Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: Eg7s0tYzD0SZIaLltVOXWsi0khfmLguj6LIjI5lsk1M=
Subject key identifier: 66:91:E8:B2:C1:54:40:8A:A4:7F:C6:91:DF:24:67:67:FD:46:4D:64
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019D39AF09CC7FE7826315AAA66FA47EFC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 149E
Signing time: Sun 29 Mar 2026 13:01:05 +0000
Manifest this update: Sun 29 Mar 2026 13:01:05 +0000
Manifest next update: Mon 30 Mar 2026 13:01:05 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: nD+sBN6o3Ep4bEU+9xmm8faW88TBQfztg+1BL+6Fqy8=)
2: m4q0A3jo-Psa1VwSZmAVU7cx4KA.roa (hash: HLxMrkp3gY80aoJdmsKjWAi+o3QcRz5CaA37tWL7kKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:09:cc:7f:e7:82:63:15:aa:a6:6f:a4:7e:fc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Mar 29 13:01:05 2026 GMT
Not After : Mar 30 13:01:05 2026 GMT
Subject: CN=6691e8b2c154408aa47fc691df246767fd464d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:66:fb:0a:15:a1:e3:c7:a4:fc:21:9b:df:
b8:70:57:45:df:07:be:3a:61:5c:b7:46:6f:7d:5a:
66:c4:0c:87:0e:a7:18:1a:96:87:9a:ea:fd:2a:1c:
0a:3f:4e:cb:e3:47:7d:f0:67:2f:8b:a2:93:71:55:
6a:aa:11:22:48:0c:03:fe:0f:fc:65:34:50:fd:3e:
2d:5e:f7:98:5e:87:99:ca:09:21:2f:1f:40:3d:37:
14:93:bb:61:b5:4a:6c:19:55:3c:12:14:cc:c9:96:
25:be:a0:64:e6:16:6e:0b:08:96:7c:d3:f2:71:0e:
50:f3:af:71:b4:36:5c:89:fd:28:4d:70:80:a6:46:
95:52:8f:3e:cf:21:aa:90:90:d7:b1:37:90:bb:e9:
48:7b:cb:06:0e:da:1f:f3:0f:33:77:e0:9a:bd:3a:
7b:ad:7c:3e:d4:77:0f:93:73:d5:b5:2d:45:7c:90:
c5:89:0c:14:54:68:e3:b9:df:e3:bf:f5:c2:e0:ab:
05:28:a6:55:47:f7:63:09:95:36:c7:3c:36:6e:7f:
65:fc:4d:3c:44:fb:b6:4d:95:61:4d:39:99:5a:35:
ee:0e:a9:b9:9c:8c:62:5c:74:d5:4f:f0:8a:1c:e4:
bc:11:24:fd:40:d6:bf:b8:c0:d9:c4:2c:5e:d5:b3:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:91:E8:B2:C1:54:40:8A:A4:7F:C6:91:DF:24:67:67:FD:46:4D:64
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0b:14:f5:2c:4a:06:98:e0:e2:47:03:ec:57:8c:1a:12:8c:
3b:a3:c7:c6:73:c1:d7:74:48:4a:cd:a9:f5:4b:c5:82:40:bb:
38:46:fd:d4:41:f0:06:81:5f:9e:43:fc:09:13:b0:f2:12:25:
f1:49:54:df:f7:bb:60:6a:20:46:be:8e:07:d8:a0:cf:56:56:
40:3d:08:12:98:db:df:a6:47:df:aa:c7:fe:3a:fc:3a:51:87:
ed:0f:33:0a:21:32:47:6b:50:66:da:f9:5e:c7:77:81:cd:91:
2a:34:3d:ff:fe:a5:b8:c2:aa:78:3c:0c:48:fe:a7:aa:8d:17:
85:f7:b3:0e:e2:47:07:65:e6:10:4c:15:09:1b:c5:df:88:de:
d7:ae:31:e8:53:eb:85:2c:50:a3:68:e9:06:8a:80:53:93:ac:
93:35:b5:87:9e:e2:69:e0:75:40:fe:6d:a8:0a:f0:e2:e6:ba:
30:b6:aa:31:cd:57:47:ce:c7:be:c1:99:3f:95:66:52:37:8d:
e0:82:61:53:43:cd:45:37:70:44:d8:5d:b0:c7:42:c7:6b:68:
71:5d:8b:c1:40:36:40:30:3b:d6:f7:b0:8f:df:d3:15:c6:d9:
8b:11:bd:f9:24:98:87:9c:1a:a8:bf:fb:9c:db:b8:91:6a:a6:
82:44:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:09 2026 by rpki-client