Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: ZVEOq3A4PR+szIJdsNnYuU1a9alwaq6mhbrx5w7r/vg=
Subject key identifier: 7E:90:17:DA:32:9C:79:9D:6F:65:43:8E:DA:A5:27:76:AC:02:32:8D
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 01A181BE2D9E0622C9CA34EE042CCF74563C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 090E
Signing time: Wed 28 Oct 2026 09:01:26 +0000
Manifest this update: Wed 28 Oct 2026 09:01:26 +0000
Manifest next update: Thu 29 Oct 2026 09:01:26 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: G/c2KjOQ34+nCxfTuyNIomw7aQhJw4Kwl40CLRyf3fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:2d:9e:06:22:c9:ca:34:ee:04:2c:cf:74:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Oct 28 09:01:26 2026 GMT
Not After : Oct 29 09:01:26 2026 GMT
Subject: CN=7e9017da329c799d6f65438edaa52776ac02328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:67:c7:06:47:d2:35:de:29:c9:5d:05:65:
9d:4d:64:cf:3e:9d:4e:f8:06:ba:8b:67:15:9f:6b:
b0:f6:13:f1:d0:7d:ba:f4:bb:88:21:0c:08:86:bd:
a0:f0:e5:47:f2:c1:24:5c:ae:d9:2e:65:0d:68:10:
b5:83:3e:07:ab:0d:a9:28:d4:69:2a:23:39:19:34:
2d:8f:9e:36:6a:0d:53:14:c9:9d:f1:4a:82:93:7c:
fd:9c:4d:f5:92:a1:eb:0b:3a:24:7a:24:f9:3c:d5:
e8:bc:53:5a:19:36:9e:ab:be:d6:82:c2:1c:d0:37:
b9:bf:85:ad:d1:85:a9:ce:36:1d:dc:c4:94:80:18:
98:6f:60:2f:69:c8:86:41:12:22:b2:9b:3c:13:af:
ce:90:b9:33:76:97:38:be:b9:15:e2:e6:fd:96:6b:
20:1b:3c:9e:e9:0b:c7:fc:d1:28:12:ba:38:2e:82:
fe:f4:65:35:f1:86:8f:20:63:cd:5f:7d:9f:05:b5:
32:19:f3:cc:84:39:4b:86:8b:89:ee:0f:75:f2:ee:
a7:e3:ef:ee:36:c3:e9:8f:9b:08:57:2a:f1:c5:4b:
7c:82:43:cb:a7:44:03:80:8a:c1:08:18:af:66:b5:
b5:d1:30:33:b8:4f:c5:fa:0d:83:15:c1:43:a2:f8:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:17:DA:32:9C:79:9D:6F:65:43:8E:DA:A5:27:76:AC:02:32:8D
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:01:f3:09:5a:77:71:71:c1:44:fe:c8:27:69:7b:b5:00:ea:
89:c5:97:f5:b2:c2:be:61:a7:6f:30:35:d0:16:2a:ef:5a:cf:
02:48:c6:ec:44:13:bb:96:df:40:fc:19:d7:f1:5e:e0:87:6f:
66:bb:df:5e:8f:5d:a5:8f:f9:0b:71:5d:05:7f:75:3a:49:c7:
ae:1b:be:33:8d:9d:b1:ce:03:75:5f:83:aa:36:1e:2c:5d:f8:
5b:71:e1:40:31:b0:d6:b4:45:ca:ad:a4:9c:4c:af:ed:a4:a7:
60:f1:32:5c:d6:28:9e:2a:87:6f:0a:24:5a:88:24:22:6c:45:
b9:c4:b1:4f:2e:e8:33:a0:51:ec:fa:24:34:a6:d9:6b:ca:29:
2c:ba:02:1a:71:3b:cb:bf:ee:49:ec:a3:c1:ca:5a:32:db:82:
f1:a1:6b:a6:81:99:e3:5b:fb:a7:4c:5a:d5:e0:11:79:0d:57:
e6:d9:02:1e:75:4b:b1:b7:9b:0d:90:5d:42:31:d3:2c:59:ec:
2e:f9:60:ad:c0:b2:ac:ef:cd:b0:91:5d:cb:81:2c:09:1f:c8:
e5:77:aa:37:92:47:98:36:56:ab:f2:91:c2:4e:f7:a5:f8:b1:
9e:23:f4:f9:20:90:b3:29:26:f6:c2:9d:18:52:f2:1c:fb:fa:
9f:82:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:50 2026 by rpki-client