Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: Y2fucy1cbrKwh5E6DhzgyTCSdOBfi3/gKWjdgrgVIYM=
Subject key identifier: 62:8A:C2:9B:6E:8B:49:C0:C4:F3:AB:A6:04:5E:6A:BF:93:0B:FE:03
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019D284DFE63CE52D0D168AF41DAF09D866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:33 +0000
Manifest this update: Thu 26 Mar 2026 04:01:33 +0000
Manifest next update: Fri 27 Mar 2026 04:01:33 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: XQxp2fkylz5EF9J22X3v5JBeDtdIDqeoXOS/C/FLCCc=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fe:63:ce:52:d0:d1:68:af:41:da:f0:9d:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Mar 26 04:01:33 2026 GMT
Not After : Mar 27 04:01:33 2026 GMT
Subject: CN=628ac29b6e8b49c0c4f3aba6045e6abf930bfe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:4d:d1:fb:aa:3f:40:32:a1:9e:dc:09:47:
fc:11:7c:60:99:45:15:cf:2d:d1:f1:37:8f:33:21:
33:16:e6:89:75:6c:4b:37:56:45:63:b7:73:1f:0d:
51:fb:71:32:81:4d:6c:d5:84:74:1d:03:f9:1c:c7:
07:18:dd:05:02:73:32:13:06:1b:af:da:ef:a6:8d:
16:9e:0d:b0:79:98:6e:41:ea:5f:1c:19:cf:d1:d8:
b7:91:4d:5f:14:4a:30:b4:86:aa:53:3d:0a:fa:47:
28:db:25:6d:c0:5e:3e:21:85:33:4e:1f:f5:bf:4b:
9e:82:67:4c:04:38:c7:8e:50:53:98:04:f8:65:fe:
c1:90:dc:42:e0:45:75:ba:44:e6:8f:b3:69:88:b9:
61:db:35:c6:b9:65:6c:c2:34:98:12:f2:e5:68:38:
84:00:ba:47:32:4f:44:68:77:98:e9:c3:06:65:d8:
74:ef:a3:bf:82:49:e8:94:17:8f:ca:62:99:87:64:
97:5a:3c:16:83:a4:0c:41:3e:13:fc:2f:9b:fc:ed:
2b:88:33:25:f3:1e:37:a9:ea:ed:48:74:8f:4a:4f:
26:b5:f1:95:45:10:41:5c:54:b1:22:58:2e:f3:68:
cc:cf:2c:db:e5:1f:6b:ba:9c:d6:40:3c:27:d9:94:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8A:C2:9B:6E:8B:49:C0:C4:F3:AB:A6:04:5E:6A:BF:93:0B:FE:03
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c3:9e:38:28:69:09:99:78:20:9c:1a:2e:36:d1:2e:a2:a4:
66:37:d8:78:01:69:56:75:29:03:4c:50:25:54:5a:f0:02:fa:
d2:f3:e5:32:d2:90:fc:71:a0:7d:22:ac:22:64:9a:f5:4c:a9:
27:2e:a1:ff:31:9a:84:9b:d8:40:a5:f7:c6:25:ae:c4:f2:db:
5d:29:09:7e:aa:a9:58:a5:71:4c:38:bf:26:61:5c:e2:01:bc:
9a:ee:ab:42:ac:ac:8a:37:65:ef:a3:c0:ed:2e:c5:76:6b:2e:
42:18:6e:62:a7:3b:80:89:36:23:0d:14:33:cb:79:04:56:52:
60:58:b7:a2:1d:9f:de:c2:6b:66:1a:a0:5b:66:66:34:2c:ea:
c7:f2:23:49:00:5f:f5:17:31:36:60:49:17:fe:98:d6:6f:4d:
d0:18:fc:b7:9b:cf:36:c9:cd:fe:56:3e:4a:2c:fc:90:60:1b:
60:89:d0:bb:e9:82:ae:4f:f8:59:a8:c9:a0:a6:39:d2:9a:a0:
33:ae:af:3f:52:32:3d:76:b5:2e:74:c9:7b:39:85:8c:d9:84:
c2:c8:a6:80:62:7b:ce:32:e5:a9:36:d8:dc:8d:cb:84:32:e3:
ee:ef:50:d4:d0:6c:ab:eb:93:ad:bc:33:f6:88:d4:48:b2:96:
b0:bd:a7:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTf5jzlLQ0WivQdrwnYZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx
Zjg0OTMwHhcNMjYwMzI2MDQwMTMzWhcNMjYwMzI3MDQwMTMzWjAzMTEwLwYDVQQD
Eyg2MjhhYzI5YjZlOGI0OWMwYzRmM2FiYTYwNDVlNmFiZjkzMGJmZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6pN0fuqP0AyoZ7cCUf8EXxgmUUV
zy3R8TePMyEzFuaJdWxLN1ZFY7dzHw1R+3EygU1s1YR0HQP5HMcHGN0FAnMyEwYb
r9rvpo0Wng2weZhuQepfHBnP0di3kU1fFEowtIaqUz0K+kco2yVtwF4+IYUzTh/1
v0uegmdMBDjHjlBTmAT4Zf7BkNxC4EV1ukTmj7NpiLlh2zXGuWVswjSYEvLlaDiE
ALpHMk9EaHeY6cMGZdh076O/gknolBePymKZh2SXWjwWg6QMQT4T/C+b/O0riDMl
8x43qertSHSPSk8mtfGVRRBBXFSxIlgu82jMzyzb5R9rupzWQDwn2ZRizQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKKwptui0nAxPOrpgRear+TC/4DMB8GA1UdIwQY
MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt
ZTVjMGY1ZDMzYjIzLzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz
LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcOeOChp
CZl4IJwaLjbRLqKkZjfYeAFpVnUpA0xQJVRa8AL60vPlMtKQ/HGgfSKsImSa9Uyp
Jy6h/zGahJvYQKX3xiWuxPLbXSkJfqqpWKVxTDi/JmFc4gG8mu6rQqysijdl76PA
7S7FdmsuQhhuYqc7gIk2Iw0UM8t5BFZSYFi3oh2f3sJrZhqgW2ZmNCzqx/IjSQBf
9RcxNmBJF/6Y1m9N0Bj8t5vPNsnN/lY+Siz8kGAbYInQu+mCrk/4WajJoKY50pqg
M66vP1IyPXa1LnTJezmFjNmEwsimgGJ7zjLlqTbY3I3LhDLj7u9Q1NBsq+uTrbwz
9ojUSLKWsL2nsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:37 2026 by rpki-client