Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: xrPDkqL76PeeBKip7qEwqy84P+xT5xpx+j9LfZkRUIg=
Subject key identifier: CE:11:9F:44:DB:69:E0:3B:B1:8F:B2:13:B5:5F:62:E3:F4:6B:4B:54
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019F189E08EAD249C11A2B31069E4F904C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 13:00:37 +0000
Manifest this update: Tue 30 Jun 2026 13:00:37 +0000
Manifest next update: Wed 01 Jul 2026 13:00:37 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: 0PjagKDy4qrWHr0DrXq2xwvWHh8Q58bFZ6cH/IReVeM=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:08:ea:d2:49:c1:1a:2b:31:06:9e:4f:90:4c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jun 30 13:00:37 2026 GMT
Not After : Jul 1 13:00:37 2026 GMT
Subject: CN=ce119f44db69e03bb18fb213b55f62e3f46b4b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:bf:bf:05:51:2a:18:8b:59:2f:6e:65:35:
15:80:12:a3:f6:0f:a9:89:62:a9:91:8e:06:6b:7f:
8c:8b:2f:b9:08:94:74:2e:e3:21:01:22:d3:04:89:
08:44:52:c6:c8:fc:b5:87:8e:72:d5:92:00:3d:31:
24:cb:db:f8:c5:f5:1c:f0:6d:8b:7e:02:2e:59:12:
b1:04:02:df:5e:b7:05:af:c5:4d:9b:53:81:b5:8b:
4b:0b:f2:c5:1c:d4:62:de:b6:c6:ff:44:f8:3a:b9:
9b:15:b0:c4:a5:9d:07:28:30:44:17:9a:cc:50:52:
bb:21:34:7c:e3:2c:6e:3b:3e:79:70:7b:40:49:15:
77:59:83:2f:ac:67:b4:25:bb:5f:01:96:18:a6:bb:
60:46:30:3a:7f:72:08:2a:94:00:27:8e:19:8d:8b:
e7:40:d0:11:50:fc:0b:c7:71:d9:07:a8:e0:92:f1:
5d:fe:7f:8c:26:d9:c0:c2:86:67:c1:b3:62:d3:76:
46:8e:56:60:e8:bf:84:fb:ee:ca:8c:f8:7a:83:5d:
b9:66:33:de:58:11:62:d5:40:b8:1f:20:4d:1b:70:
38:45:61:f8:02:8e:a1:0a:4f:b6:ae:6b:bf:cd:ba:
53:bb:b5:a2:b7:42:cf:42:d0:ed:e0:2c:88:13:0b:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:9F:44:DB:69:E0:3B:B1:8F:B2:13:B5:5F:62:E3:F4:6B:4B:54
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:be:dc:af:19:4a:f1:ea:a6:1c:ab:98:b6:86:70:0d:96:f4:
b4:34:43:7a:35:44:4b:0e:1e:0d:bf:a6:6c:90:81:ff:e2:66:
18:e3:c1:ec:8a:8f:32:80:b6:20:43:22:1c:17:53:75:b4:fe:
4d:e7:f9:c7:95:76:ca:9c:ee:b4:fb:c1:64:af:d7:2f:31:7d:
08:6d:7c:15:92:4e:93:56:52:00:56:4b:f8:91:2d:57:23:39:
20:26:31:ec:ec:5f:d0:bb:39:18:37:1f:39:06:f3:f2:2b:7a:
74:38:a3:fe:58:f5:33:18:2b:be:f6:7d:75:29:26:45:f9:ac:
34:04:6a:31:9a:56:5c:cb:5d:e2:9a:e0:87:60:1f:cf:79:d8:
56:ae:65:d3:96:11:5d:ab:c4:aa:63:b8:49:61:ca:20:ab:43:
ff:28:6f:1a:79:f4:e3:4e:77:d9:3b:db:66:d3:e0:b7:0c:39:
9f:ef:b9:84:f4:32:cf:e0:f9:da:c2:5b:26:a3:50:27:36:a2:
79:be:0a:95:3a:56:fa:98:66:ca:65:63:b8:ef:c6:b5:77:48:
c4:33:cd:87:4c:c2:c0:56:7a:64:8c:5e:60:82:9c:3a:b1:9f:
53:f8:e9:2f:8f:4e:c4:99:ef:6e:64:3b:55:e6:29:a1:a4:3f:
4a:e5:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:20 2026 by rpki-client