Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: 42Jc4zYxrxOIOYS6O7pwtf69vgE8A2BJCD8VQamDTzw=
Subject key identifier: FF:73:5E:12:95:6D:3E:36:DA:EE:6E:69:6E:86:71:A0:8C:52:36:56
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 01A0C7468228361B60509F2912885FB0F73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 04:01:21 +0000
Manifest this update: Tue 22 Sep 2026 04:01:21 +0000
Manifest next update: Wed 23 Sep 2026 04:01:21 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: lyywlRfaeuBJAxiIodSAeNgNw5sDHmaj11rgH3f5GMo=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:82:28:36:1b:60:50:9f:29:12:88:5f:b0:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Sep 22 04:01:21 2026 GMT
Not After : Sep 23 04:01:21 2026 GMT
Subject: CN=ff735e12956d3e36daee6e696e8671a08c523656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:9a:0d:1e:08:0a:86:5e:83:53:f6:55:c3:
cf:81:d8:46:23:ee:69:61:be:1f:94:f0:7c:f4:ae:
7d:e1:56:af:20:f9:03:e0:00:bc:81:74:c5:e3:5a:
fb:77:03:e0:1c:8f:d5:47:1d:9d:23:5f:ea:b7:62:
7c:5c:8f:e7:99:a0:23:4b:15:48:c4:8a:27:7b:f0:
e9:87:f8:07:3f:e3:42:53:4f:02:1d:ae:21:f1:41:
db:cd:21:99:b6:41:01:43:d5:5f:9e:cd:ed:0a:71:
a4:a5:b5:37:cb:55:03:f9:9b:4c:4b:04:f1:8b:04:
52:a7:0e:7e:56:46:8f:2a:0f:60:4a:63:ca:ac:d9:
f6:b0:b1:88:ca:f1:78:83:1d:d8:a5:28:a1:97:c3:
fc:99:df:aa:47:c9:38:d9:a7:b6:f0:d4:cd:89:71:
e7:03:c5:05:cf:28:35:e5:a5:57:66:ac:18:3c:0a:
71:4a:14:db:dc:30:82:81:8c:85:b3:21:1f:a4:65:
ac:85:bd:b7:51:00:fe:a1:bf:ac:97:ed:78:f6:02:
6c:d0:66:22:c3:ac:f7:81:d1:5d:05:b1:bb:2f:fd:
a3:16:e8:27:b9:27:14:60:e6:63:ae:c6:dc:33:62:
0e:5c:e8:7a:3b:47:0b:a7:fe:50:70:b2:84:a7:cf:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:5E:12:95:6D:3E:36:DA:EE:6E:69:6E:86:71:A0:8C:52:36:56
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:21:de:c9:9a:ad:34:93:96:02:9f:81:e5:b5:f3:45:8d:
05:55:b8:2e:5c:dc:35:50:7b:a9:1d:dd:7d:e8:06:63:fe:30:
ca:ac:4a:5f:ea:7a:3b:a4:99:49:1a:34:9d:68:ae:57:f3:4d:
f4:f0:88:51:e1:73:5c:b6:db:01:b7:96:ba:23:ed:a8:ca:12:
56:a4:d8:12:1a:ec:15:9a:aa:06:6f:83:2a:cb:c1:78:f9:4a:
2e:83:a4:f4:4a:93:23:65:11:dd:5c:05:e6:5c:ea:cb:42:ce:
4b:64:8e:28:e2:b7:94:dc:b2:43:d6:91:7a:86:d8:df:7f:74:
14:59:12:0c:a2:67:f3:36:03:74:1e:95:55:8f:bd:9b:41:ba:
a5:36:a7:3b:8d:2a:c3:ce:b4:a7:02:86:65:82:7d:52:d2:b0:
20:f3:b0:66:88:5a:32:be:d3:29:8c:64:df:ab:2e:fc:db:fe:
f3:0b:5a:3a:63:61:5f:65:25:70:8e:24:01:c4:55:74:43:c8:
db:36:4f:02:16:0b:fe:64:5d:9c:09:f4:03:ba:a2:a0:88:0b:
31:20:d7:de:9a:3e:e0:22:ef:ae:c0:59:d0:2e:24:67:58:31:
f3:31:39:b8:0b:45:9b:48:4d:b1:81:f1:6d:c6:7f:4f:e7:9a:
09:33:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:17:56 2026 by rpki-client