Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: VdNTAYS/duq+9QSz9TBS5rDj34k9tM/D3fFvozOR324=
Subject key identifier: 79:B1:98:2C:0C:E1:D0:5F:71:FF:ED:2E:93:29:77:14:1A:46:C1:78
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019D265EDA3E1A11153EFB7743180AECA6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 1494
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: 6hBQ6d0jPi0v3Gh3g2/9WMyviP1GVif8MkOpb1d5xS4=)
2: m4q0A3jo-Psa1VwSZmAVU7cx4KA.roa (hash: HLxMrkp3gY80aoJdmsKjWAi+o3QcRz5CaA37tWL7kKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:da:3e:1a:11:15:3e:fb:77:43:18:0a:ec:a6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=79b1982c0ce1d05f71ffed2e932977141a46c178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:d0:d3:61:f9:2d:4a:24:99:8a:01:18:07:
68:d7:7a:75:69:c1:7b:c1:37:75:6f:d5:79:ee:23:
2e:6f:c3:4a:1c:7b:e0:e4:ed:5f:b2:5b:2f:ad:d2:
72:df:ce:8f:e0:b4:c9:7c:c6:87:b2:8d:31:63:4f:
a0:e4:34:97:68:d3:aa:e7:7e:ba:53:05:86:30:77:
48:51:ab:a0:be:80:e4:3f:e9:96:f0:20:e8:0f:60:
3d:46:b7:af:3a:f4:37:4a:46:48:32:27:0f:43:2d:
d1:17:11:d5:d9:a0:8a:d9:1a:ca:6f:5c:31:ba:79:
1d:ef:7e:2c:e2:d8:7d:61:af:5e:f5:1b:87:93:66:
0e:cf:3d:53:41:e2:c1:48:ce:46:b0:d7:65:b4:5a:
32:77:2a:39:06:73:7d:72:d9:83:9c:8c:6f:47:e5:
07:7b:ab:60:f0:ee:41:53:47:52:aa:f0:5b:0a:05:
90:8c:85:dd:50:c1:93:e7:64:84:9e:46:90:b6:6d:
79:d6:93:33:30:af:cd:4e:8f:1a:80:7a:18:b9:4a:
76:73:83:07:c4:1f:1f:6f:06:db:14:69:93:38:95:
29:29:10:59:00:eb:a1:a3:c7:4e:cc:5f:04:47:6a:
80:47:a9:22:26:df:a1:9b:30:fa:c5:9f:3c:79:d8:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:98:2C:0C:E1:D0:5F:71:FF:ED:2E:93:29:77:14:1A:46:C1:78
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b0:2b:49:07:b5:20:b2:f3:02:9d:3c:72:a1:af:92:44:39:
d2:32:e8:db:c7:a3:55:64:56:91:af:3f:50:ad:d7:12:15:91:
36:75:f4:5a:d3:fd:96:d1:8a:b1:85:d5:91:e2:7d:39:45:c3:
c1:78:92:15:36:16:cc:a3:c0:08:aa:74:d5:7b:3a:59:77:59:
db:31:77:b2:00:89:0e:d4:6c:e5:8c:be:b3:8d:b2:5c:68:9d:
4b:28:3a:e3:23:83:92:46:b4:9a:9e:91:df:23:b3:2f:26:46:
67:1b:f9:66:47:1d:fc:ae:15:6b:67:e0:ba:fd:5a:9f:6e:e9:
8f:e8:ed:5a:ff:bd:dd:8c:fa:7c:36:bc:b4:13:ec:41:23:99:
5a:3a:84:e2:7e:6a:a9:ad:d0:e0:14:14:e6:cb:62:ea:5f:62:
22:e9:15:fc:cd:4f:45:00:30:23:c0:93:3b:bc:39:fe:4d:59:
85:68:8f:00:8d:ac:7c:4e:20:e1:77:38:f6:77:08:32:d8:03:
72:22:f8:c5:98:23:f5:75:44:6b:16:d3:32:4c:f6:93:36:52:
6c:10:eb:9a:1a:a1:8b:eb:dd:d1:6a:f4:71:02:98:e1:bd:07:
29:f3:32:ab:5b:57:05:66:ee:95:bc:cc:0a:42:08:39:d7:cd:
02:a6:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:31 2026 by rpki-client