Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: XLRHSnsKXQzoEOXKRA7rOLA1JAuCJAIgtqNO0fAPMM8=
Subject key identifier: D1:F4:C4:9E:5A:07:D5:4B:28:09:75:19:27:99:91:95:2C:9E:60:2D
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019CAAC6241EF5F32853CAA2BCEF1A1B3042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: e+0uTC7OGrwuBgCOoTEhOW8KtD/kmYyDFJY4ZbuWuAA=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:24:1e:f5:f3:28:53:ca:a2:bc:ef:1a:1b:30:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=d1f4c49e5a07d54b28097519279991952c9e602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:0d:0a:28:af:f6:91:44:86:6e:a5:dd:72:
87:40:89:a7:5d:5c:04:de:ff:cb:ff:e9:9c:fc:b6:
ce:d0:07:76:65:bd:30:66:7e:78:43:86:04:aa:2a:
f9:dc:0e:08:1b:6c:53:77:4a:61:51:6c:b4:89:6c:
5b:c9:cc:d8:84:b5:80:ae:34:32:73:24:56:c8:1f:
b1:00:66:13:f2:16:16:78:ba:7f:cf:49:28:b6:a2:
e4:a2:02:70:00:35:fb:1c:60:ea:da:5d:32:25:14:
c1:c5:c9:1d:90:ee:9b:25:01:60:90:d0:75:78:d1:
ce:4f:22:4a:d3:f1:4a:01:22:09:92:0d:e0:a8:60:
ae:08:81:c8:3d:84:10:49:a2:a6:f2:55:68:21:16:
3b:ea:5a:3f:e6:81:30:b5:1e:1c:ac:00:6e:a7:e6:
10:92:a0:03:7a:b4:82:b6:f1:52:39:56:bf:47:5b:
3e:68:17:5a:d6:29:92:58:9f:2c:6e:28:34:f3:c9:
6f:39:01:14:b5:c4:c8:f3:b0:dd:2b:82:85:1d:ec:
ca:c8:f1:c1:d3:cc:f4:a5:81:e6:cf:e5:ee:bc:23:
03:40:8f:12:9e:39:0a:e1:51:88:67:25:98:89:77:
91:9b:36:84:23:fa:c4:6d:60:e1:8f:e0:a3:8e:6e:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:C4:9E:5A:07:D5:4B:28:09:75:19:27:99:91:95:2C:9E:60:2D
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fc:d0:20:9b:31:0c:d2:2b:f0:08:96:0d:41:29:ee:a4:d7:
ef:fd:b0:b0:45:9a:0d:72:af:c1:fa:c7:4d:c7:66:11:04:96:
fd:de:a8:c4:6c:0b:3b:0b:3b:3c:5b:7a:fd:0d:11:a5:a9:cc:
6b:82:09:35:19:e0:27:82:a4:1c:fe:04:62:de:41:21:f8:2c:
ab:e0:e8:bc:d3:fb:ff:6b:58:5e:88:d3:ea:fb:48:54:44:48:
88:1c:c8:76:ca:f2:47:03:12:49:6f:5b:30:85:32:15:3d:7c:
99:72:c7:86:52:af:25:c2:00:fc:c7:7f:2e:42:70:f0:a8:f5:
9a:9f:3a:84:82:f9:88:dc:d7:fa:7a:9f:45:98:e4:d3:96:47:
9d:ad:95:a2:ed:6f:53:d8:b1:b4:45:bf:1c:68:73:71:44:09:
17:14:0d:5f:93:9e:61:40:ec:87:90:05:4f:fe:ef:7b:16:18:
8e:b4:0d:a4:29:29:ea:cf:c7:ca:5a:85:71:82:20:1b:2c:e4:
4b:56:d5:22:9c:0b:b4:13:d9:90:d1:97:62:75:26:3d:70:27:
43:cf:67:05:da:d9:f3:cd:9f:f2:c2:a4:3b:f2:f5:47:5c:4b:
1f:81:b5:ab:f8:e6:86:84:ad:ff:f8:34:7b:f8:6c:19:51:8c:
26:fe:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:25 2026 by rpki-client