Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
File: pal1I5_dRDt9PYLjkqnkrjkhjvY.mft (raw, json)
Hash identifier: N/ZKcfYcLr2M9q+exisrgAewNkmoB0MM0BBhdRyL7v4=
Subject key identifier: 5E:C6:17:50:E4:AF:CB:A1:07:7F:CC:05:27:B3:A2:46:79:83:7C:51
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial: 019F93C8EC6DA66EF2D5A38A0EF0A3D130A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
Manifest number: 0D25
Signing time: Fri 24 Jul 2026 11:00:45 +0000
Manifest this update: Fri 24 Jul 2026 11:00:45 +0000
Manifest next update: Sat 25 Jul 2026 11:00:45 +0000
Files and hashes: 1: A_5M0CfXYUUC_BjsX_wFA_AapkY.roa (hash: UxtCMoKmpdBbD3cNYjI3Iakd8mHfIDVh+Sc1KrYzV8A=)
2: QTj2rWtF102-zkq4FB91dVQDunM.roa (hash: 1lI8W4TaqEFSyMRF8rItgY5NGvTzSeJ9vEchB5jfowo=)
3: pal1I5_dRDt9PYLjkqnkrjkhjvY.crl (hash: wuRM8bXY4UsNUFCGfbIZEDYZWfdXCJxiG7wjQ6XHISc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ec:6d:a6:6e:f2:d5:a3:8a:0e:f0:a3:d1:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Validity
Not Before: Jul 24 11:00:45 2026 GMT
Not After : Jul 25 11:00:45 2026 GMT
Subject: CN=5ec61750e4afcba1077fcc0527b3a24679837c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:4c:04:c7:7e:ed:0d:c2:54:3a:ec:e0:ef:
25:46:cf:d2:b4:61:89:6a:18:cb:79:19:10:64:44:
dc:66:62:b9:0d:58:c5:4a:83:ce:31:fe:56:04:30:
d6:c9:fc:0e:c5:f2:43:6a:f7:95:68:48:1a:92:20:
f1:69:a5:2b:ef:0d:da:40:be:55:67:b3:1f:14:e0:
2a:d8:b8:b9:bd:ae:62:9b:b7:fa:3b:d9:b1:07:de:
f7:3b:fd:a1:68:06:1d:55:f6:49:ea:bd:dd:fa:81:
90:a6:df:75:30:77:89:c6:45:52:0c:c3:30:b6:24:
2d:b1:df:23:a2:7d:db:b9:d4:b4:c2:79:ca:37:85:
f3:21:d4:ad:94:8b:2b:83:53:78:e4:b4:d3:77:04:
81:46:34:9a:a0:42:6c:b0:c0:b6:5a:a4:9d:af:1e:
ca:db:ad:19:f7:80:6c:18:56:79:70:80:eb:db:b9:
ab:e8:9c:59:87:36:00:f9:17:20:bf:84:99:d7:72:
27:37:73:89:6d:c7:b6:3c:91:cd:3c:80:6f:b9:10:
a5:05:44:7c:99:09:db:4e:31:80:fc:28:5a:53:a7:
ce:72:ba:54:09:c1:ec:c8:78:d3:07:b0:83:3f:2c:
ed:09:5c:7c:1a:72:28:03:a2:ca:9f:15:b4:db:12:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:17:50:E4:AF:CB:A1:07:7F:CC:05:27:B3:A2:46:79:83:7C:51
X509v3 Authority Key Identifier:
keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:15:20:15:b0:4a:40:b5:da:02:de:c3:c3:64:35:ac:78:bb:
d6:d8:8c:8d:3f:62:ac:88:5b:01:a9:4b:b6:bb:e1:e7:0d:da:
d6:31:c8:46:24:08:13:b7:6f:de:cf:8f:fe:4b:22:05:a0:e6:
3c:2f:ed:46:4c:24:8f:5d:f3:6d:c9:86:ba:d9:3e:d3:90:97:
10:4b:2d:42:f3:3a:8a:c2:b1:ed:76:70:f2:a1:da:6c:2a:e9:
a6:30:70:b6:2d:6a:ef:1b:25:86:ab:fd:1f:3c:e6:f1:09:b5:
bd:f2:dc:56:b0:35:c6:31:9e:32:43:b2:e0:be:6a:7d:2d:5d:
1b:4d:16:9a:ac:a6:ee:f8:04:c7:60:48:dc:cc:40:52:ff:01:
c9:df:47:b8:0f:ec:df:69:9c:d1:02:af:23:db:3a:9d:78:44:
1b:4b:f5:72:6d:a5:d0:89:17:14:b7:87:b5:e0:fb:99:69:61:
4a:12:05:bd:7f:7e:27:23:9a:a2:2d:18:0a:47:49:ab:48:cd:
fb:36:9e:d1:33:99:1a:af:bf:5a:65:55:29:16:17:be:71:84:
f4:f3:11:72:66:88:bf:bb:84:9d:69:80:2f:c0:90:0c:82:f4:
eb:ff:38:54:ab:a0:72:a0:75:26:dc:93:2e:34:49:36:ca:24:
83:a8:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:50 2026 by rpki-client