Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: mE85xKPZH5ICnxm7RHdEVPde65//pubGrFJlsCLPiW4=
Subject key identifier: 3E:62:3C:0A:0D:84:A9:CE:DD:A9:30:AA:7C:05:1B:27:4E:8F:48:77
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 01A0CD1158479C2FBE574D62E1437438F78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 07:01:01 +0000
Manifest this update: Wed 23 Sep 2026 07:01:01 +0000
Manifest next update: Thu 24 Sep 2026 07:01:01 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: WpmgYUgnEXSoUjJfspB8FA+w8ls3+JliZtsRQhOzIfs=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:58:47:9c:2f:be:57:4d:62:e1:43:74:38:f7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Sep 23 07:01:01 2026 GMT
Not After : Sep 24 07:01:01 2026 GMT
Subject: CN=3e623c0a0d84a9cedda930aa7c051b274e8f4877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:49:d1:25:bf:ee:59:c7:fa:f4:b9:a6:b8:
c1:9c:f5:7f:b0:de:3e:1c:02:2c:c3:3f:22:f4:91:
f4:2e:1c:ef:1e:64:85:02:f9:e9:b5:14:a8:f4:c6:
89:eb:10:61:68:52:ff:27:70:df:72:15:54:cc:be:
db:27:ea:d0:f8:96:9c:d0:8d:de:73:0c:15:32:3a:
46:0d:e4:ec:39:44:49:73:32:86:85:47:61:f7:75:
b6:65:20:88:0b:45:81:5d:92:ce:00:c8:58:e7:ba:
f0:85:cd:ee:61:72:95:10:e8:b5:be:a8:ae:7c:e3:
a9:a0:26:c4:4d:74:94:61:6c:e5:07:6f:19:77:31:
4e:73:90:a8:84:29:ae:c4:fc:72:f8:f7:19:23:45:
40:5a:67:d4:0f:60:83:4c:d2:fd:ab:84:d3:fb:3c:
9b:96:15:ce:1c:89:b4:aa:f0:cc:2f:9f:89:2d:b0:
3a:6f:25:32:78:14:4f:07:36:1d:82:6c:98:f4:f0:
5d:36:11:23:ae:4e:ce:49:4c:b3:ec:d9:c5:34:4d:
7d:94:b8:9b:e1:ae:d8:c2:e0:50:9f:a8:95:6d:3e:
aa:31:ec:ea:39:99:2f:d2:75:c7:09:e7:b5:f8:bb:
e3:ca:99:d0:29:04:34:0d:71:27:e9:90:b6:3a:64:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:62:3C:0A:0D:84:A9:CE:DD:A9:30:AA:7C:05:1B:27:4E:8F:48:77
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:08:2e:07:cc:38:7d:4f:0b:d5:9e:e5:f0:ac:77:2d:bf:
fb:42:be:b4:21:f1:d5:e5:a7:68:35:b4:19:af:df:f6:d5:7c:
4c:92:9e:ec:dd:08:4f:34:bf:ac:e2:87:c8:69:7e:7e:82:bd:
2e:fd:7d:0e:d6:92:de:e7:8d:87:a1:c3:0b:7f:e5:da:95:0a:
68:3b:5a:9d:5f:e1:bc:cb:8c:b6:1e:bd:39:c0:82:36:2b:a5:
b0:32:8d:c5:02:93:da:b6:58:bd:74:a5:63:55:0c:62:a6:a5:
01:4d:ae:85:f1:33:83:c8:f3:86:08:c0:ff:4b:73:a7:b4:b4:
ad:e1:17:43:d8:80:d1:80:9a:4a:e7:54:db:0b:2c:13:e9:73:
96:a7:c2:08:19:21:cc:1f:a2:54:98:9e:b5:4d:18:3f:7e:94:
a9:e1:c5:9a:25:c8:86:57:e3:c2:07:99:00:a9:28:28:b2:b8:
38:d5:a1:eb:be:4b:49:d0:68:59:dc:97:fd:06:31:d4:74:bb:
b3:3d:2e:67:b1:e2:50:a4:ce:aa:e3:69:fa:cb:aa:f1:c3:2f:
9c:e1:8b:5e:22:5b:57:b3:c3:3d:22:f4:67:e4:f8:f4:3e:e7:
09:be:72:b6:f0:7b:da:57:83:63:8f:63:64:00:fd:da:e1:0a:
e7:e8:78:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEVhHnC++V01i4UN0OPeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx
Zjg0OTMwHhcNMjYwOTIzMDcwMTAxWhcNMjYwOTI0MDcwMTAxWjAzMTEwLwYDVQQD
EygzZTYyM2MwYTBkODRhOWNlZGRhOTMwYWE3YzA1MWIyNzRlOGY0ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZZJ0SW/7lnH+vS5prjBnPV/sN4+
HAIswz8i9JH0LhzvHmSFAvnptRSo9MaJ6xBhaFL/J3DfchVUzL7bJ+rQ+Jac0I3e
cwwVMjpGDeTsOURJczKGhUdh93W2ZSCIC0WBXZLOAMhY57rwhc3uYXKVEOi1vqiu
fOOpoCbETXSUYWzlB28ZdzFOc5CohCmuxPxy+PcZI0VAWmfUD2CDTNL9q4TT+zyb
lhXOHIm0qvDML5+JLbA6byUyeBRPBzYdgmyY9PBdNhEjrk7OSUyz7NnFNE19lLib
4a7YwuBQn6iVbT6qMezqOZkv0nXHCee1+LvjypnQKQQ0DXEn6ZC2OmR4qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5iPAoNhKnO3akwqnwFGydOj0h3MB8GA1UdIwQY
MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt
ZTVjMGY1ZDMzYjIzLzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz
LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbYILgfM
OH1PC9We5fCsdy2/+0K+tCHx1eWnaDW0Ga/f9tV8TJKe7N0ITzS/rOKHyGl+foK9
Lv19DtaS3ueNh6HDC3/l2pUKaDtanV/hvMuMth69OcCCNiulsDKNxQKT2rZYvXSl
Y1UMYqalAU2uhfEzg8jzhgjA/0tzp7S0reEXQ9iA0YCaSudU2wssE+lzlqfCCBkh
zB+iVJietU0YP36UqeHFmiXIhlfjwgeZAKkoKLK4ONWh675LSdBoWdyX/QYx1HS7
sz0uZ7HiUKTOquNp+suq8cMvnOGLXiJbV7PDPSL0Z+T49D7nCb5ytvB72leDY49j
ZAD92uEK5+h4iw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:31:14 2026 by rpki-client