Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: b3el4TXJAPMmd6d6JVKYlyNu9R+CeU6o3QCGyWtm14w=
Subject key identifier: D1:FD:99:FE:F9:BF:D3:01:2C:BC:AF:9E:61:3D:62:C9:F1:17:D4:81
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 01A17DE1A3AC6E42D545AE70D81C135EF4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 090C
Signing time: Tue 27 Oct 2026 15:01:41 +0000
Manifest this update: Tue 27 Oct 2026 15:01:41 +0000
Manifest next update: Wed 28 Oct 2026 15:01:41 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: aFz2ItPxxp6X7BWnwuN9+9LvfIklvMae/vpa6L5mzQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:a3:ac:6e:42:d5:45:ae:70:d8:1c:13:5e:f4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Oct 27 15:01:41 2026 GMT
Not After : Oct 28 15:01:41 2026 GMT
Subject: CN=d1fd99fef9bfd3012cbcaf9e613d62c9f117d481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:4c:2d:95:82:ca:f9:3c:a6:e4:85:00:25:
e8:c4:ee:1b:e4:3f:a5:94:af:94:bf:36:50:78:53:
be:9e:9f:79:74:62:04:3f:c4:cc:ea:89:a3:64:05:
c1:7d:06:bf:b5:77:cc:46:90:7f:2d:c4:cf:39:e5:
ea:57:b4:56:fb:cd:a5:75:68:03:65:a6:a0:20:d9:
c1:14:4b:44:88:35:c7:46:88:66:e7:1a:e0:43:a9:
29:c4:4f:fa:7a:3f:32:69:bd:47:15:f3:fc:bc:99:
24:ad:07:28:55:4b:f5:6a:8e:2d:96:0a:03:fe:db:
c0:ac:c3:48:2e:a2:ca:52:e5:05:db:63:8d:4b:1f:
20:8d:d9:91:0f:21:d6:c2:95:c4:f2:7f:13:9d:d4:
f7:30:62:09:b7:7a:15:3e:68:24:8d:b6:91:0f:84:
b5:a7:92:96:c2:7a:42:dc:06:12:23:b7:df:a0:5e:
64:ee:84:4b:ce:7f:c0:ce:7a:d5:cb:fe:cc:d8:2b:
7a:bf:7d:54:84:41:36:56:f2:f0:b9:5c:ea:c9:21:
a5:f5:6a:6c:ba:95:9b:03:1a:7b:61:d2:6f:72:2e:
b6:ed:ef:66:57:60:46:ee:34:d1:66:13:1d:12:15:
10:5d:c8:21:e6:65:d0:99:70:19:dd:93:e3:3b:7f:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FD:99:FE:F9:BF:D3:01:2C:BC:AF:9E:61:3D:62:C9:F1:17:D4:81
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:79:80:7b:27:ec:90:42:7c:9f:e7:48:8c:08:f7:32:4c:
74:ca:50:30:60:64:99:45:f5:b9:d7:bb:28:9a:f4:eb:dc:32:
5d:9b:74:8b:0e:2a:d3:39:30:28:d2:96:85:fc:a9:64:41:c3:
5a:6d:c4:4a:6c:1b:e0:b8:44:85:9a:9a:99:e4:3f:93:1c:4c:
9a:c5:d8:1d:bc:7f:00:d7:d1:3b:6e:9e:f1:50:e6:05:3b:03:
6c:54:61:41:c5:9f:6a:f5:75:31:5b:7f:40:18:b7:ec:16:34:
d2:89:62:60:19:b5:fd:a4:55:95:7a:ee:5d:41:88:83:02:0b:
b0:50:1f:91:8a:e7:7a:4c:92:09:c9:b3:f3:20:66:a2:9a:3f:
04:80:6a:53:4c:35:de:be:14:b4:06:e8:d1:1a:5f:3a:ea:82:
e7:a0:bd:7b:a0:1b:3b:3b:df:0e:ed:e8:a1:51:b2:89:85:a9:
7d:ab:98:df:f4:a8:5b:ca:87:8b:a5:34:84:a6:5b:db:8b:22:
84:9f:11:5a:87:d2:5d:b0:2d:8a:fc:d9:b7:4e:8a:7a:59:5e:
04:da:d0:45:bf:12:8e:ed:5e:42:de:4f:4f:5c:e5:ad:25:bd:
26:7a:b9:b7:c3:3f:e6:d7:9d:54:08:24:b2:42:c5:16:8d:7a:
63:17:f6:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94aOsbkLVRa5w2BwTXvTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk
MWZjNjEwHhcNMjYxMDI3MTUwMTQxWhcNMjYxMDI4MTUwMTQxWjAzMTEwLwYDVQQD
EyhkMWZkOTlmZWY5YmZkMzAxMmNiY2FmOWU2MTNkNjJjOWYxMTdkNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/JMLZWCyvk8puSFACXoxO4b5D+l
lK+UvzZQeFO+np95dGIEP8TM6omjZAXBfQa/tXfMRpB/LcTPOeXqV7RW+82ldWgD
ZaagINnBFEtEiDXHRohm5xrgQ6kpxE/6ej8yab1HFfP8vJkkrQcoVUv1ao4tlgoD
/tvArMNILqLKUuUF22ONSx8gjdmRDyHWwpXE8n8TndT3MGIJt3oVPmgkjbaRD4S1
p5KWwnpC3AYSI7ffoF5k7oRLzn/AznrVy/7M2Ct6v31UhEE2VvLwuVzqySGl9Wps
upWbAxp7YdJvci627e9mV2BG7jTRZhMdEhUQXcgh5mXQmXAZ3ZPjO38+lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH9mf75v9MBLLyvnmE9YsnxF9SBMB8GA1UdIwQY
MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut
OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5
LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjZ5gHsn
7JBCfJ/nSIwI9zJMdMpQMGBkmUX1ude7KJr069wyXZt0iw4q0zkwKNKWhfypZEHD
Wm3ESmwb4LhEhZqameQ/kxxMmsXYHbx/ANfRO26e8VDmBTsDbFRhQcWfavV1MVt/
QBi37BY00oliYBm1/aRVlXruXUGIgwILsFAfkYrnekySCcmz8yBmopo/BIBqU0w1
3r4UtAbo0RpfOuqC56C9e6AbOzvfDu3ooVGyiYWpfauY3/SoW8qHi6U0hKZb24si
hJ8RWofSXbAtivzZt06KelleBNrQRb8Sju1eQt5PT1zlrSW9Jnq5t8M/5tedVAgk
skLFFo16Yxf2ew==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:48 2026 by rpki-client