Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: njWlex8k2Kbox8+AU+2NSDmlgF6YTmL3dXgwANdpK+M=
Subject key identifier: E2:E6:A6:A6:B0:A3:72:C3:4B:1F:1B:47:0B:97:01:A5:29:A6:9E:35
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 01A175BA208EC0A9D0DDBDD5F46A550D052F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 0514
Signing time: Mon 26 Oct 2026 01:01:34 +0000
Manifest this update: Mon 26 Oct 2026 01:01:34 +0000
Manifest next update: Tue 27 Oct 2026 01:01:34 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: PIyjkAy8Js6dVLvagmg4FnB/w15wfow8aF8+nZhwhs0=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:ba:20:8e:c0:a9:d0:dd:bd:d5:f4:6a:55:0d:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Oct 26 01:01:34 2026 GMT
Not After : Oct 27 01:01:34 2026 GMT
Subject: CN=e2e6a6a6b0a372c34b1f1b470b9701a529a69e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:64:f2:ee:a3:18:e1:d0:7a:fc:be:ac:0f:
cb:a8:68:58:06:02:c2:83:d2:29:6d:b2:1b:a6:7e:
ad:6e:3c:ce:ea:94:01:6d:51:99:b8:dd:1a:f4:8f:
a4:15:23:56:07:61:de:64:df:3f:22:b1:2d:94:53:
f7:79:53:ac:3c:54:fe:80:76:15:83:49:cb:4b:06:
7c:68:26:38:4c:0a:8c:de:b1:4e:c2:1b:83:91:84:
f5:65:26:b1:d5:16:2d:b0:99:8a:47:d9:94:37:d1:
7e:c1:53:84:9a:1f:ee:b8:d6:ca:cf:76:77:e4:e9:
57:a9:99:a8:ca:60:36:82:ef:d9:b0:86:72:f5:28:
50:3d:e5:66:c2:ee:86:0d:d5:2e:6f:96:e9:c6:41:
03:88:8d:bf:6d:5f:43:62:8f:c9:4c:c4:37:96:49:
c4:fb:83:66:0d:81:06:63:a6:18:fd:ac:d4:2f:b8:
34:43:07:2a:7e:79:73:5a:b6:1c:f2:b8:3e:41:c7:
84:13:2c:4b:7c:a0:f8:08:9e:10:dc:eb:cd:f7:2d:
e6:bc:48:4f:91:12:e4:90:dd:b0:57:65:e6:d4:7b:
af:72:08:a1:71:fb:7f:17:c5:ef:ed:22:08:04:8e:
f0:f1:49:25:e2:96:c6:02:4e:83:3e:eb:b9:3f:66:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E6:A6:A6:B0:A3:72:C3:4B:1F:1B:47:0B:97:01:A5:29:A6:9E:35
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:da:a2:c3:34:d8:90:9f:4b:7d:c1:98:a0:2c:7e:f5:be:
fe:3a:fd:b7:1b:3f:b9:86:96:c2:fd:98:78:9c:75:a6:0c:aa:
29:ed:f9:6f:88:dc:20:1e:d9:58:38:8f:d9:3c:52:9b:a8:d2:
3a:a7:97:87:fd:7d:c3:cb:e5:9d:18:ca:61:b4:91:3e:fa:05:
67:37:d5:8a:b8:84:01:e2:d2:bb:a7:02:86:dc:77:5a:f5:32:
99:0b:3f:ee:0c:42:22:78:6d:4b:ac:51:4d:46:6a:40:82:56:
78:5b:57:4b:da:31:0e:41:19:1b:c1:c0:74:33:2a:43:fd:9c:
7e:4f:c6:f7:11:a1:4d:a9:2c:cd:de:36:f1:cc:d2:61:6b:72:
8c:87:f5:18:e7:e4:a2:66:96:2a:a7:61:dd:95:f7:a6:9c:68:
59:23:ca:03:f1:05:d9:d2:59:bb:25:8b:33:3f:41:48:e4:21:
dc:7f:b8:6e:30:35:f0:1b:3b:09:03:eb:63:fa:05:97:11:89:
e6:74:93:73:20:58:48:38:04:f0:f5:99:96:6f:3f:4c:67:d3:
2c:ed:f2:ca:af:02:17:72:c6:c7:9a:83:b0:93:28:e5:a4:3b:
15:87:6f:f5:69:18:df:2e:45:c0:8a:b5:a5:4d:ad:3a:9b:91:
96:9d:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:41:30 2026 by rpki-client