Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: 0d2JA4X9PbF409Mz7hgEa41QXxkwnLWVPptrCJ5eJqg=
Subject key identifier: 95:4B:8B:4B:BA:DB:FC:2D:C1:C3:B5:0E:0A:2B:8D:E7:28:B5:5A:7F
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 01A13D13B87AD6BB5985ABEE2EEF439FD63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 01:01:04 +0000
Manifest this update: Thu 15 Oct 2026 01:01:04 +0000
Manifest next update: Fri 16 Oct 2026 01:01:04 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: ELcP489uhjetX1p3MbkQ+fCUCxnqJ/DE/pgwpOylWp0=)
2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:b8:7a:d6:bb:59:85:ab:ee:2e:ef:43:9f:d6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Oct 15 01:01:04 2026 GMT
Not After : Oct 16 01:01:04 2026 GMT
Subject: CN=954b8b4bbadbfc2dc1c3b50e0a2b8de728b55a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:60:4f:e0:c0:24:04:3e:9f:07:79:d6:ef:
5e:7c:27:59:04:66:8b:c2:fe:47:da:72:0e:f6:3f:
96:b0:3b:72:1e:43:e8:c2:ea:1d:96:e3:5c:28:88:
52:75:32:30:e3:51:c4:06:86:1d:9f:3a:f2:0c:ea:
a9:60:9c:02:e0:2d:da:8e:a8:bd:41:8e:e8:4b:d5:
e9:c6:5b:c5:30:90:00:0a:d3:08:76:df:49:90:c0:
df:31:bb:df:00:5d:b8:54:fd:de:89:70:fc:b8:3b:
21:af:1c:84:f8:2a:32:4c:36:d2:43:7d:48:85:70:
0a:b4:ca:16:69:f9:f7:5f:85:d6:6e:60:09:3b:61:
7e:cb:ab:39:66:c0:18:13:2f:85:da:eb:34:b5:3a:
de:71:33:60:fd:39:1b:66:57:e5:3c:1a:04:b8:0c:
07:f9:79:1b:b9:ad:fa:47:b6:9c:7c:0b:ac:6b:39:
88:57:e2:ad:8d:a6:77:27:6c:27:ff:70:b6:17:33:
fe:ac:62:71:77:85:03:84:13:dd:29:fb:4b:32:0f:
e4:7c:83:22:b7:d8:cf:32:b1:d0:51:4f:28:e7:3f:
a1:3b:de:ec:26:2f:67:cf:a4:e8:22:4a:5d:6b:eb:
49:54:ee:94:76:d7:6e:ba:7d:00:60:7e:63:92:9e:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:8B:4B:BA:DB:FC:2D:C1:C3:B5:0E:0A:2B:8D:E7:28:B5:5A:7F
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:8c:62:0a:81:21:d8:19:9f:19:ef:41:10:ed:e8:e8:ae:
f8:69:65:bb:15:b9:d5:56:01:2c:c9:a0:27:ed:28:e1:65:fb:
45:2a:a5:08:69:93:55:03:79:8d:1d:90:d5:86:de:58:c2:2a:
67:2f:46:a4:79:1a:f7:c6:87:c0:6a:1f:1c:0f:78:0a:89:40:
53:25:07:2d:e5:0e:ca:93:09:ca:37:e6:18:b9:63:ba:66:9f:
52:48:83:b8:73:5b:ff:4e:1a:d7:47:ea:cf:d5:6f:51:4c:23:
f4:0f:6a:a0:12:a5:b1:95:28:fb:5d:61:d0:8f:0e:d1:0a:6c:
02:a1:30:7f:4d:ce:6d:ba:3a:67:06:0b:62:91:d5:30:95:e3:
f9:2e:3e:6e:40:6c:3d:67:d1:12:f8:6d:c6:f0:60:40:92:53:
04:d1:e7:24:6a:df:a8:8b:3d:b8:b5:65:b6:c7:22:45:d4:9b:
b2:20:d7:6b:b6:de:ea:30:25:7a:a9:84:5f:28:7f:cf:46:8a:
f0:ad:b8:dd:9e:28:4b:ba:c1:fc:5f:fa:57:d6:bf:00:5c:ac:
22:df:59:75:01:41:46:e6:d6:ce:09:18:bd:26:3f:63:e3:2e:
64:df:1b:ac:aa:0b:70:60:5e:36:e0:91:3e:51:8c:50:6b:1b:
35:5c:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:25 2026 by rpki-client