Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: ct18hAqTNI3MktRhpCfGh1AlPkTMxRsTCOLjoHxBAH4=
Subject key identifier: 30:E7:16:DC:F2:30:CA:1B:20:F2:EF:E8:FF:87:9B:45:A3:B7:B2:F5
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019FAB63C603E82C6952FBB08348B6318B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:01:10 +0000
Manifest this update: Wed 29 Jul 2026 01:01:10 +0000
Manifest next update: Thu 30 Jul 2026 01:01:10 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: g71GCN0pYdwVR/dxdhYTWT7zn3F1eiZOyNjLro4aADY=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:c6:03:e8:2c:69:52:fb:b0:83:48:b6:31:8b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jul 29 01:01:10 2026 GMT
Not After : Jul 30 01:01:10 2026 GMT
Subject: CN=30e716dcf230ca1b20f2efe8ff879b45a3b7b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:29:20:70:a5:07:22:7d:be:df:ee:3e:65:
28:fe:22:ac:4c:5c:cc:be:ed:98:97:8c:0a:9d:91:
34:e9:49:59:ae:22:5d:7e:a7:c6:56:92:6d:67:fd:
78:94:86:6b:3c:f9:18:7d:b5:a9:60:05:e7:f9:2c:
09:42:52:40:75:39:a1:b9:96:12:46:e0:78:13:32:
f1:d8:66:c1:00:eb:dc:61:5f:b3:c4:b4:63:2a:15:
a9:f2:32:9d:ad:a2:67:37:8d:ac:2b:2c:25:97:f2:
ea:ea:12:e0:3b:ae:69:c5:3f:0d:08:02:46:aa:d0:
15:2a:5c:22:cb:b1:b8:50:3c:3f:1b:e2:77:5d:53:
b2:f6:dc:12:91:e1:6b:1d:68:f5:3d:5f:24:8b:36:
ba:c8:7d:0a:f2:a9:92:ba:9f:86:82:2c:bd:a0:0b:
a0:3f:22:35:6a:a8:9b:e5:c9:7c:95:cb:e3:7c:f7:
e0:e9:62:0e:f4:59:72:43:ee:93:60:87:0a:5e:87:
e8:53:6f:bf:de:be:fb:61:57:b1:40:e4:6d:af:04:
ee:4a:23:23:0b:32:6c:f5:ef:44:ee:df:4a:a5:6a:
c8:6b:c5:44:60:9a:49:c6:13:21:a7:79:58:b9:30:
52:d5:35:fa:ab:29:2e:67:e2:3a:42:5b:8d:7c:8b:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E7:16:DC:F2:30:CA:1B:20:F2:EF:E8:FF:87:9B:45:A3:B7:B2:F5
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:6d:b5:b2:74:18:84:50:dc:cc:d0:56:b1:69:69:e3:0a:
f4:b8:cb:8f:b4:65:90:9f:95:42:57:5f:5a:52:f0:be:1d:59:
a6:b1:39:16:ad:76:73:3c:7e:39:24:4a:e3:82:0a:9e:72:72:
ee:96:d0:93:3a:58:c0:6b:22:a4:d2:e2:09:46:e4:1e:b7:30:
90:a4:dd:fa:4e:2c:be:40:48:6e:a5:36:14:ca:75:0b:47:b0:
9f:59:08:a4:19:94:9a:ba:b9:02:de:c4:3c:2d:3f:60:16:a4:
e8:77:98:b6:23:e1:86:15:0f:b7:09:11:1c:18:90:50:a5:57:
8d:b3:c1:81:84:d9:81:2f:c0:1d:8e:76:8b:2c:0f:72:7d:b4:
11:14:fa:1f:dc:e5:10:2f:6e:8f:8c:20:7f:8b:54:80:3b:f3:
99:a8:14:0a:30:47:21:d7:63:37:87:e2:d1:d9:96:f8:f1:fd:
46:36:24:17:15:0a:e6:9d:f1:6a:00:fd:1a:8a:83:1a:2b:7e:
01:36:4c:2f:92:fd:9c:f1:76:7c:b3:0e:49:7a:e3:17:7c:dc:
c1:3a:a4:7a:3a:0d:be:18:68:61:46:38:c7:23:5f:38:e4:d4:
87:95:22:ca:a6:42:8c:12:0c:7d:fa:fd:fc:75:5c:3b:83:46:
b4:2e:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:14 2026 by rpki-client