Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
File: pal1I5_dRDt9PYLjkqnkrjkhjvY.mft (raw, json)
Hash identifier: 5GhVuvssGlnhSLdsTfG9fpB4ZxJ4MPoY+UiQnFIULZo=
Subject key identifier: 7E:A5:F9:ED:90:A2:6E:88:8B:17:CC:67:0F:04:B3:02:22:34:B6:39
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial: 01A020C3CD3AA814FBD71E3A5D8F6AB6F4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
Manifest number: 0D6E
Signing time: Thu 20 Aug 2026 20:01:37 +0000
Manifest this update: Thu 20 Aug 2026 20:01:37 +0000
Manifest next update: Fri 21 Aug 2026 20:01:37 +0000
Files and hashes: 1: A_5M0CfXYUUC_BjsX_wFA_AapkY.roa (hash: UxtCMoKmpdBbD3cNYjI3Iakd8mHfIDVh+Sc1KrYzV8A=)
2: QTj2rWtF102-zkq4FB91dVQDunM.roa (hash: 1lI8W4TaqEFSyMRF8rItgY5NGvTzSeJ9vEchB5jfowo=)
3: pal1I5_dRDt9PYLjkqnkrjkhjvY.crl (hash: iK6SD/lTJExi2UGrtRrgMnQdxIs2vXeD5VmYBE7zyZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:cd:3a:a8:14:fb:d7:1e:3a:5d:8f:6a:b6:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Validity
Not Before: Aug 20 20:01:37 2026 GMT
Not After : Aug 21 20:01:37 2026 GMT
Subject: CN=7ea5f9ed90a26e888b17cc670f04b3022234b639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:94:4e:7c:0b:4c:7a:f1:f9:78:5d:fd:65:
35:eb:e2:c2:1c:cb:86:b6:06:00:69:c7:2e:77:32:
f5:e9:60:bc:28:41:e1:c2:92:ff:55:42:c9:21:1f:
dd:d9:85:78:0b:8a:57:01:36:eb:32:62:15:91:ab:
64:51:9c:11:a1:63:23:c4:af:70:07:3f:4f:e7:c0:
d2:9e:98:8a:56:50:60:35:c3:8e:06:9a:4a:5a:48:
af:1e:c2:fe:84:e1:88:34:de:15:2b:68:6f:39:21:
de:07:8f:ae:38:2e:2f:37:31:85:c4:9f:18:9f:d5:
a8:00:62:94:58:e5:f8:a3:33:b7:d2:ed:d0:bb:46:
ef:a0:37:0a:56:74:10:08:74:7c:d4:6f:58:d0:75:
90:6a:8f:62:ff:87:2c:f1:b3:a3:31:4b:19:24:3f:
8f:1d:ce:6d:3d:d0:5c:18:b7:48:9b:d5:d5:71:20:
65:ea:eb:e7:a1:0f:a9:50:95:fd:61:c6:b0:c5:b4:
44:74:0b:36:6d:c3:19:c4:95:b9:ef:fb:2b:94:59:
de:02:e3:20:21:42:bf:f5:f4:52:35:b5:e5:2e:de:
81:97:bf:5d:70:4e:3e:9a:2e:8d:aa:ca:09:31:dd:
75:45:6e:e5:b4:d7:9e:3e:7f:c5:db:cf:19:33:59:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:F9:ED:90:A2:6E:88:8B:17:CC:67:0F:04:B3:02:22:34:B6:39
X509v3 Authority Key Identifier:
keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c1:8b:aa:79:91:dd:58:14:cf:0a:63:b4:0e:9e:44:11:08:
68:d3:84:51:80:03:30:cc:54:6f:bd:81:ab:c1:f0:37:6e:b0:
6b:34:86:c7:dd:76:1d:d4:79:c1:4b:39:95:58:db:fd:78:17:
43:b2:a0:4c:bd:ca:6f:37:ec:d3:54:b3:6c:c3:f5:24:c2:23:
6b:72:8d:55:bd:26:7c:d7:55:79:09:5f:3b:5b:ed:bf:fd:64:
2a:aa:19:39:7b:ca:ad:8c:88:17:65:b7:73:1f:7f:df:30:59:
d1:e7:89:63:72:c9:82:e4:1b:e0:3c:90:9e:4b:12:39:6b:77:
fd:6c:5f:af:51:b0:02:04:02:27:e3:c0:7c:c6:0b:73:19:e6:
d3:47:ef:46:b9:fe:03:72:01:6b:da:5f:98:0b:b8:a7:14:aa:
6c:95:2b:86:37:90:75:f0:0b:7a:9a:4a:dd:96:2f:25:5d:c5:
30:3e:0b:fa:61:b9:c3:8f:c0:ca:98:8e:46:c8:ec:df:09:a9:
34:84:4c:2b:ff:da:c2:1d:28:92:49:3b:1e:7f:d3:6b:88:02:
aa:ed:c6:8b:88:eb:f7:65:58:00:72:94:cd:ea:a0:8b:f8:20:
1a:07:87:e2:0e:e5:ba:90:92:22:e3:22:80:c3:8b:01:49:f3:
ce:a6:29:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:19 2026 by rpki-client