Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: 6Mk0sJXVfOM/q862UEXSpoa/VR9zPXununxBP40igVw=
Subject key identifier: 4E:02:F0:7F:52:C2:63:D2:83:92:7E:96:AE:53:31:90:11:35:45:10
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019F905A57B6C2AA69A00400B15F0141E946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 19:01:07 +0000
Manifest this update: Thu 23 Jul 2026 19:01:07 +0000
Manifest next update: Fri 24 Jul 2026 19:01:07 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: RunpEg0kYGXP0eeZqwsEjb69JwWSFUPOvNG6TMtJHF8=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:57:b6:c2:aa:69:a0:04:00:b1:5f:01:41:e9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jul 23 19:01:07 2026 GMT
Not After : Jul 24 19:01:07 2026 GMT
Subject: CN=4e02f07f52c263d283927e96ae53319011354510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:d0:7c:30:8f:83:0d:57:f3:79:42:84:0c:
ed:2e:73:16:73:40:7a:1b:fd:72:f3:e3:fc:fd:11:
c9:d2:7b:94:a8:70:c8:aa:b1:1d:a4:94:b0:b2:ba:
9e:12:1d:a7:03:35:cc:66:8a:9b:5b:e1:cb:a0:00:
06:12:dd:32:92:84:7e:c3:92:6e:10:53:55:7d:a9:
a9:28:46:6f:e1:e0:3c:2e:6a:9c:4b:8e:01:e3:9e:
1b:4c:ab:45:58:56:b6:13:58:fd:92:2a:ff:ed:2b:
7b:40:a5:a0:64:a3:54:a8:74:f8:14:31:9d:c6:c8:
41:60:7b:b1:38:12:de:2f:5c:69:33:36:ac:79:8e:
04:d4:eb:ca:b6:55:1a:f5:07:e9:f3:a8:4c:91:13:
9e:b6:49:92:f9:e0:e3:15:6f:6e:fa:7b:91:27:0d:
4b:eb:c2:91:1d:af:c8:7f:e3:0f:0c:97:e5:e7:3d:
47:f3:13:88:f9:6c:76:be:a6:5e:ee:9b:c9:8e:5b:
31:42:7c:ef:c0:38:89:15:34:7d:a7:e7:ec:b2:a1:
3b:ac:ee:7d:ba:03:2f:10:c7:6c:1d:58:c7:05:98:
33:6c:66:63:70:b1:48:f5:81:43:c8:c5:40:c3:81:
62:29:a9:7b:b4:50:6b:3c:1e:83:12:1f:04:e5:2e:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:02:F0:7F:52:C2:63:D2:83:92:7E:96:AE:53:31:90:11:35:45:10
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:97:ca:c2:98:93:34:db:05:32:ba:39:37:29:e8:ba:cf:ec:
a6:0a:86:48:0e:66:65:45:b9:99:c3:26:9c:8a:1c:cc:e6:2d:
75:f5:df:9a:e4:73:10:3b:f7:9d:22:68:13:c4:d0:fc:3c:d8:
7d:b2:d4:fc:c2:0f:7e:1b:1d:13:fc:ab:f3:50:f7:88:b0:4c:
c7:e4:d8:05:cd:0c:d6:8c:40:08:fc:c4:e2:36:0a:ba:39:4c:
bc:6d:b2:fa:fb:79:c5:17:dd:e2:d5:7f:7c:99:71:60:6b:3c:
9d:47:54:76:6e:4f:45:60:77:a5:6f:0a:18:12:30:0a:8f:9d:
af:49:eb:64:82:ec:b6:b8:9d:24:ca:95:75:3e:a0:88:29:02:
f2:50:7e:71:b4:75:f6:54:77:24:d2:5d:60:1b:be:7d:6c:47:
53:4a:74:02:21:80:2c:c3:0b:56:b7:7e:ea:e6:04:a8:ce:3c:
65:31:ab:6b:33:e5:81:c2:0e:dc:c0:b2:12:a8:30:70:92:8d:
2d:69:08:ea:70:c5:42:46:37:ca:eb:64:83:4b:0d:de:65:b3:
5b:75:ba:c7:21:d2:5f:f5:c1:48:2b:f8:36:4a:27:78:65:3b:
78:95:70:3a:09:dc:d9:b5:0d:df:2f:a1:02:c9:ce:e8:f9:de:
30:65:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:11 2026 by rpki-client