Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: QYEE4F0TrEmWzaUTWWOWgn/reOTLDxHeJUlQ6HsyODo=
Subject key identifier: 68:04:4B:AF:DB:89:EB:54:34:2C:31:52:FF:2D:E2:27:D4:57:E8:4F
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019F236A3E8FC8E942B250D6987AEBFDAFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 159D
Signing time: Thu 02 Jul 2026 15:19:52 +0000
Manifest this update: Thu 02 Jul 2026 15:19:52 +0000
Manifest next update: Fri 03 Jul 2026 15:19:52 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: 2/rYzdOo5sl1IcaiqGeUbfCrJOLNSQL1hUX/bNsTDyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:3e:8f:c8:e9:42:b2:50:d6:98:7a:eb:fd:af:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Jul 2 15:19:52 2026 GMT
Not After : Jul 3 15:19:52 2026 GMT
Subject: CN=68044bafdb89eb54342c3152ff2de227d457e84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:a0:6b:fa:8e:c3:1a:59:3c:18:87:2a:00:
28:da:57:45:0c:61:7b:70:6c:3a:49:e0:44:1f:02:
28:6f:50:13:d4:0a:f8:e0:c8:c0:4c:06:5c:61:0e:
43:7c:e6:c5:bf:3a:d9:17:1e:16:b9:e8:40:29:8b:
b2:f6:54:f3:35:f5:05:bc:97:e7:e3:d3:94:be:75:
3e:b2:7b:b5:e1:44:e0:24:99:39:97:71:bd:ee:70:
10:59:ce:c6:e4:65:30:89:8f:06:3c:13:70:35:f4:
b5:05:76:87:de:45:00:2b:66:85:e2:31:d1:c6:e9:
f4:f3:c6:98:1f:b7:3f:02:31:fe:3b:65:6a:62:5a:
ef:bb:02:15:99:a0:33:90:87:3d:b6:e9:e0:2a:5f:
20:fc:cb:ac:51:c9:87:b8:62:22:f3:41:62:df:04:
82:7f:83:9d:d0:62:85:33:8f:8c:38:8a:7a:ec:5d:
bd:2c:74:65:02:8e:ca:eb:64:0e:22:c7:c1:f7:e4:
2f:9a:b3:fc:12:23:47:d8:62:54:de:e2:f0:8c:cb:
1d:b5:32:81:05:9f:5b:be:54:8e:9e:bc:25:37:b0:
87:9b:52:31:7a:b3:ea:ca:66:e7:a9:fe:0f:6d:b3:
32:21:a3:5b:74:45:be:8f:4d:27:2a:d4:16:9a:ce:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:4B:AF:DB:89:EB:54:34:2C:31:52:FF:2D:E2:27:D4:57:E8:4F
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:73:32:21:33:e4:57:af:1f:e1:0b:59:15:18:e7:ef:7b:f4:
15:a1:a2:f6:1e:c7:5d:03:6d:11:67:60:fd:bc:c6:f1:ae:ed:
5d:a7:43:02:1b:6b:26:8f:16:cc:2d:d4:ed:52:27:26:07:1f:
d4:47:55:c2:07:f9:1b:35:d6:18:d7:81:3a:a1:82:da:f7:83:
f0:b5:5f:f3:7c:d3:76:6e:15:76:3c:13:0d:61:b7:7f:8f:f8:
2f:61:e0:41:03:4d:dc:3f:2f:2c:a5:88:e4:8e:46:e2:3e:30:
2c:99:96:44:81:6f:ea:30:de:0b:81:4a:66:d4:95:50:30:d9:
75:fc:77:39:cd:38:e6:36:b3:ad:89:69:d2:54:0c:bd:26:1d:
f8:93:82:52:0f:be:08:e5:a9:0f:24:00:34:d0:00:e3:ad:bc:
ca:6e:53:2c:06:60:81:62:1b:3e:9f:da:a6:0b:d0:02:5b:35:
2a:0c:2e:a9:77:f7:2a:aa:f6:6f:be:5b:30:41:50:0a:f0:f2:
14:9a:e1:b3:56:2d:09:37:e6:c0:7b:20:ae:11:22:49:79:30:
3a:d6:14:c2:5c:26:92:73:eb:c1:32:02:7e:16:5c:e2:bf:98:
83:1f:3c:d4:78:ee:0f:e4:e7:f9:53:2c:6c:57:74:7b:30:66:
72:66:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:20 2026 by rpki-client