Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
File: pal1I5_dRDt9PYLjkqnkrjkhjvY.mft (raw, json)
Hash identifier: xXz3usYzbOmZV0q5U+h/Z0ow7lUeJfCA01hIrqwmqD0=
Subject key identifier: C7:BB:C5:85:30:18:B6:A3:9E:24:FE:69:9A:DC:E6:E0:72:D4:62:73
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial: 01A12B4464749FE91BBC80CA3E222B7D379A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
Manifest number: 0DF8
Signing time: Sun 11 Oct 2026 14:01:04 +0000
Manifest this update: Sun 11 Oct 2026 14:01:04 +0000
Manifest next update: Mon 12 Oct 2026 14:01:04 +0000
Files and hashes: 1: A_5M0CfXYUUC_BjsX_wFA_AapkY.roa (hash: UxtCMoKmpdBbD3cNYjI3Iakd8mHfIDVh+Sc1KrYzV8A=)
2: QTj2rWtF102-zkq4FB91dVQDunM.roa (hash: 1lI8W4TaqEFSyMRF8rItgY5NGvTzSeJ9vEchB5jfowo=)
3: pal1I5_dRDt9PYLjkqnkrjkhjvY.crl (hash: RDg9eHjy+bo1yEaUrrhxPLW89dvM6qvIfUsB26KGuCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:64:74:9f:e9:1b:bc:80:ca:3e:22:2b:7d:37:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Validity
Not Before: Oct 11 14:01:04 2026 GMT
Not After : Oct 12 14:01:04 2026 GMT
Subject: CN=c7bbc5853018b6a39e24fe699adce6e072d46273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:21:38:ee:b4:48:e3:31:77:de:6f:6d:7b:
00:87:3a:6e:64:ed:3e:78:f5:bc:80:0e:cf:86:e7:
d0:a2:8a:8c:58:4b:6e:0a:8f:e1:cc:b3:5f:18:2e:
22:29:60:46:8d:ae:10:e8:7c:9d:88:59:73:5e:92:
da:4a:d4:98:1c:0b:c1:4f:44:75:8c:ab:b7:93:39:
57:d4:28:cf:5e:c9:5e:42:45:e4:d7:6d:e7:57:92:
ba:22:f2:46:00:e5:c6:ce:f1:c5:cd:9e:e5:12:fe:
1b:5b:55:2e:16:d5:8e:2e:5d:c0:0f:cf:a1:8d:8e:
a6:f3:4c:92:e3:74:3e:7d:58:5c:1a:5c:06:76:6d:
c4:ec:ba:2c:50:94:a8:7f:e3:7d:05:ff:ac:b3:8f:
4d:10:57:06:aa:d3:5e:44:b8:79:e2:46:1e:9a:0b:
11:e6:59:8c:e8:7f:b4:a3:ec:d5:32:a0:1c:16:90:
e1:da:4b:3f:8d:1c:84:f3:36:40:43:a0:f5:f7:1c:
30:aa:a0:a1:a9:bd:03:7c:6f:48:09:2e:d5:04:cb:
a3:ac:61:81:7c:cb:44:d7:44:f4:7e:ca:41:b0:2d:
88:36:65:cf:29:7b:b7:9b:16:4d:8d:f5:d9:1d:4f:
5f:70:ac:9d:90:94:6f:5f:6f:fe:7f:58:4a:a5:18:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BB:C5:85:30:18:B6:A3:9E:24:FE:69:9A:DC:E6:E0:72:D4:62:73
X509v3 Authority Key Identifier:
keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ed:3f:ab:7b:55:d9:7d:4b:8c:ee:82:b3:44:59:90:94:bb:
b6:75:04:a5:b9:25:6e:e1:c8:f8:ed:5d:93:3e:5e:50:d6:b9:
09:33:84:c6:79:04:91:59:66:d2:56:4b:0e:87:e7:78:ef:44:
2e:e4:e2:51:1b:b3:c6:db:a4:39:91:e8:a3:39:9b:f6:bf:b5:
2b:4f:d3:e1:c6:b9:a0:b1:25:cb:de:8d:e1:bb:c4:10:2b:f6:
17:c3:ab:2c:97:b4:23:5c:e9:cd:ca:7c:a5:e6:94:52:ec:63:
d4:37:77:70:b2:1a:22:ee:a6:9f:8e:ec:d3:25:61:c8:20:43:
77:05:b8:8d:c4:b5:1e:1d:54:32:fc:80:76:f7:27:2d:6e:5d:
36:69:8b:32:77:85:26:12:11:fd:01:0c:37:2c:22:b0:67:35:
60:83:e3:af:a7:df:36:6c:12:53:22:12:6e:b7:aa:fc:19:86:
13:f0:b2:64:e1:29:15:46:f4:c2:8e:00:9f:b7:a4:f4:36:58:
0d:ae:55:a8:8f:79:67:10:5c:b2:2d:01:8c:01:30:52:26:f3:
52:ef:3a:db:f2:de:dc:30:2b:c3:75:dc:95:76:aa:6f:77:f8:
e5:2f:b2:1f:3d:c4:08:c5:89:db:84:10:4e:7c:9c:05:96:b1:
b0:c4:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:00:56 2026 by rpki-client