Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: Il/lCQYVFbHiI372NDuP7ECpLcDP0l3SjKy/ovWwXwQ=
Subject key identifier: B3:20:F9:98:59:4D:2D:1B:B9:5F:83:E2:56:D7:F7:F9:5F:1B:24:7A
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01A1A9DECBAA0AC6AA3BA53EAF2B5648B65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 1370
Signing time: Thu 05 Nov 2026 04:01:52 +0000
Manifest this update: Thu 05 Nov 2026 04:01:52 +0000
Manifest next update: Fri 06 Nov 2026 04:01:52 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: 4UQ3JgqBAxG+8D+0Dl35HTlllsioiCzWLnm1mxAGUPs=)
2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
3: DggIJs_MPATTU1fsjQ1fThUkFzg.asa (hash: L3cZLBkDqG4NS7mwPXNtZBZm35MoayAzoN2PVANaJ4g=)
4: QiiSVCdXMnX6vtwSolUuExK-3cc.roa (hash: cChw7Ea4muVvJ3EI7S7cdxDZrmiLHAuerCOY8OxPcTk=)
5: UWSM24JvPnwnAU4XVkpHR0E9PUk.roa (hash: JLJXCUdKbtSNuGOxKHvutZ5TJPU3EgqNhaZdjhF8cB4=)
6: fNJHOI_npL-WTGLoYfT_nf8Tb6E.roa (hash: mFkaDrlFV08Av+1m9vFJTRA6w6Z9IBsStwY7QqmS/gc=)
7: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
8: wRhtCAAx7zEpmI40CBpFB6CppGU.asa (hash: A0EP5dqJF7oVrfX3OmMuR2spKNhblMpR/3OKbRM6pT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:de:cb:aa:0a:c6:aa:3b:a5:3e:af:2b:56:48:b6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Nov 5 04:01:52 2026 GMT
Not After : Nov 6 04:01:52 2026 GMT
Subject: CN=b320f998594d2d1bb95f83e256d7f7f95f1b247a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:e6:8d:bf:8a:4f:e3:b9:07:0d:c4:71:74:
52:ec:af:34:af:02:ca:03:84:62:20:5f:ce:ea:c1:
a8:fb:85:3c:5c:90:e5:5d:cf:9a:ec:90:e2:41:1b:
8e:09:8e:89:13:40:58:fe:c2:be:75:98:fa:ef:8f:
25:cb:aa:e8:66:53:ae:1e:05:3c:40:3c:69:78:1d:
cc:2d:e4:ec:51:3b:0c:22:38:cb:93:4a:34:df:fd:
61:d7:97:b2:d1:d4:cf:ba:7e:06:42:5b:e1:18:f9:
7f:51:6d:95:f8:78:e2:60:96:50:ef:8d:b5:51:bb:
e7:85:f8:93:ea:15:85:23:55:f6:bb:43:e4:05:22:
26:3d:2d:6c:25:72:61:28:8b:e5:bc:42:2a:bf:5c:
78:6b:40:4e:75:4b:d1:e5:e9:d1:86:54:b7:97:d5:
94:f5:b6:5b:91:a0:bd:5f:01:6d:0e:d7:67:4c:58:
4e:e3:3a:b5:99:64:30:e0:82:06:f8:52:f7:0d:b7:
7c:d8:0e:ec:6d:da:63:e9:22:1b:13:4f:c6:2a:03:
64:7d:5d:01:fd:c5:c2:23:42:57:0e:cc:0f:bd:2c:
52:8b:97:47:c6:6e:cc:f3:58:2b:57:ff:04:6e:65:
a3:6f:8d:45:44:f9:b6:2a:91:0a:e7:f4:da:67:60:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:20:F9:98:59:4D:2D:1B:B9:5F:83:E2:56:D7:F7:F9:5F:1B:24:7A
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:05:fe:2d:1c:01:7c:d0:37:20:b0:e7:9a:2f:40:4d:42:41:
f4:06:30:4d:11:aa:ad:5c:fd:e0:f8:d5:fc:21:49:3e:1e:4d:
f2:b3:2c:d6:68:11:8e:39:9d:cb:43:d2:6f:21:31:14:69:dd:
3a:5f:1b:32:57:1a:e7:eb:71:eb:6e:ad:9c:c5:87:8b:62:1a:
c4:45:91:57:83:1a:cc:0e:bc:14:a8:6e:92:f6:a9:5c:59:2f:
8e:48:de:b8:0a:18:65:32:56:da:ba:06:83:e8:0d:f6:23:3b:
0d:8c:f8:f2:94:74:8e:48:af:3a:13:ea:d9:14:21:3d:56:6e:
0a:7b:ab:b3:13:48:02:b0:ea:9c:13:b5:0f:e1:bf:56:56:73:
ac:df:85:a0:5a:a3:b3:c5:e2:4c:ae:ec:17:71:a2:cb:24:d0:
75:5f:6f:ba:1a:47:45:48:a4:da:8b:48:a8:96:ee:66:10:a5:
cf:56:87:47:b3:b6:45:b0:f8:1a:1c:f8:22:50:5d:92:65:8c:
7a:77:3f:db:70:8f:3d:6b:79:7c:82:fa:3f:89:9f:76:af:99:
b4:73:46:53:64:3f:24:1d:fe:b0:77:f5:d2:d5:ad:3a:ea:00:
f4:12:60:9a:79:9f:02:27:ba:15:d6:58:a4:6f:c7:3b:f5:5f:
aa:c5:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:19:19 2026 by rpki-client