Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: LVXn/WnlwskNvZPBJq2Lg8aIMbKn7nkwp/xFtYsSgT0=
Subject key identifier: CB:9C:3B:F7:8A:DC:4A:C2:56:51:C4:24:B5:1A:EF:00:54:DF:50:39
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019DA3E6822081D7C68991DCA8A357145AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 14D5
Signing time: Sun 19 Apr 2026 04:01:25 +0000
Manifest this update: Sun 19 Apr 2026 04:01:25 +0000
Manifest next update: Mon 20 Apr 2026 04:01:25 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: ++hi0fyit08PYtCFmRhjlEW3FgwaBbUicp8Z9x4GaTc=)
2: m4q0A3jo-Psa1VwSZmAVU7cx4KA.roa (hash: HLxMrkp3gY80aoJdmsKjWAi+o3QcRz5CaA37tWL7kKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:82:20:81:d7:c6:89:91:dc:a8:a3:57:14:5a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Apr 19 04:01:25 2026 GMT
Not After : Apr 20 04:01:25 2026 GMT
Subject: CN=cb9c3bf78adc4ac25651c424b51aef0054df5039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:e8:bc:a5:bf:b7:8b:cb:c2:65:c3:c1:3d:
41:39:3d:85:85:0b:6a:dd:2b:29:af:72:2e:e3:07:
e9:fb:53:88:83:55:1e:23:95:a9:5c:ae:f7:4e:5e:
62:6d:3f:7e:51:f3:e8:01:7f:f2:9b:af:ba:79:0c:
47:4a:2f:49:60:6e:a8:93:6d:11:c7:f8:46:43:3b:
f4:39:50:3b:ae:9d:e1:77:38:f4:d2:42:d1:2c:60:
e7:38:bf:ba:51:82:9b:6a:8e:83:48:bd:30:1b:9f:
6b:59:5e:19:16:7d:60:a3:eb:59:15:57:60:b9:72:
0d:22:53:a2:05:1f:91:98:91:3f:9a:ed:59:6d:16:
ed:7d:d3:ee:9a:b6:24:e9:07:34:f8:2b:8d:50:b8:
c2:ba:56:5f:d1:d9:6c:f3:8e:7e:b9:d2:1f:58:2f:
9a:c4:fe:e6:6b:06:ef:09:5c:45:b5:34:1d:52:03:
a7:e3:86:04:05:81:aa:6e:cd:16:48:89:1c:76:38:
71:2a:8c:95:6d:9b:21:c9:a9:52:82:72:e9:20:33:
9a:31:68:53:e4:14:f5:f4:17:df:6a:a6:6b:cf:29:
13:fb:44:64:e9:f9:6b:18:e6:7d:14:07:f5:38:57:
0b:e3:47:40:56:5f:ea:bb:92:91:ef:de:9e:98:94:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9C:3B:F7:8A:DC:4A:C2:56:51:C4:24:B5:1A:EF:00:54:DF:50:39
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:55:83:e5:20:bd:37:54:82:2a:49:35:48:cc:cb:36:33:
8f:61:8a:5e:a8:ad:2f:8b:37:bb:65:68:d0:b3:8b:24:59:02:
cc:68:13:b2:2e:3b:df:32:00:41:2c:96:ed:9f:d8:eb:6c:a6:
94:a8:d9:d5:79:1b:e5:3d:d2:95:f3:c1:5f:07:a5:7b:97:3f:
7a:33:a5:ee:ad:df:a3:6a:3f:9b:d0:43:ac:f0:f3:3c:e7:4d:
52:08:69:c1:c2:f7:05:ae:17:da:a4:6a:69:94:3d:9c:30:61:
49:c4:bd:a3:51:0c:99:68:63:8c:32:d1:89:1b:be:b7:27:0b:
7e:57:9d:f1:09:3f:f8:cf:28:03:0d:51:84:72:65:79:c3:30:
87:79:f1:24:c4:c3:2e:62:8c:ac:37:8c:47:2c:b7:29:a4:e8:
3e:80:8d:68:ae:ea:c9:b0:d7:a1:16:7f:53:50:4b:ce:2c:fc:
8c:1f:ff:2f:2c:3b:2f:5f:66:a8:ec:99:9b:2b:1d:fd:6b:2a:
1d:89:79:d0:17:a5:37:5d:f4:e2:1f:77:f3:c0:45:8c:58:79:
f4:50:6d:99:6f:a4:96:0f:15:91:ac:20:bb:a4:68:30:f1:73:
31:3e:50:5d:d3:68:32:96:5c:cb:30:e1:11:0a:73:87:91:a3:
97:6d:1c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5oIggdfGiZHcqKNXFFqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5
MDYwMWYwHhcNMjYwNDE5MDQwMTI1WhcNMjYwNDIwMDQwMTI1WjAzMTEwLwYDVQQD
EyhjYjljM2JmNzhhZGM0YWMyNTY1MWM0MjRiNTFhZWYwMDU0ZGY1MDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtczovKW/t4vLwmXDwT1BOT2FhQtq
3Sspr3Iu4wfp+1OIg1UeI5WpXK73Tl5ibT9+UfPoAX/ym6+6eQxHSi9JYG6ok20R
x/hGQzv0OVA7rp3hdzj00kLRLGDnOL+6UYKbao6DSL0wG59rWV4ZFn1go+tZFVdg
uXINIlOiBR+RmJE/mu1ZbRbtfdPumrYk6Qc0+CuNULjCulZf0dls845+udIfWC+a
xP7mawbvCVxFtTQdUgOn44YEBYGqbs0WSIkcdjhxKoyVbZshyalSgnLpIDOaMWhT
5BT19BffaqZrzykT+0Rk6flrGOZ9FAf1OFcL40dAVl/qu5KR796emJTmzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMucO/eK3ErCVlHEJLUa7wBU31A5MB8GA1UdIwQY
MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt
NmNlNDQ0ZWJlYWYwLzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw
LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUZVg+Ug
vTdUgipJNUjMyzYzj2GKXqitL4s3u2Vo0LOLJFkCzGgTsi473zIAQSyW7Z/Y62ym
lKjZ1Xkb5T3SlfPBXwele5c/ejOl7q3fo2o/m9BDrPDzPOdNUghpwcL3Ba4X2qRq
aZQ9nDBhScS9o1EMmWhjjDLRiRu+tycLfled8Qk/+M8oAw1RhHJlecMwh3nxJMTD
LmKMrDeMRyy3KaToPoCNaK7qybDXoRZ/U1BLziz8jB//Lyw7L19mqOyZmysd/Wsq
HYl50BelN1304h9388BFjFh59FBtmW+klg8Vkawgu6RoMPFzMT5QXdNoMpZcyzDh
EQpzh5Gjl20cdA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:13 2026 by rpki-client