Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: HZ+UPEgq3xLDI4krFHp62YqGUe5uzmB0QjHyzVQB5Fs=
Subject key identifier: 21:96:70:1C:89:A1:72:9F:D8:10:76:FD:5D:B6:0C:9E:03:2D:93:F3
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019EB8B445EDE9B9791B485DD8E941E8B4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 03A9
Signing time: Thu 11 Jun 2026 22:01:22 +0000
Manifest this update: Thu 11 Jun 2026 22:01:22 +0000
Manifest next update: Fri 12 Jun 2026 22:01:22 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: Tb2st3VBBHao87i7hanpNhbdnNyzDYezoPvMWnwHTqk=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:45:ed:e9:b9:79:1b:48:5d:d8:e9:41:e8:b4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Jun 11 22:01:22 2026 GMT
Not After : Jun 12 22:01:22 2026 GMT
Subject: CN=2196701c89a1729fd81076fd5db60c9e032d93f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:4b:b4:6b:0d:45:c1:26:f7:16:fa:62:c9:
d8:dc:13:91:fe:60:2c:48:60:ba:ca:03:56:c0:08:
d9:3e:ff:d9:8b:12:5f:b4:68:ab:4b:50:79:e4:7c:
5b:53:e2:97:f9:7c:4f:20:63:77:bd:07:db:bf:45:
f6:e4:68:84:2f:b8:a5:3e:05:f3:ad:7c:53:c2:f1:
de:e6:f8:58:69:f4:ec:7f:c4:9e:d9:b0:16:68:61:
6c:01:41:86:42:67:f1:73:1b:88:a1:e9:5e:9b:10:
bb:2b:69:a9:11:ad:87:5b:c7:47:af:a3:df:d9:99:
86:66:23:6c:91:55:00:78:a0:4f:fe:e1:e1:b4:97:
1b:1a:00:71:9d:bf:97:73:49:3b:f2:30:67:9c:52:
27:92:47:32:0a:cb:b7:b5:c6:76:2b:47:fc:6f:e8:
c3:88:b8:fa:2a:d2:a0:fa:5b:ca:e7:88:40:11:e0:
25:f1:93:c6:c1:5d:14:9b:a0:73:79:cd:41:71:4c:
aa:85:e0:aa:bf:8a:56:d5:3f:fd:88:c2:35:a4:b6:
8b:f0:03:62:88:c9:f0:1c:98:1d:64:4f:af:ea:3a:
48:3f:d6:a7:53:20:f1:f6:b3:08:74:42:7e:9f:af:
55:81:76:3a:52:d0:64:f8:ac:da:6a:1d:36:17:57:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:70:1C:89:A1:72:9F:D8:10:76:FD:5D:B6:0C:9E:03:2D:93:F3
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:94:70:2f:9c:ec:8b:ec:1a:3b:75:37:4a:2a:e8:6f:c8:3f:
68:77:f3:a7:f7:59:fc:a4:65:14:c3:10:64:b7:fe:af:3f:e9:
26:1c:3c:9f:8d:8e:e8:29:38:f5:d2:eb:b9:c6:c3:ab:e4:7e:
af:db:76:33:c9:df:5f:44:d4:b5:51:53:2a:8f:b7:06:8e:64:
bb:d7:40:57:6e:60:7a:cd:b4:46:e6:4f:be:ac:b5:4e:a7:3f:
0f:66:90:b2:8d:89:d0:2c:92:67:1e:02:db:7b:4f:41:04:6b:
19:91:21:7f:99:a8:27:9c:4c:d3:34:51:b0:a9:57:a2:00:fa:
c5:4c:82:ea:52:72:af:aa:e7:76:d0:3a:80:d6:a7:a7:1b:31:
d7:60:a3:16:a1:c5:e5:a1:2b:80:08:1d:54:f7:1c:bb:ae:6e:
7a:4f:a2:a4:5e:98:57:29:e0:f6:0a:d2:8e:00:b6:b0:ab:5c:
11:65:99:bf:97:6b:f7:1c:f9:3d:17:1b:44:51:39:f6:19:d4:
bf:2c:82:4f:cf:8c:69:0b:bd:74:f0:08:70:1a:5e:47:dc:08:
cf:5d:cb:ad:61:91:c2:32:ce:7e:37:c5:a5:2f:51:40:c4:c2:
a2:32:e6:90:2c:0f:8b:77:a7:5f:2a:38:11:b8:c8:b2:2c:60:
da:c3:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:08 2026 by rpki-client