Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: SU2B+DP56lMQXDscV8HdPc5jgwc+s4O+Lgm2Zmvk2UQ=
Subject key identifier: 43:BC:9D:79:50:1B:91:DC:15:71:BA:71:C0:1B:5F:F7:BA:82:5B:04
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01A0E9651216DA2E45F0DEA40815F7A346BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 130A
Signing time: Mon 28 Sep 2026 19:01:50 +0000
Manifest this update: Mon 28 Sep 2026 19:01:50 +0000
Manifest next update: Tue 29 Sep 2026 19:01:50 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: VOn151s7bTv5k+NHVgdo6xUBniajF+kkq0n6fCu1Lcg=)
2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
3: 8QmIuePPjKmEzGNivjh_kLAuMAY.roa (hash: if+R+69YwCCEXsp6uMBg/VlJaAaaSa7+SPKc41aJRV4=)
4: DggIJs_MPATTU1fsjQ1fThUkFzg.asa (hash: L3cZLBkDqG4NS7mwPXNtZBZm35MoayAzoN2PVANaJ4g=)
5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
6: QiiSVCdXMnX6vtwSolUuExK-3cc.roa (hash: cChw7Ea4muVvJ3EI7S7cdxDZrmiLHAuerCOY8OxPcTk=)
7: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
8: wRhtCAAx7zEpmI40CBpFB6CppGU.asa (hash: A0EP5dqJF7oVrfX3OmMuR2spKNhblMpR/3OKbRM6pT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:65:12:16:da:2e:45:f0:de:a4:08:15:f7:a3:46:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Sep 28 19:01:50 2026 GMT
Not After : Sep 29 19:01:50 2026 GMT
Subject: CN=43bc9d79501b91dc1571ba71c01b5ff7ba825b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:27:12:ba:e1:d0:c5:fa:c8:cd:cb:2e:7f:
32:84:ea:85:2d:b3:da:db:7e:dd:25:6e:b8:4c:fc:
41:a2:2a:82:86:06:d8:58:a1:44:dc:23:9c:2e:52:
68:74:e2:53:33:67:7e:eb:21:54:be:f8:e2:31:25:
96:1c:67:6b:17:16:bd:82:b2:5a:d2:60:36:16:45:
77:eb:ff:bd:12:82:9f:48:32:e1:54:c9:62:7e:1d:
30:6a:84:45:0f:62:19:08:37:c4:91:0e:88:af:fe:
9c:00:95:94:45:f5:b9:c8:04:27:62:a8:1a:f4:7e:
a3:68:46:88:7c:32:91:5f:f6:74:61:02:53:a3:e1:
0f:5a:ba:f2:98:cb:5b:47:59:dd:5d:fb:38:d4:a4:
82:81:e0:59:91:2b:c7:dd:c4:99:3e:79:4f:6b:12:
c8:ec:f6:2b:3b:e4:fc:30:d2:84:88:53:47:8a:72:
44:88:00:8a:41:13:dc:1a:79:ab:c0:90:df:1a:0e:
15:43:3b:d1:fc:9e:15:6e:c9:11:84:34:80:45:b9:
5a:09:da:9e:6e:7b:55:25:b3:03:1a:c1:a8:79:a7:
0e:33:44:e4:90:f5:87:2c:fa:dd:a6:6e:b6:dc:2d:
f5:29:11:ef:11:5c:3d:29:26:2c:b7:b7:c6:b4:74:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:9D:79:50:1B:91:DC:15:71:BA:71:C0:1B:5F:F7:BA:82:5B:04
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:b6:60:56:fc:c4:77:36:73:9e:d7:99:8e:9c:a3:0f:b3:
9f:8c:ac:11:e6:be:da:1e:e8:01:fa:bf:bc:f3:74:de:f0:c3:
e8:84:e2:f2:58:26:15:8d:79:46:50:c2:14:73:ed:93:15:eb:
b6:8e:5c:62:d2:1b:1a:78:b6:f3:ad:f4:7e:a2:64:fc:a2:bd:
ca:47:b7:d3:a8:c1:9a:f1:16:8c:da:78:fe:0f:22:b7:04:a8:
21:29:c1:1b:3c:b9:e1:8a:59:64:95:49:7c:b0:59:02:89:2c:
01:30:68:dc:5b:04:95:f8:64:0f:44:87:60:94:db:d9:e5:d2:
d5:81:60:b5:c8:c1:a6:fb:37:6a:4a:28:82:a3:2a:2c:32:3c:
22:de:fb:b1:de:12:f7:64:1c:c8:51:97:92:fb:d0:7f:d0:03:
b6:2e:49:dc:f0:95:19:37:2e:2e:8b:24:f8:54:61:4b:3d:51:
93:71:5c:41:f4:c4:58:44:16:73:d5:59:a8:ba:16:68:6b:f3:
aa:76:de:ce:6e:f1:80:fc:00:cb:83:33:e8:82:60:c6:fb:2b:
07:8b:6f:0c:6b:88:07:9e:86:76:89:ae:27:e0:12:48:4b:28:
7c:e0:b0:1e:ad:35:b5:82:22:b0:85:3c:b0:44:98:b0:80:c3:
da:42:8b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpZRIW2i5F8N6kCBX3o0a/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjYwOTI4MTkwMTUwWhcNMjYwOTI5MTkwMTUwWjAzMTEwLwYDVQQD
Eyg0M2JjOWQ3OTUwMWI5MWRjMTU3MWJhNzFjMDFiNWZmN2JhODI1YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc8nErrh0MX6yM3LLn8yhOqFLbPa
237dJW64TPxBoiqChgbYWKFE3COcLlJodOJTM2d+6yFUvvjiMSWWHGdrFxa9grJa
0mA2FkV36/+9EoKfSDLhVMlifh0waoRFD2IZCDfEkQ6Ir/6cAJWURfW5yAQnYqga
9H6jaEaIfDKRX/Z0YQJTo+EPWrrymMtbR1ndXfs41KSCgeBZkSvH3cSZPnlPaxLI
7PYrO+T8MNKEiFNHinJEiACKQRPcGnmrwJDfGg4VQzvR/J4VbskRhDSARblaCdqe
bntVJbMDGsGoeacOM0TkkPWHLPrdpm623C31KRHvEVw9KSYst7fGtHSSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO8nXlQG5HcFXG6ccAbX/e6glsEMB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhy2YFb8
xHc2c57XmY6cow+zn4ysEea+2h7oAfq/vPN03vDD6ITi8lgmFY15RlDCFHPtkxXr
to5cYtIbGni28630fqJk/KK9yke306jBmvEWjNp4/g8itwSoISnBGzy54YpZZJVJ
fLBZAoksATBo3FsElfhkD0SHYJTb2eXS1YFgtcjBpvs3akoogqMqLDI8It77sd4S
92QcyFGXkvvQf9ADti5J3PCVGTcuLosk+FRhSz1Rk3FcQfTEWEQWc9VZqLoWaGvz
qnbezm7xgPwAy4Mz6IJgxvsrB4tvDGuIB56GdomuJ+ASSEsofOCwHq01tYIisIU8
sESYsIDD2kKLJA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:29:12 2026 by rpki-client