Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: fU944UuuKp97VnTer3XS3rH5J8WJ7jYc2Pyc1oisL/k=
Subject key identifier: E6:7C:18:A1:13:93:6F:1C:80:1F:FE:33:B7:0A:95:63:34:90:C3:F3
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019F87C5D6736686E04E4C7902E7C6885F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 0808
Signing time: Wed 22 Jul 2026 03:01:57 +0000
Manifest this update: Wed 22 Jul 2026 03:01:57 +0000
Manifest next update: Thu 23 Jul 2026 03:01:57 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: aW39PCCi+Oveil/uFIaoEDWRDmx+O0nr6IjW/Ow184s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:c5:d6:73:66:86:e0:4e:4c:79:02:e7:c6:88:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jul 22 03:01:57 2026 GMT
Not After : Jul 23 03:01:57 2026 GMT
Subject: CN=e67c18a113936f1c801ffe33b70a95633490c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:18:10:ea:41:e2:d4:ab:0e:c6:b9:49:01:
a1:2e:d8:bd:06:d6:58:8a:78:af:f7:08:56:c4:72:
5c:a3:78:fd:f6:8e:ec:a7:8b:b7:87:3f:b9:34:c0:
e5:e7:20:2f:fa:82:97:6e:c1:e6:7a:79:fb:34:14:
c5:c2:9b:34:89:f7:d8:79:63:12:2b:55:38:54:d9:
31:c7:00:83:45:45:16:35:64:b1:92:b1:c3:33:0a:
e7:4c:b8:62:e6:e6:56:18:51:2e:8c:d7:44:f9:6f:
b7:db:69:7d:0d:0f:12:1c:eb:dd:49:f9:04:72:19:
e4:53:a9:66:ff:d4:bd:5f:34:23:83:5c:78:8f:b2:
5f:6f:bd:79:6a:75:dc:cd:50:c8:73:aa:7f:39:91:
e0:e1:d4:3b:98:6c:fa:b9:ed:30:47:95:b3:6e:4b:
ca:ad:fc:63:29:68:55:e0:02:3f:ab:3b:3a:d1:4e:
27:f4:90:23:07:a2:2b:c7:57:64:45:c8:98:69:6f:
25:85:0b:15:42:17:41:4b:b7:30:45:4f:57:3b:1d:
59:7a:aa:e0:f7:e8:46:5d:74:dd:10:b7:c5:e7:df:
ba:51:ab:1d:35:20:77:78:59:eb:e6:42:0c:4e:3e:
84:0a:4b:3f:74:75:4e:de:4e:84:c7:26:43:ab:ad:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:18:A1:13:93:6F:1C:80:1F:FE:33:B7:0A:95:63:34:90:C3:F3
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fd:e3:eb:8c:a2:2c:8e:68:a3:b1:34:dd:38:94:3a:4d:eb:
81:7a:33:ca:29:d4:c5:8f:00:e0:f2:27:fe:e1:9b:16:61:16:
67:4e:a2:a2:bd:a1:03:e4:f1:49:3c:d7:5a:56:b9:08:0e:51:
e5:92:97:d0:de:84:74:57:84:c6:3f:24:a8:f4:38:52:57:80:
d8:51:7f:56:f2:0f:8e:93:d7:0d:73:ed:ec:5c:f3:18:40:a2:
00:0b:83:d4:2f:56:23:ed:d9:c9:95:5b:bf:bc:07:c6:31:f0:
a4:39:16:19:47:53:bb:1f:cd:11:4c:a9:cf:42:13:9e:c5:aa:
d7:c6:d6:0f:89:cd:7d:43:c2:de:f1:7e:bb:ca:1b:a1:a1:b4:
cd:e6:62:31:bf:51:d3:e9:17:b7:38:11:b0:19:2a:e2:a0:e5:
49:a6:77:09:db:ec:fc:44:d6:09:0c:4d:08:68:fd:dd:5c:17:
46:41:6e:05:93:a3:8d:a4:e2:9f:d6:bd:09:7d:51:a1:15:b1:
09:29:79:f9:32:28:2d:a0:b7:7b:e1:ea:54:03:76:2b:2d:ae:
1a:fd:93:e0:6d:3d:ed:bd:fb:de:12:1e:e5:a8:f8:af:6b:6d:
79:89:3a:67:33:b4:4f:8d:de:f1:1a:81:35:1f:11:9a:d4:5a:
76:b8:5e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 05:05:59 2026 by rpki-client