Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: fGEZo1CN9PHY++rUx5CJKNlvYVuzj9U49hMtD+WO66w=
Subject key identifier: 23:2A:8F:D2:1E:DD:C3:4E:7B:6E:52:89:CE:E4:46:A7:49:4F:3D:74
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 019CAA21BDDF3775F0836C0543D80B58F4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 10D3
Signing time: Sun 01 Mar 2026 16:01:03 +0000
Manifest this update: Sun 01 Mar 2026 16:01:03 +0000
Manifest next update: Mon 02 Mar 2026 16:01:03 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: DTroZncMl3UToYYR+PbP1nWMEkWxd/k6n9bc9yzHdZs=)
2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
3: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (hash: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0=)
4: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
6: SJqCby9bRcz81zQZO1TeT-stBH8.asa (hash: zdlq1QtWJPDwU8pcUXTI4wu8J85849xwOKfqaDypeVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:bd:df:37:75:f0:83:6c:05:43:d8:0b:58:f4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Mar 1 16:01:03 2026 GMT
Not After : Mar 2 16:01:03 2026 GMT
Subject: CN=232a8fd21eddc34e7b6e5289cee446a7494f3d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:b5:57:33:fa:c5:66:e2:c8:57:49:53:91:
6f:e1:e0:b7:f3:06:18:ee:af:5e:64:ba:78:08:3f:
be:b2:bc:e4:c9:76:c2:55:b9:3e:3a:87:88:3a:2b:
72:95:5e:6f:75:84:90:e2:8e:d6:f6:5a:9a:be:f1:
d4:99:a3:fb:58:ce:14:b7:3c:2e:d7:60:2f:2d:5c:
d4:0d:b9:23:1d:49:2c:85:92:20:cf:46:7c:45:45:
d9:27:bf:96:2b:11:76:27:d1:4c:c6:7b:45:3a:3f:
8a:3d:7a:a6:3e:71:46:4b:ab:00:9b:86:23:ca:fc:
04:b4:c6:e7:da:4c:24:0f:4c:d0:60:2e:e9:e9:2b:
26:76:5d:bc:a8:ff:37:c3:44:4d:7d:fa:09:15:7b:
4d:4a:9a:18:b9:25:cb:dd:fe:0a:ef:3d:65:7a:c4:
ba:35:18:85:00:b3:66:9e:42:90:2d:04:d3:cc:ea:
20:be:1c:59:8c:e3:21:30:25:4c:49:22:bc:6f:a1:
34:ef:c7:21:fb:74:6d:32:ad:e8:a4:5a:37:bc:a2:
90:fc:3a:7f:98:38:23:7c:dc:e7:bc:32:7f:97:81:
7c:c5:4f:5e:a0:07:83:82:ef:08:c0:3f:65:60:54:
1f:f7:25:7b:b8:b1:9d:45:10:92:ad:d6:49:d1:52:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:8F:D2:1E:DD:C3:4E:7B:6E:52:89:CE:E4:46:A7:49:4F:3D:74
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a6:5e:8e:c3:00:d7:d3:0f:b0:b5:71:8d:ec:94:d3:78:2c:
db:7a:22:cc:45:9e:42:93:54:7f:ff:42:81:aa:9a:9c:7d:e6:
f6:89:e2:97:d1:f8:1d:42:35:7e:4a:12:c1:c0:c9:75:a8:74:
5e:fb:16:34:2f:a1:bf:3e:b6:2d:12:6c:9c:dc:e9:c9:37:8f:
37:62:ae:f3:54:3c:72:d3:69:1e:3e:d2:93:5b:5d:76:a6:b2:
cd:7d:c8:67:b5:48:44:04:ce:06:89:46:72:0f:83:b7:31:62:
f6:49:6a:a2:02:e5:51:0d:46:2a:97:f0:80:60:07:0c:ad:59:
93:4a:6a:bd:3c:c0:a9:2b:6a:f2:ca:4b:14:f6:b2:19:c6:fa:
2e:7a:99:2f:9b:b5:3c:75:40:b8:05:d6:89:a1:9d:ed:11:ec:
1f:cf:bd:3f:3f:20:23:0c:87:df:75:13:9d:23:85:f6:f5:04:
f0:c5:be:24:6f:35:21:6f:97:06:88:c8:b1:0b:78:64:53:1b:
2e:d3:87:bd:7f:f8:38:55:47:f5:6c:b7:8f:55:fb:af:e1:76:
49:65:ca:30:59:78:96:ac:0b:10:0d:53:5a:e8:21:20:b7:ed:
18:73:4b:65:b9:04:8a:b6:7b:47:bb:46:6b:b8:df:45:4a:af:
9f:80:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:00 2026 by rpki-client