Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
File: pal1I5_dRDt9PYLjkqnkrjkhjvY.mft (raw, json)
Hash identifier: j/U5eZwiAmuC975+ZKSIQ8qtFl7oxIwKFOgXxApDHoM=
Subject key identifier: DF:D6:00:33:B7:1A:34:CB:28:25:15:92:35:8F:8B:34:55:6B:59:50
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial: 01A119E257771CE0D72C16AC114EE2BBAE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
Manifest number: 0DEF
Signing time: Thu 08 Oct 2026 05:00:26 +0000
Manifest this update: Thu 08 Oct 2026 05:00:26 +0000
Manifest next update: Fri 09 Oct 2026 05:00:26 +0000
Files and hashes: 1: A_5M0CfXYUUC_BjsX_wFA_AapkY.roa (hash: UxtCMoKmpdBbD3cNYjI3Iakd8mHfIDVh+Sc1KrYzV8A=)
2: QTj2rWtF102-zkq4FB91dVQDunM.roa (hash: 1lI8W4TaqEFSyMRF8rItgY5NGvTzSeJ9vEchB5jfowo=)
3: pal1I5_dRDt9PYLjkqnkrjkhjvY.crl (hash: 8aEVaelbsvOxHpb6rl26+ng/gD7PpkeDxYtaD57FFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:57:77:1c:e0:d7:2c:16:ac:11:4e:e2:bb:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Validity
Not Before: Oct 8 05:00:26 2026 GMT
Not After : Oct 9 05:00:26 2026 GMT
Subject: CN=dfd60033b71a34cb28251592358f8b34556b5950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:55:8c:74:95:0a:dc:bd:9c:88:77:5f:20:
c5:e0:32:87:7e:25:c6:a0:9c:1f:d2:99:71:47:79:
fd:bd:10:cd:30:d7:c1:70:2b:39:48:4a:41:20:9b:
73:56:9c:ae:c8:f8:4d:fa:84:12:5f:19:8a:1e:3e:
46:81:ac:35:12:e6:92:90:42:b1:1c:67:e4:76:b7:
1a:c6:96:8c:d0:70:da:b2:71:2b:00:f8:92:fe:f9:
92:f3:6a:4d:1f:9f:26:2b:ea:b7:68:2b:f8:5e:ac:
dd:65:bb:48:6a:1a:06:a7:f3:bc:4e:4d:2d:e7:02:
40:77:b0:52:ff:c1:82:dc:d5:aa:af:37:1d:82:1d:
13:6f:43:95:82:29:01:ab:fc:62:2f:21:25:63:e6:
e4:2a:69:3d:f7:6c:e9:b4:7f:b2:2e:09:d7:b0:8c:
44:87:20:56:db:01:96:eb:44:8b:8c:19:c7:02:9e:
94:54:7b:05:d5:74:15:26:b7:22:44:51:b3:5a:a0:
09:f0:d1:67:6c:1a:ed:9e:7e:8a:80:ca:86:c6:8c:
87:61:7f:d1:26:17:e7:c6:aa:c9:dd:0b:e8:f7:4e:
68:ed:55:1f:2f:b5:36:c1:00:b3:3c:9c:53:b8:ad:
5a:83:45:79:46:a7:82:bb:f2:b5:5e:06:10:49:fa:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D6:00:33:B7:1A:34:CB:28:25:15:92:35:8F:8B:34:55:6B:59:50
X509v3 Authority Key Identifier:
keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ef:b9:16:2e:0d:b7:1c:b3:bb:a0:5e:82:22:cb:36:c5:43:
c1:3a:e1:51:73:03:69:a1:fc:46:9e:22:06:f3:ea:24:6e:47:
00:b3:da:c7:90:42:87:07:74:29:a4:b2:49:5b:b5:39:4f:fe:
6c:dc:32:67:20:c6:8c:73:5b:b1:45:1b:33:eb:f9:25:89:fe:
d5:cf:12:08:c5:bf:cd:fb:ac:c1:ff:31:ab:e4:e5:62:f9:c0:
90:50:0d:5d:6e:46:76:18:c2:b4:97:cf:8f:66:9a:90:ce:ab:
5d:15:89:85:dd:99:22:fd:30:55:b4:ff:48:80:78:76:5e:5c:
72:55:82:01:02:6b:09:a4:ef:86:d5:2a:f9:db:57:0e:55:fb:
fa:21:f5:a3:31:72:fa:55:14:7e:1b:dd:3f:06:9b:30:2a:88:
b6:f0:5f:c8:5e:ba:5a:d5:cc:53:6e:f2:f2:47:4e:37:af:67:
30:22:1b:d0:fe:54:e6:28:1f:e0:01:69:c2:99:9a:af:b0:f5:
cd:35:ac:00:c7:6e:e3:90:6b:e9:7c:21:13:83:a7:51:b2:5d:
88:77:d2:df:1c:0a:6d:ce:3d:52:e3:cf:b9:78:77:da:c0:e6:
e3:fe:a9:04:a3:0d:8e:fd:90:30:26:94:88:25:15:01:45:ec:
5a:a6:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:13 2026 by rpki-client