Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
File: pal1I5_dRDt9PYLjkqnkrjkhjvY.mft (raw, json)
Hash identifier: Zaz6D2hhSFxbirHvEZBZIEXFSHziAG1JLOAMP2fzILs=
Subject key identifier: 8B:F6:39:8F:48:4C:DF:52:42:13:AF:DC:5B:72:2B:E9:63:28:D9:44
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial: 01A117F44338C4DD3030B800FAFA2477736B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
Manifest number: 0DEE
Signing time: Wed 07 Oct 2026 20:00:46 +0000
Manifest this update: Wed 07 Oct 2026 20:00:46 +0000
Manifest next update: Thu 08 Oct 2026 20:00:46 +0000
Files and hashes: 1: A_5M0CfXYUUC_BjsX_wFA_AapkY.roa (hash: UxtCMoKmpdBbD3cNYjI3Iakd8mHfIDVh+Sc1KrYzV8A=)
2: QTj2rWtF102-zkq4FB91dVQDunM.roa (hash: 1lI8W4TaqEFSyMRF8rItgY5NGvTzSeJ9vEchB5jfowo=)
3: pal1I5_dRDt9PYLjkqnkrjkhjvY.crl (hash: Wd027Up7jEbnbfQrUQQvvQisqAGzzzPeOoOoxL/UaLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:43:38:c4:dd:30:30:b8:00:fa:fa:24:77:73:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Validity
Not Before: Oct 7 20:00:46 2026 GMT
Not After : Oct 8 20:00:46 2026 GMT
Subject: CN=8bf6398f484cdf524213afdc5b722be96328d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:3e:0c:e3:aa:d0:12:c4:47:d7:33:de:95:
ab:ab:e0:e1:cf:f3:5c:52:01:31:05:3a:8d:89:d4:
a2:b7:27:de:1e:47:7e:01:b7:29:b0:44:3d:2d:45:
6a:cd:ff:b3:9c:ec:b8:cb:1c:65:50:56:1a:e5:ef:
1b:33:a7:81:3b:48:e8:0d:fa:e7:58:84:a1:3f:08:
78:a1:32:0b:21:c4:0c:e8:61:1d:17:07:11:9b:4e:
3d:a7:8b:0b:c2:a4:81:39:71:cc:c9:b9:fd:34:77:
9f:7c:f3:83:0c:96:e1:b7:d3:d5:92:37:fd:94:6f:
6c:a3:b4:b0:d4:2e:24:e6:bd:bc:63:f8:5b:af:32:
22:81:5b:aa:65:3b:7e:ad:f0:67:46:02:d2:8d:41:
a1:e5:d2:22:3d:32:b0:74:eb:83:ae:29:76:a0:77:
ee:38:0f:f7:31:da:58:3f:35:16:d4:17:3f:e3:cd:
26:7f:b4:e8:75:72:3b:fe:78:f9:eb:5b:d4:9f:c6:
a9:8d:3f:ef:2d:b2:9d:c2:2c:74:7b:ba:bc:4d:9d:
ef:06:dc:c7:fd:bb:60:23:60:1f:97:c1:61:09:40:
79:a3:f9:cd:18:80:ee:2f:1f:73:b4:85:b6:23:3e:
22:3f:5a:0c:db:1b:1c:21:4d:80:13:05:3a:6d:bb:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F6:39:8F:48:4C:DF:52:42:13:AF:DC:5B:72:2B:E9:63:28:D9:44
X509v3 Authority Key Identifier:
keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ab:65:c8:d6:7a:e7:d7:f0:ae:8f:a3:a6:51:70:fb:ea:92:
02:eb:05:e2:ee:c2:13:87:16:22:d9:37:8b:f8:f9:85:8a:5a:
c0:4a:c2:b1:33:b4:55:15:ce:b2:46:46:2a:05:2f:1f:8b:4f:
b7:2d:30:aa:43:f8:09:26:99:dc:bb:7d:11:3c:38:97:68:19:
53:ac:77:70:24:7c:93:da:4d:b7:97:c7:24:8c:50:d8:bd:d8:
df:69:d9:40:cb:9a:ba:87:11:d4:cd:a0:cb:37:f9:cf:ad:c5:
82:ab:04:aa:81:78:74:82:33:10:b2:fa:a3:d7:db:9c:cd:44:
14:05:34:1f:0e:ea:1c:4e:82:21:ad:20:61:34:26:3a:f0:98:
d7:6b:c4:82:2d:27:67:66:99:a1:75:f8:5a:49:dc:30:69:d2:
03:c6:95:bd:a7:a3:be:79:e8:81:fd:dc:f1:62:96:e0:ec:06:
55:f1:e9:5f:3d:30:35:d0:25:89:9e:bb:7f:f5:43:9c:54:bc:
9e:db:4b:93:57:76:3c:14:8e:4b:d1:66:ad:d9:9a:a7:d0:5b:
6c:1d:76:ab:c3:1e:8d:cc:23:fa:99:6f:a2:50:92:d5:b7:1a:
10:5d:e0:51:98:ee:ca:60:2e:93:94:4c:0e:01:af:22:9d:ad:
f9:54:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:20:34 2026 by rpki-client