Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: XdJ9rQ6w1qvgAN5QInrsEi+W52dnt6Dyv7vP8miP92s=
Subject key identifier: 08:4D:B6:E8:F8:BD:0C:B6:B3:BC:4B:88:8C:B4:CC:F2:C8:24:49:49
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019FAA1A5705C4F7C5B57F27B3DC4123B8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 0426
Signing time: Tue 28 Jul 2026 19:01:20 +0000
Manifest this update: Tue 28 Jul 2026 19:01:20 +0000
Manifest next update: Wed 29 Jul 2026 19:01:20 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: 4Tkjf7BvGdywwzU284MJnpU7Lcm89XZl0JY46CW8zwA=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:57:05:c4:f7:c5:b5:7f:27:b3:dc:41:23:b8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Jul 28 19:01:20 2026 GMT
Not After : Jul 29 19:01:20 2026 GMT
Subject: CN=084db6e8f8bd0cb6b3bc4b888cb4ccf2c8244949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:e5:9b:8b:e6:84:18:85:d5:54:93:18:6c:
08:9f:c4:c5:5d:b4:cb:f6:6f:d4:3c:7c:ed:a0:77:
f4:20:3e:bc:18:8d:4d:d8:c6:d0:cf:26:ad:f5:fd:
8d:79:ef:ba:29:ae:bd:62:e3:ea:7e:30:bf:54:41:
a9:89:e8:ac:00:e2:33:26:fa:2d:3c:5d:4c:d1:20:
9e:81:71:86:1b:35:79:d7:89:eb:bf:53:aa:0d:a5:
77:9b:b2:63:71:91:36:76:d5:78:c1:a3:c5:a6:56:
4b:bc:86:76:29:43:d1:a8:ad:ce:01:db:12:3b:ec:
fa:5c:ee:3f:9e:83:3a:80:eb:10:3c:d5:e9:90:7b:
f1:3e:28:55:fd:96:d3:8f:81:9f:59:07:ed:7e:87:
85:67:62:de:31:c8:9b:cd:cb:a2:e5:47:06:5f:41:
d6:d9:fa:0b:3b:27:6c:64:2d:bd:88:cc:59:b1:e6:
74:e3:51:b2:b9:75:e0:09:cd:36:e5:bf:47:7e:4c:
3a:30:ac:2b:32:28:59:9b:d7:ed:1e:45:e8:63:24:
bb:57:9e:11:55:4c:46:33:e0:da:3a:70:ef:90:31:
b9:b4:47:73:65:20:7e:87:39:85:fb:49:40:51:a5:
ea:28:1e:e5:e6:7b:de:0a:a3:d9:97:2c:7b:48:30:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4D:B6:E8:F8:BD:0C:B6:B3:BC:4B:88:8C:B4:CC:F2:C8:24:49:49
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e2:c4:68:f6:ee:19:d1:13:32:dd:ae:18:03:5d:1b:50:09:
f2:a3:c5:62:8e:68:ab:fa:65:19:6e:8d:92:64:ec:f7:ef:76:
c6:b2:bf:df:b3:33:bf:2b:19:bf:a8:a2:16:3f:c1:5c:a0:cc:
6f:95:f0:d2:77:fd:61:9f:e4:43:43:f8:f3:15:21:3a:e7:1b:
bd:05:c9:03:53:ac:d8:93:7e:b0:f0:bc:15:f2:c4:b9:36:f3:
b0:d5:a3:50:a7:33:ae:d6:39:b5:ac:75:97:e2:5b:30:f4:83:
84:1e:f8:05:5e:75:99:bd:a9:87:cf:3b:ec:5d:56:a4:17:b4:
e8:6e:b6:0a:6c:82:fd:1f:87:18:83:69:4b:90:c8:46:56:8d:
cd:62:fa:5d:8f:10:61:d5:f1:8d:2f:a0:f9:ed:8d:a2:c6:de:
76:b6:68:9c:fa:fd:15:07:27:00:b6:a4:e3:15:8d:65:5d:8c:
24:5e:4c:eb:a9:ff:0e:52:d2:d9:d1:71:6c:06:4a:43:13:ef:
5c:f0:39:c7:d1:8f:30:77:51:13:a6:fb:fd:18:0a:67:56:2b:
27:77:50:1b:43:b8:3a:b1:1c:7a:75:9f:d0:6b:5c:44:be:de:
ea:d2:ea:14:15:84:7a:0e:ab:10:39:b7:3d:cf:78:10:59:d7:
9a:4a:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:43 2026 by rpki-client