
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: iuOkesnQKckyprQLZSAL9PKwM0wQenLl2VFs4UWFX4Q=
Subject key identifier: C6:03:B7:1F:13:1D:1F:CA:DE:76:09:09:E3:1B:CC:B3:5E:35:04:F7
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019E1D59237E0A8B3EBD40D64D2581E5BEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 1515
Signing time: Tue 12 May 2026 18:00:41 +0000
Manifest this update: Tue 12 May 2026 18:00:41 +0000
Manifest next update: Wed 13 May 2026 18:00:41 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: XkFB4gx8BfWrfQJbQWBsqsQBZrV6tdF53dHMNUZx41k=)
2: R-APQP12CW3pOeqttqzgTwcLAV8.roa (hash: vRFhqSINrQiolsddF1f5Cpv/fz0FXcpiwczjaOz8Gbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:23:7e:0a:8b:3e:bd:40:d6:4d:25:81:e5:be:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: May 12 18:00:41 2026 GMT
Not After : May 13 18:00:41 2026 GMT
Subject: CN=c603b71f131d1fcade760909e31bccb35e3504f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:30:0a:d5:55:63:1e:b1:8b:2b:48:f0:cf:
3f:df:6d:85:aa:7c:b3:85:fd:bc:fb:0f:04:e7:9d:
fc:7b:98:3a:65:7c:99:34:be:d3:b7:83:75:a9:9e:
34:e1:2c:69:f6:88:62:52:7d:47:2f:fd:f9:fe:ff:
46:54:92:52:42:e8:31:29:b6:b0:c2:4a:28:56:0e:
fd:f2:c6:8c:3b:2d:27:b7:aa:d7:60:ed:0f:4a:3f:
fd:02:02:05:15:df:07:d5:29:f6:76:d5:e1:53:4a:
1e:bb:9d:1f:0a:31:6d:ff:8d:6a:6a:12:90:71:99:
7e:93:fe:ed:0c:e0:6c:11:f3:fa:1a:a2:de:a4:3c:
f8:19:5e:6a:a2:da:c4:30:c0:85:dc:26:b5:ca:18:
c5:fc:4d:41:70:74:62:97:e3:d5:21:c9:4e:e3:d5:
96:07:35:13:12:7c:fc:90:1d:7e:c1:90:00:38:48:
35:0d:97:fa:2d:00:02:41:ee:bc:ea:41:52:08:d0:
a9:bf:e7:5a:00:8b:fd:0e:e0:2a:fe:71:50:22:f6:
a9:7f:54:55:b3:bb:99:4e:bf:76:52:20:ae:73:bd:
19:7c:09:76:74:f7:3e:d7:cc:25:4d:65:1f:ba:37:
23:ec:e5:f8:4e:47:8f:c8:da:fa:0c:22:a6:b3:82:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:B7:1F:13:1D:1F:CA:DE:76:09:09:E3:1B:CC:B3:5E:35:04:F7
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4b:ac:7c:07:a5:44:15:2a:75:e5:5e:92:b9:35:ee:a7:31:
41:85:89:eb:4b:86:19:e6:b4:f8:74:9c:c8:e8:5f:68:a4:e1:
f1:9b:dd:e7:d9:6d:c5:41:04:9f:5b:ef:3f:7c:4e:27:a1:de:
71:ce:e0:d3:32:50:72:7d:26:f1:63:bf:ad:53:08:2e:46:93:
b7:4e:d7:65:16:c4:1c:7d:21:a1:16:91:50:24:b5:be:ab:45:
ac:7d:e9:a3:14:5b:a3:7f:d7:17:e3:0f:05:3e:b5:31:ef:16:
c4:75:f7:00:f0:35:f9:96:7c:8c:ee:05:ab:b0:48:9a:fb:85:
dd:51:53:81:8c:9a:9c:55:da:3b:29:b4:9c:67:f1:5b:e0:ba:
55:c4:ea:27:33:01:f5:1e:8c:d4:e9:d6:8f:8e:4c:71:c1:04:
09:61:54:30:c9:3e:5f:a5:d1:30:e3:93:e6:c9:7d:82:37:93:
30:c4:3e:63:51:08:6e:28:93:67:ed:7f:5d:b3:c2:b2:cb:59:
4f:8d:d1:3f:fa:ab:3b:7a:fc:4f:cf:9e:3f:1a:e1:4f:2c:ae:
6f:03:58:bb:4d:ec:1b:a9:58:8d:c2:c0:5d:50:8c:ab:90:71:
de:81:b0:17:17:0d:39:3f:7f:11:46:34:30:26:ae:94:0d:42:
8a:f2:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:18 2026 by rpki-client