Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: lnzkjAnqHgNtObuNKN93yaGggTLHQhPQ5469+mAo0FY=
Subject key identifier: EF:3C:6C:4C:6C:A2:21:F5:0C:78:91:34:52:04:56:5F:62:E1:FD:7B
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019CAD5A1B5BB055CA6F806582E6A1141138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 029A
Signing time: Mon 02 Mar 2026 07:01:29 +0000
Manifest this update: Mon 02 Mar 2026 07:01:29 +0000
Manifest next update: Tue 03 Mar 2026 07:01:29 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: 4VGfzKuuUySyF2ziMZ2WSLE69nuqkAZ8FdWN1YZQZ2M=)
2: j0XYpT3fQfPhqOVaGf1qoZYJiUY.roa (hash: p96sB0NTL/aNTTxP4wqEBEwGR5tjmR72wLuv/hfrJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:1b:5b:b0:55:ca:6f:80:65:82:e6:a1:14:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Mar 2 07:01:29 2026 GMT
Not After : Mar 3 07:01:29 2026 GMT
Subject: CN=ef3c6c4c6ca221f50c7891345204565f62e1fd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:e8:ac:ad:e3:86:7c:a7:e1:fa:2f:5b:d7:
da:65:4b:ec:de:49:e3:84:9f:90:e8:5b:c9:fb:28:
8e:19:56:5d:eb:1d:11:bf:68:99:68:1f:d0:d8:2d:
b1:6a:c2:96:c0:90:91:f9:22:5a:0d:5b:1b:9e:55:
eb:1d:30:07:db:c6:16:e7:a1:1b:3f:a6:53:51:67:
2c:f1:1b:7a:df:ff:a5:20:1c:08:33:6c:7a:ba:38:
40:df:70:35:4c:c3:9e:49:2b:c1:45:93:33:59:7a:
91:d6:42:ff:90:01:62:7c:bb:5e:b3:39:64:51:53:
57:d7:7b:ee:92:83:5a:46:a0:ac:8d:a0:07:a4:ca:
94:e0:76:70:84:32:bb:c6:fa:ba:44:a3:04:af:1f:
66:ac:a6:12:df:9c:2c:40:63:40:60:e1:3d:8f:0b:
34:5a:ac:c1:4e:d1:06:62:81:33:f7:9e:3c:ed:c4:
54:f1:69:34:35:ae:15:de:b4:41:32:d6:46:f0:e7:
21:ff:61:f2:57:73:0b:e3:31:9d:1e:6a:f2:24:c5:
47:74:1a:bd:45:98:ad:42:ba:6c:7d:e3:8f:30:14:
4f:97:84:b8:11:a3:7e:ff:16:f7:cb:18:fa:79:1a:
29:e1:17:4f:be:e1:c6:90:f2:e4:31:77:26:98:3a:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:6C:4C:6C:A2:21:F5:0C:78:91:34:52:04:56:5F:62:E1:FD:7B
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4f:40:ed:c6:57:a1:ef:9e:83:5f:24:8f:29:80:3e:2e:27:
19:40:a1:4a:35:30:ce:62:9d:2f:f6:8a:14:34:aa:83:6f:35:
f3:cb:c0:da:27:d8:92:97:9d:4d:d0:b8:45:8b:03:f7:ad:f8:
a2:3c:cf:ab:65:0c:ce:1b:1d:3f:59:6a:19:7f:0b:67:1f:05:
10:66:9b:3d:20:9a:68:ad:4a:37:4c:66:3c:03:bd:d5:29:a2:
22:1a:7e:b7:6e:e4:f1:2f:d0:20:51:ed:e6:2d:22:d3:a3:bd:
92:26:74:cd:33:f6:d0:c3:cc:a0:fa:18:a3:77:a7:4d:48:58:
f7:9f:40:0a:94:01:a2:2c:82:8e:a4:6c:bf:50:be:85:63:d5:
58:90:b1:67:59:bb:4e:f3:04:a8:82:c5:b0:df:d6:b9:80:d7:
0a:cb:46:84:71:f0:8c:fe:9d:1b:a8:87:4f:91:39:96:1d:be:
6f:a4:fe:83:ec:89:ac:8f:b2:48:5e:2b:62:82:d5:f7:47:75:
32:76:54:a3:45:bf:7a:d4:e7:10:4c:c6:8d:7d:c4:f4:18:61:
77:99:9e:a5:2a:09:19:5e:c4:40:1c:6a:5a:ac:12:cc:25:a1:
1b:fc:55:00:24:06:8f:36:be:91:52:76:81:39:4a:2c:c0:29:
db:49:20:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWhtbsFXKb4BlguahFBE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODJmMWZjZTAwOGJjYzcyNWRkYmJlNzA2NzQ1MWRkODIw
NTkzMDcwHhcNMjYwMzAyMDcwMTI5WhcNMjYwMzAzMDcwMTI5WjAzMTEwLwYDVQQD
EyhlZjNjNmM0YzZjYTIyMWY1MGM3ODkxMzQ1MjA0NTY1ZjYyZTFmZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsXorK3jhnyn4fovW9faZUvs3knj
hJ+Q6FvJ+yiOGVZd6x0Rv2iZaB/Q2C2xasKWwJCR+SJaDVsbnlXrHTAH28YW56Eb
P6ZTUWcs8Rt63/+lIBwIM2x6ujhA33A1TMOeSSvBRZMzWXqR1kL/kAFifLteszlk
UVNX13vukoNaRqCsjaAHpMqU4HZwhDK7xvq6RKMErx9mrKYS35wsQGNAYOE9jws0
WqzBTtEGYoEz95487cRU8Wk0Na4V3rRBMtZG8Och/2HyV3ML4zGdHmryJMVHdBq9
RZitQrpsfeOPMBRPl4S4EaN+/xb3yxj6eRop4RdPvuHGkPLkMXcmmDpUMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO88bExsoiH1DHiRNFIEVl9i4f17MB8GA1UdIwQY
MBaAFD2C8fzgCLzHJd275wZ0Ud2CBZMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEt
YmYxZTk5YzBjZjNmLzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEtYmYxZTk5YzBjZjNm
LzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJU9A7cZX
oe+eg18kjymAPi4nGUChSjUwzmKdL/aKFDSqg28188vA2ifYkpedTdC4RYsD9634
ojzPq2UMzhsdP1lqGX8LZx8FEGabPSCaaK1KN0xmPAO91SmiIhp+t27k8S/QIFHt
5i0i06O9kiZ0zTP20MPMoPoYo3enTUhY959ACpQBoiyCjqRsv1C+hWPVWJCxZ1m7
TvMEqILFsN/WuYDXCstGhHHwjP6dG6iHT5E5lh2+b6T+g+yJrI+ySF4rYoLV90d1
MnZUo0W/etTnEEzGjX3E9Bhhd5mepSoJGV7EQBxqWqwSzCWhG/xVACQGjza+kVJ2
gTlKLMAp20kgRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:55 2026 by rpki-client