32:6e:cf:c8:6e:87:db:86:1d:ce:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:B4:46:8E:4C:B2:00:44:F6:33:3E:F4:A0:CE:96:80:31:9D:40
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d5:bd:c4:a3:79:41:12:51:12:7e:92:92:fc:cf:70:61:2b:
88:1f:ed:5f:b4:f9:0d:5e:26:24:e1:22:9d:8d:c8:13:cc:19:
89:f4:7d:55:7d:47:77:eb:f4:b0:b4:38:36:f5:8f:81:22:85:
c8:c1:55:8e:14:33:9c:40:4f:89:9f:5b:58:42:77:70:93:53:
c7:bc:93:1a:29:ba:55:83:92:0b:36:9b:90:cf:77:c3:a9:d9:
44:a3:ee:d2:96:83:00:b5:42:91:f0:99:fd:10:fc:0f:85:94:
a8:f1:25:ac:10:43:3b:18:93:09:86:b4:30:db:57:64:76:e1:
94:e3:85:23:31:15:b2:c9:80:67:4a:e2:6d:22:f6:1b:a5:41:
45:b2:d6:a7:96:9e:c9:b3:03:b1:72:c0:8c:af:40:c4:b4:bb:
f4:aa:5b:0f:6a:ca:30:81:d4:06:71:cc:b6:06:3d:fb:72:a5:
6c:18:73:6b:ef:8b:82:23:c0:82:47:7a:2f:ab:8f:6d:fe:0f:
7f:5e:84:b1:f4:b9:c8:01:17:b7:69:50:4e:c4:27:ef:6b:68:
5d:f0:0e:de:59:55:4b:aa:c5:13:9a:be:66:18:9c:12:81:88:
a7:58:69:9d:23:bc:1d:27:41:9a:66:94:22:b0:15:df:9c:b4:
28:30:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:12 2026 by rpki-client