Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: 7fh1qhGVd9SQ8c9xZFw4aW3cVCE0Jrdm8S20mUf4Wfc=
Subject key identifier: 53:3C:44:92:84:9F:43:F8:44:6B:D7:D5:3F:0E:6B:72:F9:0D:63:39
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019CAAC61560008D0320072A488F08F285D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 1454
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: tbAdODstEuXbDNcDd+MhWDB6kXEX8JkTo5zrkx6EXvk=)
2: m4q0A3jo-Psa1VwSZmAVU7cx4KA.roa (hash: HLxMrkp3gY80aoJdmsKjWAi+o3QcRz5CaA37tWL7kKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:15:60:00:8d:03:20:07:2a:48:8f:08:f2:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=533c4492849f43f8446bd7d53f0e6b72f90d6339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:ac:3f:c0:04:f8:ac:21:e3:56:4b:13:65:
9f:46:21:80:9c:93:18:97:23:eb:eb:e1:01:f1:cd:
26:b9:6b:36:c7:19:0e:75:93:ab:5a:6d:50:a9:59:
c2:df:db:30:81:34:c5:7e:2a:f6:fb:b8:18:00:09:
ce:ab:6f:b7:8b:85:ea:c2:93:6b:12:bb:83:08:db:
8f:e5:4a:e4:0c:45:15:20:44:45:c6:29:0d:a8:ec:
e7:2d:a7:ee:63:84:14:0c:40:52:2d:7a:b2:f9:4b:
d6:fd:c2:91:23:08:37:49:95:ad:84:18:32:88:9c:
64:9a:32:82:55:45:01:33:db:45:18:05:ad:69:b0:
08:45:7d:99:4e:7b:45:4e:98:88:67:8c:8c:10:ca:
29:49:a6:35:05:94:e3:99:40:92:e7:1e:be:7f:57:
db:7f:99:9c:73:70:4d:e3:fe:88:1a:b5:07:e8:d7:
7f:8b:2d:7b:3a:57:86:d4:4f:fa:e1:ad:27:a4:8c:
19:dc:03:f7:db:8d:24:fc:fe:a4:a6:f8:d6:ad:cc:
98:ed:0f:18:99:35:60:1f:62:32:25:f1:aa:41:6b:
02:bd:be:1f:2b:59:7a:93:38:0d:2d:d7:73:78:6f:
f8:42:bd:1c:84:bd:6f:05:c8:eb:8f:78:58:1d:7d:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3C:44:92:84:9F:43:F8:44:6B:D7:D5:3F:0E:6B:72:F9:0D:63:39
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d3:87:69:6c:2e:4a:29:64:c2:6e:25:6c:d6:bf:86:3a:02:
fe:36:cb:ea:46:aa:07:af:33:15:44:ee:e2:43:8a:49:bf:26:
31:0b:64:98:35:55:f8:6b:c8:4a:a1:62:c6:80:3d:c4:31:52:
99:64:32:b5:28:29:ce:90:b5:97:82:93:67:25:c5:dd:b7:65:
94:07:13:2f:b8:63:2a:00:28:c4:9c:19:e8:51:47:81:1f:40:
0b:8b:f1:04:d8:56:88:54:c9:d6:ae:45:4f:f6:96:9c:da:c8:
62:1c:3d:2e:4d:a7:a4:64:9f:39:57:96:5b:9e:43:6f:1d:2d:
56:7c:73:ed:ea:e1:be:9a:4d:f0:5b:d1:ab:c9:ac:67:48:08:
a3:c8:a8:fe:ec:2c:1f:77:2a:82:21:bb:1e:49:6b:d2:b7:8a:
74:14:df:a8:ad:a2:fa:6a:ab:a2:3f:12:b4:5a:1f:21:82:b7:
b0:99:05:eb:31:cd:8d:d9:a2:72:fc:d5:28:61:e4:e0:45:ba:
93:6f:6f:ef:f4:83:8f:ae:5a:36:6a:56:fa:21:d6:3b:af:07:
97:2f:96:91:63:57:07:a0:70:85:2d:df:db:ee:00:70:54:cb:
6a:57:a6:80:62:63:5c:99:b2:59:95:da:3d:29:bd:c6:31:a4:
5e:e4:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:39 2026 by rpki-client