Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: 4XFm3uNF6NHt8msfoZlbWC9ZeVTAUaiky/3KL64Bcy4=
Subject key identifier: AF:5F:D7:B6:47:EE:37:0B:27:CE:39:30:2A:0C:90:B8:BF:91:7D:E2
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019EBAA260AFC916784C053BDE48BEF880EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 03AA
Signing time: Fri 12 Jun 2026 07:01:04 +0000
Manifest this update: Fri 12 Jun 2026 07:01:04 +0000
Manifest next update: Sat 13 Jun 2026 07:01:04 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: BsUoW2gIN8RliGcuKVOvtgU57yRtzpiFvabXyVi0D2U=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:60:af:c9:16:78:4c:05:3b:de:48:be:f8:80:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Jun 12 07:01:04 2026 GMT
Not After : Jun 13 07:01:04 2026 GMT
Subject: CN=af5fd7b647ee370b27ce39302a0c90b8bf917de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:e9:33:e7:49:aa:74:8e:27:bb:ac:07:a0:
4c:1f:0a:e9:c7:2c:eb:93:5b:bc:f8:db:82:5d:86:
ab:15:dc:0f:4f:ac:85:cb:0d:3b:c1:82:8e:b7:0c:
5d:84:e1:49:73:13:32:d3:9e:bd:20:1f:c3:47:f4:
8b:f5:4d:2b:89:b5:9d:93:2f:23:04:db:b5:39:fe:
df:05:1e:07:0c:85:1c:39:25:c1:c8:9a:d6:c7:79:
90:b4:bf:ff:34:3b:26:da:4e:35:23:d8:a7:34:db:
59:63:e1:11:0d:e3:42:80:87:d8:fb:25:11:6c:8d:
ed:c2:c1:bb:a8:77:e1:99:6f:52:ec:2a:8f:80:b2:
f8:7d:e1:0c:c7:b8:56:1a:14:70:44:bb:30:72:9e:
ab:24:51:15:94:51:6b:ac:3f:ec:d7:e5:74:62:ec:
1c:ee:7f:32:26:e3:80:03:71:da:92:86:e2:30:0f:
9d:8c:00:98:2c:9c:68:e4:e5:18:29:36:c0:db:e2:
f6:62:1f:8f:4f:67:4f:0f:40:6e:0f:b5:4d:82:54:
06:f9:c4:61:9f:21:13:c7:2a:3d:62:52:65:6e:b2:
84:48:6a:e9:9d:c7:eb:b9:21:69:77:76:b8:9f:b3:
16:dc:e5:fa:76:52:6b:0d:62:73:8d:3a:a2:3c:da:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5F:D7:B6:47:EE:37:0B:27:CE:39:30:2A:0C:90:B8:BF:91:7D:E2
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e9:9a:1d:e8:e6:b8:b1:db:95:de:9b:1e:9f:98:5a:d8:2f:
da:0b:0d:1b:81:8f:0a:fa:c5:d9:5c:0a:18:d5:53:54:b9:e9:
64:ac:cd:78:e1:98:52:e5:c0:c4:a9:8f:ff:ee:eb:31:b3:83:
37:af:3f:62:7e:dc:0b:37:24:28:53:55:b2:50:75:fb:c2:8f:
56:88:74:45:8b:61:c1:c2:a8:e4:d5:1d:ba:2c:9f:f4:7d:95:
93:86:68:ef:58:f1:18:07:65:e7:38:de:12:d5:25:d1:d2:c3:
ac:03:dd:44:0d:da:57:e2:b4:42:d7:a2:c1:3b:a9:3a:30:5b:
44:0a:e9:59:e4:67:34:ff:39:db:1a:52:34:6b:2e:4e:2d:66:
b8:8c:df:a3:d7:62:93:9e:c1:eb:b5:11:c3:a4:7a:20:87:d9:
fe:e8:c6:d8:dd:eb:c8:ac:3d:e6:aa:6e:6b:ce:20:75:a6:f9:
b7:46:c9:2c:6c:89:88:6f:91:bd:d9:bd:82:5e:b9:87:41:27:
0c:19:16:cf:78:d0:77:27:10:be:50:48:4d:07:6b:ca:99:79:
8d:f1:ba:0a:3c:c9:05:58:f0:b5:1a:1d:a4:09:52:48:3c:e0:
8d:05:72:7b:d3:bf:31:b4:51:e8:83:ca:e8:f2:e3:c7:14:44:
d1:46:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:23 2026 by rpki-client