Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: wqadphhkuKyu+MStnSkLNlKABAJ4wtkw9hh3SJkQ+Tw=
Subject key identifier: 8E:4C:C4:BA:29:6A:DE:79:16:FB:AC:DD:96:88:FC:BB:63:2A:8A:39
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01A0CF6CD5A4BAC55B1B5C894AE2301A4965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 12FC
Signing time: Wed 23 Sep 2026 18:00:11 +0000
Manifest this update: Wed 23 Sep 2026 18:00:11 +0000
Manifest next update: Thu 24 Sep 2026 18:00:11 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: vqhy6pRgOwr7X89fP8sXsFyAeqxxg+wHcImeS+Szmus=)
2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
3: 8QmIuePPjKmEzGNivjh_kLAuMAY.roa (hash: if+R+69YwCCEXsp6uMBg/VlJaAaaSa7+SPKc41aJRV4=)
4: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
5: QiiSVCdXMnX6vtwSolUuExK-3cc.roa (hash: cChw7Ea4muVvJ3EI7S7cdxDZrmiLHAuerCOY8OxPcTk=)
6: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
7: wRhtCAAx7zEpmI40CBpFB6CppGU.asa (hash: A0EP5dqJF7oVrfX3OmMuR2spKNhblMpR/3OKbRM6pT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:d5:a4:ba:c5:5b:1b:5c:89:4a:e2:30:1a:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Sep 23 18:00:11 2026 GMT
Not After : Sep 24 18:00:11 2026 GMT
Subject: CN=8e4cc4ba296ade7916fbacdd9688fcbb632a8a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c3:62:42:4d:2f:d6:66:34:7f:e2:3c:8e:b0:
9d:6f:42:69:41:41:86:aa:ac:ff:43:08:f6:fb:9b:
02:64:9e:98:8f:95:01:f4:9e:df:19:d1:8c:f5:71:
50:7f:79:29:ce:37:f4:d4:91:83:f3:39:bc:89:9f:
a8:e6:85:46:1c:b0:9e:90:b7:04:e3:bd:54:a6:e6:
d4:1c:70:1d:6c:73:4b:91:f1:ad:86:d8:55:e6:00:
57:63:ba:2e:eb:69:72:0d:30:81:f3:b1:a7:56:10:
63:22:f4:b0:62:1b:37:da:37:db:32:e8:08:70:da:
ec:c8:cc:5d:b0:34:f2:7f:21:0c:ec:9e:e2:a7:7c:
10:c2:9c:41:02:fc:8d:c4:0e:a0:77:74:47:42:1b:
66:3e:73:75:37:83:4a:07:26:ce:14:85:b5:96:46:
5c:05:dd:43:da:20:3f:35:45:14:ab:7d:de:48:b2:
c9:09:43:09:d0:26:7d:1e:a1:68:5b:24:fa:c4:b1:
93:8b:d3:ca:42:a2:4a:45:3f:c4:59:52:75:20:a5:
91:92:66:5a:c5:6e:59:b2:d2:37:64:b8:71:9c:89:
18:e3:19:1e:a1:d1:ee:09:4e:99:68:b9:cd:e7:cf:
f0:55:eb:be:f2:5f:2e:11:f0:8a:29:fe:db:f9:57:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4C:C4:BA:29:6A:DE:79:16:FB:AC:DD:96:88:FC:BB:63:2A:8A:39
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:53:29:a8:e5:47:5a:48:51:0f:27:9b:b6:78:b5:d3:1a:71:
c7:67:ea:46:3f:05:44:62:05:96:2b:cf:75:ad:26:07:59:46:
55:9b:82:fd:ab:80:79:e6:02:6a:c8:2f:b4:f1:48:14:dd:c4:
af:fe:f7:0f:33:87:f7:3a:f2:a5:6d:c0:89:3e:9c:75:0d:31:
98:15:80:5f:8c:c7:98:6b:08:8d:a4:5f:fa:43:cb:16:87:4d:
2b:5c:e6:ae:a5:ea:1c:7c:a0:3d:0a:f4:16:13:0e:65:1d:26:
1d:f4:70:30:8b:1f:3b:cf:51:70:5d:95:29:02:3b:c4:cd:77:
41:ed:29:e0:93:36:c0:ce:3a:85:9e:65:2f:db:9b:01:db:a8:
a7:71:23:78:44:f4:cc:25:60:a9:9c:d9:03:b5:83:03:d0:c2:
d8:68:d1:2e:d3:4d:2e:e0:62:d9:3f:38:97:e2:6a:04:05:fc:
6b:af:d1:c6:92:ee:e4:b5:74:e8:9d:a3:c2:8b:e4:7a:af:cf:
ea:e1:7f:34:56:c3:8c:32:59:78:6d:3f:d6:eb:1f:ee:a8:04:
ca:cf:c1:06:fd:cb:ba:5f:d2:f6:a6:0f:7a:ed:ec:a6:a6:f3:
96:5d:74:7d:ef:8a:cc:e3:e7:53:5a:69:0b:aa:32:8a:02:78:
37:89:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:28:12 2026 by rpki-client