Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: VGIH3p/9/o22osfZ2aKNZzJH6SkvTmWNIsLChC579H4=
Subject key identifier: B6:B4:C2:DB:E3:43:B7:C3:9C:0E:12:2A:3E:7E:EA:80:92:54:6A:D1
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019D9A3E69E294C84770903780C54005EDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:14 +0000
Manifest this update: Fri 17 Apr 2026 07:01:14 +0000
Manifest next update: Sat 18 Apr 2026 07:01:14 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: Dx+C6zZMbh7RmV+2Mw5HGPk0W1Cd2uTFdw5HjYqzn7M=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:69:e2:94:c8:47:70:90:37:80:c5:40:05:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Apr 17 07:01:14 2026 GMT
Not After : Apr 18 07:01:14 2026 GMT
Subject: CN=b6b4c2dbe343b7c39c0e122a3e7eea8092546ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:e0:04:01:b6:95:ce:6f:8a:50:37:4f:9f:
5a:8d:50:e7:31:4a:64:74:2b:10:ba:78:12:d3:b4:
f1:e0:c5:2e:3b:96:5c:c4:e7:62:84:2b:3b:a5:af:
5d:c9:cb:6f:55:9d:1b:a8:61:3e:33:d2:aa:09:ec:
8e:d5:70:76:0b:bf:ee:5e:0d:61:d0:3c:9c:6c:e1:
19:89:dd:a7:74:76:f4:be:e8:8a:a2:95:e1:07:0e:
4b:ff:19:ad:20:2b:41:dd:6d:04:cc:cf:07:25:08:
58:1c:a1:49:4f:fb:fd:07:31:89:00:83:63:ca:ba:
e2:4e:a9:f2:14:32:50:27:58:de:cd:32:fc:84:21:
79:fb:0a:43:d1:08:ae:e9:6a:b2:6a:9b:73:7f:c3:
76:ad:3f:c9:53:d0:5a:49:26:2a:f6:9f:1f:9d:d6:
20:63:87:c0:2c:a6:fd:a7:fb:2d:d6:55:49:41:25:
d7:d4:81:1c:38:ca:72:7b:c2:82:13:f9:9d:70:b9:
3b:5f:fc:27:e6:2b:47:8f:be:6b:96:22:62:16:d4:
bf:ea:1a:96:2a:07:2e:e4:eb:15:91:d9:03:43:ca:
df:12:90:52:4a:fd:cc:c6:06:0e:e3:de:a5:7d:fa:
98:e3:58:b8:0c:d1:58:84:90:5b:34:b3:5b:30:ce:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B4:C2:DB:E3:43:B7:C3:9C:0E:12:2A:3E:7E:EA:80:92:54:6A:D1
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:76:02:d9:59:0d:a5:f9:4f:6b:42:61:1e:59:1e:42:6a:1a:
c9:03:07:de:63:cc:7b:72:cb:04:e5:76:30:eb:29:41:60:fd:
fc:fb:86:9e:21:fd:7e:29:57:b7:50:22:bc:cf:93:e4:2f:bb:
cd:8f:b7:9a:dd:69:ee:75:a3:30:e6:5a:88:48:b1:17:c3:0f:
8c:95:61:3c:92:44:24:d4:b0:32:43:46:38:b3:72:53:2a:c5:
8c:06:5a:0a:28:41:b5:d0:9e:e5:71:e2:05:f9:b8:b8:50:c0:
7a:66:4e:70:2b:49:ec:92:83:a2:52:37:95:b4:07:00:12:9e:
37:7d:e0:4b:9b:ce:3e:86:40:b9:79:b7:1e:02:3d:ff:bc:b1:
c1:72:f7:1d:b6:6e:af:29:0f:54:b7:e9:c5:79:28:fa:15:12:
4a:02:32:e8:c4:e9:d4:41:f5:b2:a6:8d:fe:64:76:66:9a:b0:
47:7b:65:cd:5b:53:52:5f:6a:67:2c:4e:9b:bd:e6:13:d4:94:
02:ab:62:13:aa:45:83:25:7d:6b:5a:22:73:4e:f8:5e:be:f3:
48:50:17:dd:b7:7b:4d:c5:dd:eb:14:ef:c1:db:26:76:e8:3c:
6e:67:2c:f2:fb:83:25:92:05:f2:8c:ef:ed:21:fd:70:7e:6b:
ca:8a:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:29 2026 by rpki-client