Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: LkenMapqzgqGYqt4e1yG2wGVt5SqDU5LE5pzwjN58E4=
Subject key identifier: 9F:D7:04:58:0E:89:B6:37:37:1C:EC:C9:EA:0B:B2:C9:3A:EB:C4:8C
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019F90FF5DDC7CECD51186D82F858F1B1D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 0419
Signing time: Thu 23 Jul 2026 22:01:22 +0000
Manifest this update: Thu 23 Jul 2026 22:01:22 +0000
Manifest next update: Fri 24 Jul 2026 22:01:22 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: R4BXG+P5GLEOsGLS5blJfBcnn0zA80iT9aYj/zq0SMM=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:5d:dc:7c:ec:d5:11:86:d8:2f:85:8f:1b:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Jul 23 22:01:22 2026 GMT
Not After : Jul 24 22:01:22 2026 GMT
Subject: CN=9fd704580e89b637371cecc9ea0bb2c93aebc48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:f5:0c:8c:45:ac:29:de:0c:b5:51:37:06:
fb:7c:1f:e0:48:fd:b6:6f:48:8c:29:93:f0:4d:86:
5a:b6:7e:74:72:a1:08:b9:55:93:46:a8:e3:6b:0d:
d4:1b:82:b6:48:3b:b5:05:44:7f:29:de:e3:08:30:
e2:58:13:b9:ce:02:e7:54:ac:52:1c:63:82:0c:e6:
2e:08:12:c4:e1:af:0d:c2:ea:fb:5e:2e:4b:3a:63:
5b:63:09:3d:37:27:50:b6:a2:a2:b0:99:1b:a5:3d:
d0:cb:31:de:0e:81:26:1f:01:df:3e:da:2c:5b:c5:
20:fa:8e:41:56:ec:c6:7d:9f:d4:ee:4a:c7:8b:8d:
0f:55:03:0a:f9:f8:cf:40:03:7f:b7:dd:24:41:5c:
78:6d:d2:65:29:9f:c8:24:74:80:44:71:c2:07:95:
15:82:7a:57:d5:0a:5f:8b:ad:8d:08:8f:9d:ca:97:
16:6e:6b:48:6e:25:aa:a5:5b:22:65:a1:c8:f5:8f:
92:f2:18:ba:f4:0b:fa:8c:6c:9b:08:86:91:48:18:
8c:31:f6:6f:bd:af:97:f5:46:c1:b0:2c:17:40:f6:
6a:d8:6d:ec:6f:aa:2d:d2:88:10:5d:23:48:2c:14:
ab:bd:5e:e1:6c:60:56:c4:7d:52:37:2c:03:43:eb:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:04:58:0E:89:B6:37:37:1C:EC:C9:EA:0B:B2:C9:3A:EB:C4:8C
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2b:19:3e:59:12:32:ef:43:1e:b6:9d:13:2c:98:c3:ea:24:
5a:f8:af:4a:76:c9:c0:10:5c:03:fb:33:4c:cc:9d:f2:d7:6e:
9c:ff:09:05:2f:e7:8a:a4:48:c8:00:4a:52:54:52:97:ad:bb:
8b:89:10:52:ec:97:d8:94:3b:63:13:83:87:cb:7e:38:af:92:
90:62:f7:f8:17:45:ae:54:11:9b:cc:76:f3:e8:50:f9:19:b5:
f5:09:e0:6a:ee:02:c0:4d:5a:0f:ed:88:7b:9c:74:ea:52:21:
af:3f:49:a1:d4:d1:e4:02:e3:54:41:99:5e:70:c8:0a:6f:fc:
57:c1:f7:07:f0:4a:68:e1:bd:0f:e1:13:10:9c:cf:36:e6:d4:
e5:17:3e:45:03:5e:e3:54:c6:56:44:13:66:c6:52:4d:f9:b2:
89:3a:26:ac:ca:d7:8b:e7:6d:04:d1:6c:4c:59:5e:04:a1:06:
b5:ac:7b:5c:f4:19:92:36:c6:c5:75:33:14:49:4d:7b:c5:37:
b4:20:cd:19:32:08:72:cc:92:cd:7e:75:a2:67:b2:93:9d:50:
ea:06:be:08:99:67:e9:39:31:77:da:81:cf:c1:7b:e1:8a:80:
a7:2b:0b:65:b1:31:b1:bf:a7:96:24:4c:f1:d6:8f:a4:30:9e:
b1:42:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:56 2026 by rpki-client