Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: AaNEZ8yXHR+zA/yY4mzGwqGi7NsiefgKS3xoSffkvOw=
Subject key identifier: EE:F0:90:0A:9F:A4:58:EE:F3:C5:53:A1:30:CE:B3:03:5D:29:72:89
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019D3865E8351FFFFC84440FB4AC96613891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 02E2
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: 2bx6Dwp8AbnSDMsmIbFS+TTLeYPdI3LhLvIe9bW26gU=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:35:1f:ff:fc:84:44:0f:b4:ac:96:61:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=eef0900a9fa458eef3c553a130ceb3035d297289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:44:08:78:e6:96:a1:cd:80:8c:cd:6c:e1:
4a:58:66:36:55:3d:4e:0a:40:8c:2e:b0:59:88:f3:
4b:e2:d6:ba:4d:1d:5e:67:c6:d1:9d:dc:c3:82:4e:
45:d1:c5:41:d5:76:d9:36:1e:56:67:e1:4d:fe:34:
b4:e7:32:b2:b9:f7:1e:b5:85:9d:6f:be:5e:24:95:
25:ae:fb:9c:ea:d4:1c:7b:20:06:eb:8f:85:52:91:
4e:de:3b:ac:b3:61:d4:0e:18:f9:de:b2:2f:76:6d:
79:2b:d8:a1:4c:1a:6d:82:92:c4:ff:4a:5d:51:b0:
86:79:02:81:40:0a:74:55:44:c8:7c:8e:cd:b2:fc:
80:16:54:56:2a:6d:d0:62:9b:4c:1b:5f:d1:6f:5f:
91:31:35:00:5f:4f:63:e4:16:9f:bd:70:ad:bf:0f:
4e:16:9d:74:d9:34:f5:f5:4b:36:8d:5e:48:78:04:
66:dc:91:9a:4d:ae:5c:3c:83:d1:2e:a0:6e:56:dc:
50:b4:db:da:10:4a:8a:e3:25:fc:89:b4:d0:bb:a6:
b0:e2:18:46:3a:b3:e2:16:cc:07:08:42:5a:32:de:
4c:47:42:23:2c:53:8c:fb:09:f1:1a:b0:59:db:7a:
c1:29:3f:3c:cf:07:2d:a3:ec:ae:0b:af:0b:01:5d:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:90:0A:9F:A4:58:EE:F3:C5:53:A1:30:CE:B3:03:5D:29:72:89
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3c:55:9d:51:c8:e1:9a:0c:ce:7c:3f:c0:6c:25:76:b9:ed:
18:f7:d0:0d:8d:f8:c9:c9:be:79:f6:7e:2f:16:68:24:44:f7:
d9:15:5f:f7:8d:89:ff:6b:b0:6b:0b:03:b3:42:cc:d9:5c:f5:
30:44:29:44:a2:5d:d1:67:d0:31:32:cd:9c:f6:36:38:0e:02:
49:f6:05:a8:10:09:c7:bf:ec:aa:dd:dd:7d:d4:15:b8:79:7a:
f8:9a:4a:ea:6f:55:29:3e:8b:27:58:d6:29:5b:54:c5:f8:2d:
c6:e2:10:34:7f:68:3e:54:35:e1:55:54:21:a7:68:74:3b:fd:
04:8a:25:fd:8b:23:22:03:e0:b6:ce:80:7f:22:7c:37:a3:81:
58:2a:05:5d:21:a5:51:83:ce:af:a0:1b:78:a8:59:bb:50:2b:
08:a3:55:0f:fe:b5:ee:86:28:19:33:4b:46:dc:35:e9:ca:05:
df:27:de:36:bd:a3:f0:45:6e:b7:f6:a8:62:d5:3d:3c:65:63:
6c:34:86:f2:86:96:25:db:33:73:cc:fc:6e:d8:96:a3:ff:5d:
ab:f7:e3:0e:5a:eb:70:46:7d:d5:2a:6f:51:ff:07:dd:34:66:
87:90:47:5c:9e:09:12:1e:bd:9b:92:82:e4:27:58:a3:e4:8d:
8e:43:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:41 2026 by rpki-client