Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: L2xEluNRfM7A1BSjVI+NYlvWd8sijMYVu8bExlIOpAE=
Subject key identifier: 98:98:D0:53:FB:A5:C9:9A:E3:AC:C9:F3:69:0C:AF:2C:25:16:B2:CB
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019E30A9063ECF68C9B53767080B75E36015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 151F
Signing time: Sat 16 May 2026 12:00:43 +0000
Manifest this update: Sat 16 May 2026 12:00:43 +0000
Manifest next update: Sun 17 May 2026 12:00:43 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: h/gSsQg+PQVvfVclx0e9Nz9vxaKdNxegP7Q8eFwNzzA=)
2: R-APQP12CW3pOeqttqzgTwcLAV8.roa (hash: vRFhqSINrQiolsddF1f5Cpv/fz0FXcpiwczjaOz8Gbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:06:3e:cf:68:c9:b5:37:67:08:0b:75:e3:60:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: May 16 12:00:43 2026 GMT
Not After : May 17 12:00:43 2026 GMT
Subject: CN=9898d053fba5c99ae3acc9f3690caf2c2516b2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:5f:1c:77:49:68:14:05:c8:4b:77:5a:e7:
74:bb:b5:9a:56:86:55:b3:4e:93:17:7b:a6:8c:2a:
37:8b:66:69:63:62:f5:ce:c8:8e:32:1a:e7:a4:53:
9f:f5:7c:03:3a:de:b4:b1:f1:cc:29:a9:ed:23:17:
c1:43:0b:80:9d:33:b8:39:08:7b:ba:e2:80:be:d5:
6b:24:07:41:e3:0e:6f:0a:eb:5b:6a:50:91:91:54:
02:6c:ab:8d:6c:62:fc:b9:1f:36:17:26:9c:6e:da:
79:23:53:e5:36:78:e4:38:93:52:83:fe:63:d8:11:
b0:0d:c5:5a:2e:f5:6e:c9:86:f8:a2:e5:84:14:bf:
3a:d1:3b:d9:37:ef:5f:68:b0:e9:3e:c3:66:fd:ad:
df:dc:40:e6:ec:d2:44:b0:25:6f:67:40:db:68:64:
88:8b:fa:7e:ed:70:77:fd:bb:95:37:b3:d1:53:8a:
fc:a5:47:1c:33:92:5b:10:96:20:51:e8:9d:dc:f0:
07:68:ce:39:46:1e:01:2b:f9:21:ab:bf:f1:fd:b5:
84:26:1e:00:7a:14:15:51:05:14:d6:e0:09:2b:2a:
0e:74:e1:6d:95:5f:35:e2:d1:5a:e6:de:5e:3a:73:
8d:57:82:0c:e2:19:9a:fb:db:dd:0c:73:81:44:2c:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:D0:53:FB:A5:C9:9A:E3:AC:C9:F3:69:0C:AF:2C:25:16:B2:CB
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3a:94:bf:6c:5d:12:7f:fb:46:33:92:e0:c7:ea:48:c9:c2:
49:7a:4e:ee:0b:62:2d:12:3c:90:d7:5c:09:4c:80:44:5c:05:
e3:c2:eb:e1:ff:43:ff:fb:d7:8e:4f:d0:85:39:45:5c:df:60:
8c:fe:36:2b:d3:fd:da:26:39:32:c1:61:a2:a8:84:b6:6f:08:
3a:35:2b:07:0d:7b:1a:37:ba:dd:26:e8:4b:79:51:13:48:bb:
3b:91:4a:05:0d:cd:8e:10:57:b8:e8:63:78:78:16:bf:97:67:
cb:8b:c1:0a:94:12:cc:bd:af:88:32:96:d9:c4:f5:95:ac:d8:
8f:bc:12:60:cd:c2:33:49:b1:5b:e7:69:d1:35:42:c8:ae:a7:
9a:2b:65:43:64:e4:3a:45:6e:8f:7a:fc:8d:e3:0b:88:9b:3c:
fc:98:70:7b:e1:8d:e3:c3:16:02:cf:0d:e4:e9:f7:76:54:2f:
93:29:83:fc:d3:91:b2:8e:3e:e7:da:46:71:e2:08:75:42:c6:
34:45:0a:60:42:54:39:d3:a2:7b:79:10:b9:23:60:9f:4f:6e:
d4:a0:75:c1:be:32:d8:98:64:24:6c:c2:f2:74:c7:ae:93:83:
21:4b:42:10:37:1e:91:76:fc:6f:8e:5f:c5:89:09:60:e5:13:
a0:cd:5d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqQY+z2jJtTdnCAt142AVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5
MDYwMWYwHhcNMjYwNTE2MTIwMDQzWhcNMjYwNTE3MTIwMDQzWjAzMTEwLwYDVQQD
Eyg5ODk4ZDA1M2ZiYTVjOTlhZTNhY2M5ZjM2OTBjYWYyYzI1MTZiMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HlfHHdJaBQFyEt3Wud0u7WaVoZV
s06TF3umjCo3i2ZpY2L1zsiOMhrnpFOf9XwDOt60sfHMKantIxfBQwuAnTO4OQh7
uuKAvtVrJAdB4w5vCutbalCRkVQCbKuNbGL8uR82Fyacbtp5I1PlNnjkOJNSg/5j
2BGwDcVaLvVuyYb4ouWEFL860TvZN+9faLDpPsNm/a3f3EDm7NJEsCVvZ0DbaGSI
i/p+7XB3/buVN7PRU4r8pUccM5JbEJYgUeid3PAHaM45Rh4BK/khq7/x/bWEJh4A
ehQVUQUU1uAJKyoOdOFtlV814tFa5t5eOnONV4IM4hma+9vdDHOBRCztQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiY0FP7pcma46zJ82kMrywlFrLLMB8GA1UdIwQY
MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt
NmNlNDQ0ZWJlYWYwLzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw
LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDqUv2xd
En/7RjOS4MfqSMnCSXpO7gtiLRI8kNdcCUyARFwF48Lr4f9D//vXjk/QhTlFXN9g
jP42K9P92iY5MsFhoqiEtm8IOjUrBw17Gje63SboS3lRE0i7O5FKBQ3NjhBXuOhj
eHgWv5dny4vBCpQSzL2viDKW2cT1lazYj7wSYM3CM0mxW+dp0TVCyK6nmitlQ2Tk
OkVuj3r8jeMLiJs8/Jhwe+GN48MWAs8N5On3dlQvkymD/NORso4+59pGceIIdULG
NEUKYEJUOdOie3kQuSNgn09u1KB1wb4y2JhkJGzC8nTHrpODIUtCEDcekXb8b45f
xYkJYOUToM1d+w==
-----END CERTIFICATE-----
Generated at Sat May 16 20:19:14 2026 by rpki-client