Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: W+46ihtzthnhdwYgsj9XrCN4g4UBmYLlukI5F22ZKII=
Subject key identifier: 6A:82:B9:5C:B6:A6:CC:A7:4E:00:95:DD:DB:62:BC:3C:13:F7:66:9E
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019E9C2955A011AB002D9FAE32ECC01DD88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 078E
Signing time: Sat 06 Jun 2026 09:00:14 +0000
Manifest this update: Sat 06 Jun 2026 09:00:14 +0000
Manifest next update: Sun 07 Jun 2026 09:00:14 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: BDn+hoiBJz7mtoLQ8smuLwbypF9HaNrEJD7VLaF+CGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:55:a0:11:ab:00:2d:9f:ae:32:ec:c0:1d:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jun 6 09:00:14 2026 GMT
Not After : Jun 7 09:00:14 2026 GMT
Subject: CN=6a82b95cb6a6cca74e0095dddb62bc3c13f7669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:2a:10:57:cb:66:08:2e:db:57:99:df:a3:
8f:ba:79:9a:20:28:38:30:41:97:b5:33:a3:b1:b1:
21:6c:4b:f6:09:39:72:23:13:b1:ba:93:83:95:a7:
e9:0a:98:38:cd:e1:95:1f:b7:1f:73:64:f0:a4:98:
a9:5e:c5:ff:81:a8:a7:13:97:53:4c:11:cb:76:53:
f4:a3:da:7b:fc:4c:53:87:66:50:67:77:fa:f4:c5:
1b:77:75:94:3c:b9:e4:52:f7:86:15:65:ff:d0:83:
e1:89:93:44:36:71:45:76:c0:00:95:ab:5a:1e:5e:
4d:5b:f9:54:41:33:84:dc:82:ad:a4:54:89:9b:92:
c9:d0:d9:30:a6:3b:9d:25:c2:1c:74:12:7d:76:51:
ce:01:7a:13:81:67:f5:f1:65:81:28:b8:a6:18:ca:
e2:9f:e9:00:1f:3c:f4:d0:76:1e:ca:43:97:4b:c8:
53:fc:98:13:ca:ea:f4:68:40:59:58:d5:55:1a:b5:
c9:a0:29:1e:80:7a:89:6b:8c:45:c9:9d:2e:a0:d0:
a8:a3:6d:b6:0f:93:e9:94:51:c4:e6:a9:b3:97:d4:
11:84:8c:bc:35:15:d0:2c:a2:e3:0a:30:8d:b0:47:
22:e8:28:42:2f:64:4e:95:61:ee:d3:49:ff:15:de:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:B9:5C:B6:A6:CC:A7:4E:00:95:DD:DB:62:BC:3C:13:F7:66:9E
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d4:e8:60:af:3b:42:35:81:db:51:6a:3f:03:b1:90:e7:4e:
b2:94:f7:e8:b5:a9:56:35:32:37:98:27:91:78:e2:2e:4b:31:
86:7f:98:e3:dc:0a:41:85:fc:0e:2c:da:0e:9c:60:dc:bd:bb:
17:c5:6c:41:81:89:70:42:5b:03:ba:e0:03:de:f7:23:6c:c5:
d6:5e:87:c7:65:85:76:f6:8a:08:72:0a:29:47:5c:5a:4e:85:
3e:26:8f:da:73:8c:7b:0c:df:f8:f2:ec:78:1d:73:ca:de:c3:
f5:4c:21:a9:12:e1:ce:fa:9a:c4:a1:17:46:1e:48:e6:6b:4c:
6c:b2:b8:f4:d1:1c:08:ec:69:79:75:91:53:83:6f:13:e7:b2:
30:94:38:e6:94:79:5f:83:58:05:5f:d1:68:74:ee:1d:8f:3c:
26:68:89:b8:13:24:88:8f:51:a4:41:08:c2:f1:48:ac:f0:e0:
44:e6:d4:0e:7d:cb:1e:e6:f4:57:9a:cb:82:7e:db:f5:b6:e6:
20:2a:19:1b:f8:1c:e8:23:3a:6c:d2:fc:9f:23:6b:7b:af:11:
2f:62:5f:c6:e7:5d:b1:0c:62:74:35:40:23:65:56:b1:f3:92:
c7:b8:d3:2f:5d:1a:30:3f:19:02:c8:e2:09:9c:3e:a6:4f:ad:
01:0d:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:27:42 2026 by rpki-client