Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: EqQarAPivXUwn77HhQfqA34MD/yRI87TGDNv6k+i8uI=
Subject key identifier: D1:FC:4E:2D:DE:A0:79:15:33:AB:94:7B:9A:E9:5C:78:60:44:18:1A
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01A0BD9DEEEDCB640ADCC5784044932529F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 12F2
Signing time: Sun 20 Sep 2026 07:00:39 +0000
Manifest this update: Sun 20 Sep 2026 07:00:39 +0000
Manifest next update: Mon 21 Sep 2026 07:00:39 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: njNsy6PmRcCRlAvMhifWk+Va7vUTcDak3vDXQDeuDko=)
2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
3: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
4: QiiSVCdXMnX6vtwSolUuExK-3cc.roa (hash: cChw7Ea4muVvJ3EI7S7cdxDZrmiLHAuerCOY8OxPcTk=)
5: _o7WbsRWfS-jqdAXq6UGptYBqYs.roa (hash: iob3yEsPtOhnzXmM7YWypnJ14BnEiiC2+5wnnP/TvnA=)
6: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
7: wRhtCAAx7zEpmI40CBpFB6CppGU.asa (hash: A0EP5dqJF7oVrfX3OmMuR2spKNhblMpR/3OKbRM6pT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:ee:ed:cb:64:0a:dc:c5:78:40:44:93:25:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Sep 20 07:00:39 2026 GMT
Not After : Sep 21 07:00:39 2026 GMT
Subject: CN=d1fc4e2ddea0791533ab947b9ae95c786044181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:fa:5f:c6:04:85:1c:c8:c6:d2:bd:2d:f1:
c4:c5:fe:f6:c1:7a:26:dc:4c:eb:bf:d3:bf:9d:93:
41:c3:a4:04:02:99:3f:bd:d4:d2:7f:24:1c:fa:1d:
22:9f:5c:fa:8d:38:ab:14:81:ca:bd:1f:51:5b:63:
a8:e3:aa:b7:04:e9:57:e6:20:d6:21:43:d8:94:94:
f0:76:2e:aa:e5:ef:5f:0b:52:79:25:a8:6d:70:51:
ad:c0:80:62:2e:6b:be:f2:45:2b:2d:56:26:d0:ca:
25:97:59:7a:25:4e:23:67:30:00:98:54:84:37:b0:
e3:6f:64:99:2d:f8:e6:58:5d:f0:fd:5b:e0:2f:85:
5f:7c:f9:8e:24:da:1b:57:d2:f0:27:7b:9a:e5:e4:
db:e4:98:1d:5a:00:52:33:99:1b:4c:b8:78:fa:05:
40:7f:f6:67:9f:2b:ea:9e:fd:16:f6:10:98:bc:cf:
a8:59:75:01:93:98:d8:54:69:c3:a7:e3:6b:69:40:
78:f6:30:85:d6:90:5b:10:ef:01:e3:32:67:44:a3:
18:e0:ca:3c:c6:73:94:07:de:93:66:02:43:7b:df:
f1:35:4f:5e:8d:9d:16:89:38:a8:04:5a:95:d1:6f:
5d:95:30:1e:ac:32:5d:17:f3:32:c1:72:03:b7:cd:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:4E:2D:DE:A0:79:15:33:AB:94:7B:9A:E9:5C:78:60:44:18:1A
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:49:f1:cb:ab:86:2e:9d:f3:0c:26:a4:5a:b4:99:24:bc:1d:
ee:51:fc:35:5f:cf:fa:a6:62:dc:43:0e:a1:34:a7:df:2e:58:
e8:7f:ca:88:e4:18:4c:13:a8:4a:26:28:a0:02:1f:c7:51:8d:
e5:38:15:59:c7:f2:3b:0e:11:1a:e2:2c:c9:d0:4f:43:6d:8d:
47:d4:fa:9f:0e:55:eb:84:13:1c:91:a6:36:b7:86:a1:9f:e7:
85:b5:d9:90:4c:2d:87:46:62:ca:fb:9c:7b:1a:c6:00:27:85:
80:8b:0e:70:b1:f6:d2:0b:85:82:6e:30:02:3e:c5:d8:07:97:
d0:4b:d0:d9:c6:f1:cb:88:a7:54:a1:95:f8:c2:31:85:26:e9:
ea:3e:28:b1:0f:34:b5:e4:79:a8:f1:9c:5f:10:ac:cb:f7:d2:
a6:04:5a:b8:9b:fc:58:49:c8:1f:70:85:23:ec:b0:40:fc:39:
d9:ba:1f:12:c7:57:d4:1a:90:76:68:a5:4d:e8:d2:40:b3:32:
a3:f9:30:dc:38:67:5e:37:81:36:2c:27:4e:90:b9:b1:20:ed:
f1:1a:85:0b:68:7e:60:f1:54:93:b1:8f:94:d7:94:9a:a7:4c:
5b:c9:46:5b:c5:2c:d5:f0:57:be:65:54:e7:82:8c:7b:25:be:
7c:f7:2e:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9ne7ty2QK3MV4QESTJSn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjYwOTIwMDcwMDM5WhcNMjYwOTIxMDcwMDM5WjAzMTEwLwYDVQQD
EyhkMWZjNGUyZGRlYTA3OTE1MzNhYjk0N2I5YWU5NWM3ODYwNDQxODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/P6X8YEhRzIxtK9LfHExf72wXom
3Ezrv9O/nZNBw6QEApk/vdTSfyQc+h0in1z6jTirFIHKvR9RW2Oo46q3BOlX5iDW
IUPYlJTwdi6q5e9fC1J5JahtcFGtwIBiLmu+8kUrLVYm0Moll1l6JU4jZzAAmFSE
N7Djb2SZLfjmWF3w/VvgL4VffPmOJNobV9LwJ3ua5eTb5JgdWgBSM5kbTLh4+gVA
f/Znnyvqnv0W9hCYvM+oWXUBk5jYVGnDp+NraUB49jCF1pBbEO8B4zJnRKMY4Mo8
xnOUB96TZgJDe9/xNU9ejZ0WiTioBFqV0W9dlTAerDJdF/MywXIDt80DwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH8Ti3eoHkVM6uUe5rpXHhgRBgaMB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEnxy6uG
Lp3zDCakWrSZJLwd7lH8NV/P+qZi3EMOoTSn3y5Y6H/KiOQYTBOoSiYooAIfx1GN
5TgVWcfyOw4RGuIsydBPQ22NR9T6nw5V64QTHJGmNreGoZ/nhbXZkEwth0Ziyvuc
exrGACeFgIsOcLH20guFgm4wAj7F2AeX0EvQ2cbxy4inVKGV+MIxhSbp6j4osQ80
teR5qPGcXxCsy/fSpgRauJv8WEnIH3CFI+ywQPw52bofEsdX1BqQdmilTejSQLMy
o/kw3DhnXjeBNiwnTpC5sSDt8RqFC2h+YPFUk7GPlNeUmqdMW8lGW8Us1fBXvmVU
54KMeyW+fPcu+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:20:57 2026 by rpki-client