
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: UiEe9OD0rrTUGtXaR9PsqxnUhTfK5Eyvx+LTUVsj4sM=
Subject key identifier: 74:A6:C1:68:32:6E:7B:06:AC:E4:5C:BE:EE:4A:6C:1B:5A:D0:34:2C
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019DA5D4E1B6D2A023074EF1DB48D4DE4308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 14D6
Signing time: Sun 19 Apr 2026 13:01:25 +0000
Manifest this update: Sun 19 Apr 2026 13:01:25 +0000
Manifest next update: Mon 20 Apr 2026 13:01:25 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: IwjYv3eUSGm055hdII+bN/phWMfsbo86B/Rou6vZn2I=)
2: m4q0A3jo-Psa1VwSZmAVU7cx4KA.roa (hash: HLxMrkp3gY80aoJdmsKjWAi+o3QcRz5CaA37tWL7kKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:e1:b6:d2:a0:23:07:4e:f1:db:48:d4:de:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Apr 19 13:01:25 2026 GMT
Not After : Apr 20 13:01:25 2026 GMT
Subject: CN=74a6c168326e7b06ace45cbeee4a6c1b5ad0342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:2c:5a:c2:7b:44:a7:88:b7:c9:3a:45:e0:
e2:24:43:a8:b4:86:05:50:5f:0c:bb:27:a2:35:69:
09:0d:9d:a3:6e:ba:95:95:19:e5:22:e1:d3:9a:5c:
2c:43:b2:77:a8:73:42:91:e8:81:61:ae:fc:06:fc:
d2:42:d6:b8:a3:49:7f:d0:72:69:91:01:a8:6a:12:
87:de:00:b2:55:15:6d:e9:aa:d6:10:96:75:4d:69:
c3:0f:01:11:16:76:bd:16:8c:fe:48:af:c8:d8:10:
77:b0:d6:7c:05:c7:c7:b8:9c:58:dd:6d:0a:a8:0c:
ec:9f:69:e4:43:ad:2b:2b:3f:b5:38:7f:07:7d:c8:
19:29:aa:32:47:4b:97:28:68:ba:34:37:f8:1f:e8:
b3:8a:4c:1c:fa:9e:e5:fa:02:74:53:ad:c6:96:fa:
3c:f3:97:f7:96:14:1a:c8:e6:db:cb:41:58:79:15:
73:66:c9:ef:84:1d:5b:50:3a:5e:72:0c:a0:29:bf:
9b:44:01:01:6f:35:e7:22:6c:56:df:cc:76:a2:72:
d1:bc:e2:4c:d6:2d:5d:bd:0c:a0:71:bd:30:a4:73:
3f:73:e0:1b:13:bd:85:2d:a0:31:3a:01:c7:46:a9:
28:e1:fc:43:3d:64:fe:f6:c3:a8:27:4b:78:30:22:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:C1:68:32:6E:7B:06:AC:E4:5C:BE:EE:4A:6C:1B:5A:D0:34:2C
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a3:40:63:2c:47:9c:16:96:da:f1:0d:d5:70:6d:ce:f1:2e:
c9:85:1e:1c:6b:73:ad:a8:50:78:87:2a:90:be:99:f3:09:4b:
7b:d5:d7:52:1f:08:20:23:22:74:fc:8b:2e:8c:08:4a:3c:26:
36:7b:41:1d:84:0a:2b:e6:44:af:c1:be:f7:b6:de:77:53:17:
2b:5b:b7:0e:60:7a:e1:5d:b7:ee:f9:a7:23:87:3f:d9:a1:0b:
f1:7e:87:aa:71:4c:76:7d:76:70:36:86:ae:f0:0b:d6:7b:ab:
b8:52:69:c2:a8:8d:ee:f4:c5:5b:c8:aa:8e:43:e6:06:35:2e:
db:89:15:18:fc:4f:ac:35:62:45:a5:ae:dc:6f:b8:32:b5:54:
c0:10:a9:b6:05:08:e8:6b:e0:8e:15:47:71:47:8e:aa:ea:65:
e7:11:4c:87:0a:55:00:8f:9a:81:5e:96:70:cf:a4:39:a9:22:
ee:a0:34:6b:44:7e:46:13:aa:2e:ce:a7:b3:fd:46:ef:ef:b4:
32:58:02:7d:28:1e:93:fc:08:50:18:ca:3d:14:88:6c:11:8d:
c0:aa:9a:0d:02:6e:61:e4:11:66:c6:2f:6a:e7:2e:fe:28:7b:
c9:c8:a6:41:c0:2b:3d:5b:7b:17:8b:22:93:d8:00:31:e8:da:
09:79:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:10:06 2026 by rpki-client