Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: 2BEp+X5pVpN4gsfvHLoPN0dlFt2H6Y46STfIeU24qQs=
Subject key identifier: AC:FD:51:4F:88:10:F4:81:9F:F8:E9:6F:F0:AF:26:E2:B8:A7:66:2C
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 01A06F8337EEB7B45A6625B94655C485B28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 0880
Signing time: Sat 05 Sep 2026 03:01:05 +0000
Manifest this update: Sat 05 Sep 2026 03:01:05 +0000
Manifest next update: Sun 06 Sep 2026 03:01:05 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: twgCWKV2L2IfwHVoaBZRHQTbZUK1FuriKO/triwJ7Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:37:ee:b7:b4:5a:66:25:b9:46:55:c4:85:b2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Sep 5 03:01:05 2026 GMT
Not After : Sep 6 03:01:05 2026 GMT
Subject: CN=acfd514f8810f4819ff8e96ff0af26e2b8a7662c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:c7:8a:d7:f6:b2:ac:ed:1d:9b:60:08:fc:
54:34:ce:ad:79:9b:6b:06:da:d2:4f:db:b8:40:0b:
d6:10:be:73:46:de:b2:6c:5a:34:4f:d8:77:a0:5d:
a4:82:cb:2d:8d:9d:f0:d6:92:0b:54:b6:a8:15:8c:
8b:16:ac:e9:de:fa:30:d1:91:52:6b:d2:ef:8f:aa:
3e:44:31:ce:f8:d5:0b:17:00:95:a5:e4:15:ba:d3:
8d:1c:57:11:6d:64:54:ca:95:98:2f:8f:b9:f9:78:
f7:6e:f1:e7:bc:d5:c0:33:a5:b5:d7:c8:25:9e:ed:
ab:dc:3e:29:87:38:6c:f6:ed:7e:af:b7:ab:14:43:
19:9c:10:86:a2:2b:cd:e9:26:05:be:62:35:35:51:
3b:d6:59:ae:a4:0a:55:9d:be:ba:90:1c:0a:60:a8:
5b:e4:cd:8d:c7:2a:1b:06:fb:de:ab:34:c0:22:83:
f9:21:08:26:d2:f7:bc:3c:04:d6:f9:90:94:7a:6d:
d1:b9:f0:de:f3:f0:a4:40:ca:0c:91:5f:4b:85:93:
2d:cb:23:63:d8:03:a6:ce:1e:e1:b3:75:46:00:8c:
45:4a:92:48:30:70:1e:ba:e1:aa:97:b6:aa:cf:b2:
f4:da:8d:d4:bb:46:d5:fa:be:5f:dc:88:e9:26:f9:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:51:4F:88:10:F4:81:9F:F8:E9:6F:F0:AF:26:E2:B8:A7:66:2C
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:f5:05:e7:a3:6c:df:5d:d5:43:69:0b:d6:80:06:f0:2b:
97:7b:43:0a:37:fd:95:8e:76:dc:9a:f0:35:5f:73:f5:67:d5:
c8:99:1e:8f:cd:19:ff:3d:3d:39:f5:8e:b4:ca:d4:90:22:58:
ab:c2:40:f6:89:9b:88:da:47:fd:f4:29:bc:b0:0e:eb:62:6e:
91:42:95:98:98:9a:a7:79:f0:ad:14:b5:d2:d5:dc:3d:be:01:
a6:15:f5:de:0e:4f:f4:03:ad:fb:a5:24:59:73:0b:03:68:51:
1a:f4:0e:d5:35:fb:21:52:2f:e0:00:a9:1d:68:9a:e4:71:02:
f9:2b:77:fb:8d:79:3d:5d:03:f7:f7:0c:f0:51:dc:a7:d5:9e:
71:5a:40:8c:8f:64:53:52:76:b3:f5:71:9e:c0:af:48:63:25:
ed:ea:4b:f2:f1:69:51:49:5e:63:52:b5:55:f6:4b:55:e9:65:
97:8f:8d:ae:e5:43:29:9e:de:1e:54:8e:f7:29:cf:f7:d9:9d:
93:20:c5:c5:1a:52:f3:c0:fb:21:5b:7a:2c:5f:e6:dc:f8:ed:
82:01:49:8c:39:96:1f:da:f1:68:ad:e5:5f:c5:ec:06:96:78:
9d:29:cb:f5:58:05:2e:08:de:fc:f4:50:30:da:b3:b2:9e:97:
2b:c7:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:31:03 2026 by rpki-client