Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: X66GjnAiCTByk8krjA+wHv4s6Txf1RWZnF4HoRr1RjM=
Subject key identifier: 60:D7:D1:AA:44:C1:46:47:C9:85:13:DB:1E:F4:25:81:57:2A:EF:25
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019FA260B4F5D9F1203C7C5B499F5CB6D8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 0422
Signing time: Mon 27 Jul 2026 07:01:14 +0000
Manifest this update: Mon 27 Jul 2026 07:01:14 +0000
Manifest next update: Tue 28 Jul 2026 07:01:14 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: 8WtOmBqlyr1nbKndi1WDBjV6WmtbPtT2ISX39Njqtq0=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:b4:f5:d9:f1:20:3c:7c:5b:49:9f:5c:b6:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Jul 27 07:01:14 2026 GMT
Not After : Jul 28 07:01:14 2026 GMT
Subject: CN=60d7d1aa44c14647c98513db1ef42581572aef25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:f0:93:e3:a6:ff:c5:f3:81:23:63:82:92:
cb:8f:5d:4d:5e:83:fc:df:45:1b:45:ad:93:0a:7c:
16:50:4b:2b:1a:cc:ab:72:86:d7:c8:af:9c:7a:85:
24:d7:e0:bf:70:71:ce:4b:fd:15:4d:c0:5b:1f:bc:
6b:b7:47:c0:66:ba:9f:b8:9c:22:d0:2b:06:ed:3e:
56:8e:fd:33:8a:a8:d4:d3:1c:02:97:21:39:99:05:
c9:57:13:72:13:5b:48:df:ee:36:15:07:8a:4c:dc:
62:15:80:df:ec:f9:88:c8:13:64:9d:4d:7d:1d:85:
b2:df:f0:d8:a6:6b:c8:eb:71:f3:71:67:92:65:4b:
fa:c3:8d:4a:1c:27:53:3c:df:27:b9:89:a1:e1:44:
c6:b5:44:24:e7:01:f8:fe:42:b2:f5:7c:94:1e:c5:
2f:44:c4:50:ca:e9:81:91:86:b9:3d:ea:bc:9f:dc:
7e:a5:76:a0:54:40:f4:a7:95:6d:ca:73:21:9e:4e:
6b:41:4f:d7:e7:4d:5d:ac:80:d3:3b:ac:24:5b:a8:
d2:e9:7a:13:09:d1:92:1d:e6:77:2a:c9:af:94:2d:
85:c4:86:38:1e:e5:32:8c:3a:37:a6:a5:f4:99:50:
bc:c4:2e:c5:92:e5:07:91:a8:0b:45:0d:89:a1:9d:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:D1:AA:44:C1:46:47:C9:85:13:DB:1E:F4:25:81:57:2A:EF:25
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:fe:55:cf:c7:14:26:9f:5d:9f:9f:8d:a3:f5:4c:58:18:2b:
f7:1a:31:e0:36:e4:8d:83:8f:b3:e9:74:2d:de:e0:b7:5e:dd:
99:85:65:01:3e:a9:7e:d4:0f:de:e2:37:58:7d:a4:3f:51:4c:
20:51:d5:76:f3:80:ad:9b:11:a8:ae:23:80:63:ae:58:b1:b9:
9b:9d:6b:75:35:e0:f9:d2:ab:75:30:aa:b8:3a:10:ca:4d:65:
07:dd:82:42:88:59:38:dc:22:71:a2:2d:e5:dc:18:02:bd:c5:
a6:89:0c:cb:3e:27:9c:48:8d:35:a0:ba:49:19:38:2c:77:a8:
bc:28:db:de:ea:26:fb:ec:65:c5:5a:3f:54:1d:a9:ce:50:1e:
10:3b:cf:24:8b:23:b3:c9:60:1d:07:13:68:92:e3:35:bf:18:
40:59:0f:38:8c:1a:75:b7:2b:e4:91:95:ea:04:0c:1c:a7:c0:
a3:04:94:b4:0b:95:50:03:6b:34:c1:a7:69:81:14:9f:b8:65:
15:92:3e:73:15:22:d8:9a:91:30:4f:30:c2:a9:31:66:42:ab:
47:83:22:bd:c0:20:1d:21:55:fa:57:e4:08:9f:69:5b:b4:ea:
7b:bb:bf:e3:1a:39:f9:64:15:43:07:67:02:8c:40:e7:07:42:
ad:57:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:44:58 2026 by rpki-client