Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: TKuwm7wXZwC5EYjX5ZgZR/Ec1ZNLomz27d+HN9X/0Xs=
Subject key identifier: 07:5D:61:D2:29:35:64:C2:A9:05:D6:08:F9:BB:00:90:9F:55:D7:B9
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01A0F11F0F95C3A5C5C73F89763291630736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 130E
Signing time: Wed 30 Sep 2026 07:02:19 +0000
Manifest this update: Wed 30 Sep 2026 07:02:19 +0000
Manifest next update: Thu 01 Oct 2026 07:02:19 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: DADHMpMh6ReGWjewILbcsamlzlWMccgcBQqU158IxPk=)
2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
3: 8QmIuePPjKmEzGNivjh_kLAuMAY.roa (hash: if+R+69YwCCEXsp6uMBg/VlJaAaaSa7+SPKc41aJRV4=)
4: DggIJs_MPATTU1fsjQ1fThUkFzg.asa (hash: L3cZLBkDqG4NS7mwPXNtZBZm35MoayAzoN2PVANaJ4g=)
5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
6: QiiSVCdXMnX6vtwSolUuExK-3cc.roa (hash: cChw7Ea4muVvJ3EI7S7cdxDZrmiLHAuerCOY8OxPcTk=)
7: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
8: wRhtCAAx7zEpmI40CBpFB6CppGU.asa (hash: A0EP5dqJF7oVrfX3OmMuR2spKNhblMpR/3OKbRM6pT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1f:0f:95:c3:a5:c5:c7:3f:89:76:32:91:63:07:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Sep 30 07:02:19 2026 GMT
Not After : Oct 1 07:02:19 2026 GMT
Subject: CN=075d61d2293564c2a905d608f9bb00909f55d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:d9:9e:0b:24:6c:e5:1c:06:a1:2e:cc:84:
fd:0f:ea:81:b9:69:5f:d3:ff:ba:b3:de:db:c8:24:
f1:24:5a:28:ee:ff:16:d5:0d:1c:6b:7d:7b:b8:60:
e8:c8:6b:71:b3:8f:be:d5:5a:7a:8f:a2:4f:b3:86:
64:11:20:a0:3e:8c:91:09:98:43:64:c7:97:cd:4d:
8a:e9:74:ed:cf:f9:dd:af:ee:4b:5b:d1:01:62:d0:
9d:6c:c5:01:58:69:5f:d3:1d:1e:43:e2:36:37:19:
76:38:3f:6f:3e:6a:62:ec:5c:8b:53:1d:92:75:51:
31:f9:8a:a7:26:0d:74:9c:c5:f4:46:5f:61:a8:f0:
85:8a:3e:6b:11:e5:10:cb:48:41:44:f5:7e:29:6f:
da:cc:f8:6d:c1:04:48:25:de:42:ae:e9:0f:53:d3:
fe:c2:8a:d1:f6:d6:1a:a1:d8:dd:67:dd:1b:e3:6e:
35:e8:55:ec:90:4d:83:23:9b:d1:9b:f4:0f:3b:b7:
52:e7:9a:f0:33:80:6f:4f:9b:8e:80:fb:27:6f:5d:
17:78:9a:92:39:f1:9d:0d:59:26:00:a3:3a:9c:29:
57:68:e9:dc:74:6e:2a:c5:fc:a6:d4:96:bb:07:5a:
0a:b6:45:25:2f:cf:c7:12:d3:27:ac:5e:f6:df:41:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:61:D2:29:35:64:C2:A9:05:D6:08:F9:BB:00:90:9F:55:D7:B9
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5a:96:f8:e1:23:a0:21:c6:01:38:49:14:9f:4f:6d:31:55:
82:df:4b:d2:03:e5:82:72:b8:8f:aa:fb:e1:b5:de:1e:f5:eb:
04:b7:a8:db:71:6f:1c:16:ea:32:b6:40:78:b5:f6:af:22:db:
d2:fd:23:a1:1e:11:67:52:98:10:eb:79:2e:fb:8e:5d:66:44:
79:11:d7:50:28:df:6e:98:a3:b0:fa:b1:b3:52:fc:2d:11:1f:
8b:f6:4f:5d:15:88:80:0d:62:ea:34:3a:82:d4:55:e3:3f:a8:
6e:5d:0b:ab:9d:3c:0b:ed:d7:2d:41:29:4e:56:24:c6:7c:7a:
5a:31:03:e3:9c:45:6b:13:f1:f6:a3:2c:d5:ef:e8:e1:75:49:
3f:59:86:cc:f3:20:3b:ba:27:61:20:66:fd:ad:0e:0a:f5:ff:
49:4b:25:c5:63:c7:79:39:59:b2:32:71:fa:3f:5a:24:55:2b:
34:5d:03:a7:cd:84:44:09:1b:c3:d9:cb:d6:91:3d:da:77:c4:
ad:d7:ee:c1:e0:c0:b5:a7:9b:fa:c4:46:34:8d:77:c5:53:8d:
c6:e1:98:07:08:a2:0c:67:84:d2:c2:f6:e0:26:df:05:e5:13:
20:00:bb:23:d1:5d:fd:cd:c6:e6:3a:84:ed:bd:43:3b:af:1a:
c4:e9:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:10:27 2026 by rpki-client