Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: sf5ccFjmvsqwnZehDLPrHyctjQCLLXpPhlPJEHU3Cwc=
Subject key identifier: 68:3C:EB:EC:B3:E8:CB:D0:F2:28:90:CC:64:DE:68:F8:32:61:FB:91
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 019DD5E5CE903C3D470D84FD9C70CB539EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 116F
Signing time: Tue 28 Apr 2026 21:01:40 +0000
Manifest this update: Tue 28 Apr 2026 21:01:40 +0000
Manifest next update: Wed 29 Apr 2026 21:01:40 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: QcF0JwUSOrOwjAmAKV9N2YsS7/o/B0yLMo/myKP3Ma8=)
2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
3: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (hash: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0=)
4: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
6: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:e5:ce:90:3c:3d:47:0d:84:fd:9c:70:cb:53:9e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Apr 28 21:01:40 2026 GMT
Not After : Apr 29 21:01:40 2026 GMT
Subject: CN=683cebecb3e8cbd0f22890cc64de68f83261fb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:92:8a:c3:01:f8:9d:46:58:67:27:e4:20:
a5:f5:a1:3f:a5:34:b3:40:32:13:d5:54:40:b8:e5:
4b:20:cc:0d:aa:db:32:88:10:de:cc:ec:6e:92:2a:
8f:0e:04:66:15:5b:6a:15:03:bf:2e:80:9a:af:c5:
ca:e2:94:32:7e:ed:e5:0b:42:fb:23:67:f8:a0:3d:
67:a4:46:26:25:24:84:3f:b2:74:a4:38:c9:73:be:
61:45:7b:95:c3:45:2f:19:11:30:ec:2f:4e:cf:eb:
ea:1b:25:aa:90:90:33:99:b9:77:7e:0a:88:40:5e:
ce:0e:b6:c8:df:0e:ff:51:54:a0:5d:da:2d:d5:1a:
ae:e1:1d:1c:55:5c:1d:fa:a2:aa:2c:49:ec:52:34:
8c:bc:a4:63:df:47:d0:b4:ca:a8:cc:72:e3:01:39:
b2:c3:00:8e:e8:47:49:8e:9f:d6:d0:24:4a:ab:a0:
bb:15:ff:94:ea:a6:5d:c1:c0:1d:e7:80:c5:ef:01:
2e:39:5c:5f:68:dd:a9:fd:69:7d:90:81:5a:5c:0b:
55:9d:fd:f8:98:91:b6:40:66:00:7a:6f:10:fc:2c:
76:08:e6:1e:33:80:b5:e2:55:fd:a4:84:a9:3c:19:
06:cf:02:18:89:8b:7e:9e:8a:a2:f6:4b:2a:ac:68:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3C:EB:EC:B3:E8:CB:D0:F2:28:90:CC:64:DE:68:F8:32:61:FB:91
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:e1:15:95:58:c5:40:d5:43:c7:8a:65:56:f3:7d:46:c0:
47:4c:32:39:64:78:b3:6a:6b:52:41:35:ad:00:19:3e:b2:4a:
75:97:32:d1:54:ed:64:8b:2e:13:f3:de:58:fe:1e:18:1b:b2:
89:17:20:71:97:3e:e0:dc:44:ac:d5:98:a5:cb:0e:79:f0:8f:
0c:4c:74:94:39:c4:ce:48:f9:8a:91:01:f0:81:43:12:5c:95:
aa:48:d3:f2:36:10:f6:dc:da:0b:29:c0:7b:7a:5c:0e:42:2f:
10:0c:75:e6:3e:02:bc:2a:e1:d1:9d:3f:92:bc:be:7b:63:0c:
35:26:8f:15:f6:45:50:e5:e3:6f:e3:ed:d8:8a:b4:e9:c3:11:
36:12:e2:c9:ce:13:23:66:9d:a7:a8:42:7b:98:af:81:20:69:
cb:7c:e8:b3:aa:87:f1:ff:1f:7c:18:97:3e:1f:8c:9a:d9:c8:
50:bf:6b:ce:9b:c9:27:0c:0f:a6:14:1a:e6:f2:27:81:9e:c5:
ee:8b:dd:36:56:25:d0:5d:de:a8:6d:a5:d9:67:f2:ae:e8:f0:
64:47:fb:66:6c:37:27:cf:0e:9d:32:ba:0e:fc:12:40:a7:53:
a3:2a:7e:1e:ca:62:7b:a9:53:ee:a6:4c:a1:59:97:f5:24:00:
3c:23:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 04:07:53 2026 by rpki-client