Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: 3yWgxj7WB3S8XOHNLBkYUp6DI3aFdW95Rl6K0Tst+Bs=
Subject key identifier: 4F:26:5D:86:92:0C:57:3F:DA:34:5C:A4:EB:8F:72:99:ED:A3:82:BF
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019EBFC8136F336F953C01E362171A232F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 07:00:20 +0000
Manifest this update: Sat 13 Jun 2026 07:00:20 +0000
Manifest next update: Sun 14 Jun 2026 07:00:20 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: N0uY8/2iXZzrP/14OGm+faP6uw+fx1QZUUbo8Xf4i8w=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:13:6f:33:6f:95:3c:01:e3:62:17:1a:23:2f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jun 13 07:00:20 2026 GMT
Not After : Jun 14 07:00:20 2026 GMT
Subject: CN=4f265d86920c573fda345ca4eb8f7299eda382bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:04:f7:91:12:22:1c:d3:1c:9c:c6:de:a0:
29:bf:6c:ea:0f:09:6c:65:68:ef:f5:b7:3a:a8:0d:
ac:fc:91:1d:e4:a9:f2:07:54:b1:b7:41:72:8c:20:
96:4d:ef:30:5f:ae:43:ae:23:df:aa:06:39:fe:30:
ad:2d:2d:55:a6:2c:f5:05:02:00:a4:4f:5a:40:7a:
f8:52:90:95:16:ad:d8:5c:3c:5c:a2:db:77:a1:73:
b1:60:1b:a7:7f:6c:26:52:f4:eb:b8:3b:20:bf:4f:
a5:b8:30:7a:28:bd:28:74:6d:11:5c:c1:d5:60:a1:
b9:f4:2f:c8:ba:21:34:15:73:c0:63:96:b0:7f:95:
85:e2:55:a1:27:03:81:c8:5c:a8:a6:c7:c5:8f:b3:
04:7d:0d:a9:b4:4f:ec:60:c2:35:a9:0a:7f:b2:c8:
26:e8:9b:19:6d:6e:be:97:92:11:ba:db:21:7f:5d:
c1:7b:d3:90:39:b1:19:e7:e6:29:35:4b:66:28:d7:
7f:d0:71:cf:82:7c:ce:6d:d9:d8:95:9a:a1:44:b5:
87:f7:32:b0:bd:be:ff:f3:6f:4a:22:40:b6:a5:8a:
45:dc:11:4c:ae:3f:42:b0:ff:81:8a:0f:95:c2:ce:
b3:cd:17:63:d4:03:a7:22:a8:97:69:9b:47:d2:fe:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:26:5D:86:92:0C:57:3F:DA:34:5C:A4:EB:8F:72:99:ED:A3:82:BF
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:41:8b:05:ed:09:4a:40:6d:c6:58:e9:ae:fd:4b:bf:b0:76:
19:a8:ab:66:04:1c:d0:ed:f5:8e:37:21:30:9d:be:0b:22:5e:
af:9c:0e:d7:83:5a:e5:71:e0:ed:c2:e0:c2:51:ba:dc:50:0b:
9a:36:14:fb:76:e4:c4:c6:f5:63:01:3e:24:4d:b9:23:fc:68:
d9:28:42:d2:fc:14:b2:7a:8c:3c:1e:83:7d:a9:a3:c6:f0:99:
b6:da:06:a6:f6:8a:fe:90:4c:ad:2c:16:c9:fc:cd:72:ca:cb:
29:21:f0:7a:d1:95:5b:8c:18:5c:56:2d:a6:b4:89:dd:73:b3:
ca:41:70:4f:15:40:aa:36:6e:13:ea:1c:c5:1d:22:5a:01:50:
61:9e:2d:c0:5d:ae:3a:72:d2:39:4f:a6:92:4f:b6:5c:41:76:
9e:dc:af:33:1b:11:0e:bd:64:71:1b:af:92:35:1a:f0:af:7b:
7c:da:f0:ee:f5:1c:0b:80:9d:95:6b:72:b7:23:e7:0c:30:00:
5a:39:18:74:b2:30:b2:97:70:1f:3e:87:c8:56:ea:d0:2a:5f:
82:1d:64:af:b1:1b:14:86:14:50:b5:25:f7:61:17:30:0d:05:
8f:ae:c4:94:17:82:3c:56:ac:83:7f:2e:b6:d4:31:17:ce:7d:
2d:83:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:27 2026 by rpki-client