Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: 7ny0dnGb4IIHohEdAYAkSmxpvsyOAFDLPwqAnCDCx0Y=
Subject key identifier: F6:EE:BD:B4:D7:8F:87:C9:86:8D:AA:C5:CF:00:0A:3F:05:C4:26:B6
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019D38D3455FC5C2406B28813CA3343B51CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 06D6
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: k/JR2Bc2sEY8hLXppA3OTTM3ogo4VuIbt3/83k2g34k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:45:5f:c5:c2:40:6b:28:81:3c:a3:34:3b:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=f6eebdb4d78f87c9868daac5cf000a3f05c426b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:83:fa:ba:31:d9:71:99:03:0f:0b:f6:e4:
e4:ea:c1:21:f5:fc:71:77:21:c6:e3:78:e8:a8:35:
f9:f6:bf:b1:e4:a8:11:ee:f1:c2:a9:6c:4a:3e:1a:
09:d0:c4:4d:bc:16:d3:39:9e:69:14:4e:73:fd:03:
0e:d0:62:1f:28:8a:5f:9a:63:8d:5f:95:83:2e:f2:
89:f1:a5:13:b4:fa:39:83:a5:56:74:1f:6f:ec:61:
38:1a:7e:e7:45:e4:ed:6c:6d:40:50:85:72:72:92:
59:32:61:6e:ae:90:4a:6d:a2:dc:d8:16:39:68:7b:
55:3e:6c:7c:ed:35:01:34:5b:86:83:9a:c9:6b:5e:
15:b1:1b:90:b3:0d:39:e3:50:63:ce:98:7e:4f:76:
28:e3:f4:c1:fb:70:0a:10:25:45:d9:9a:d5:78:01:
c3:23:83:88:0f:d2:08:19:51:a1:94:44:c0:61:d3:
1b:89:14:c9:9e:fe:f2:2e:f7:c1:b7:fe:92:b2:2b:
42:5a:80:ad:73:8c:23:df:6a:81:05:c0:8a:f8:c4:
67:a4:4f:e8:71:a9:fb:fa:d8:41:83:c7:3b:38:c0:
3c:cd:7e:c2:cd:24:55:ce:3d:aa:c4:ad:0d:83:e2:
25:42:dc:22:11:98:13:f1:85:9c:c6:87:ea:25:dc:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:BD:B4:D7:8F:87:C9:86:8D:AA:C5:CF:00:0A:3F:05:C4:26:B6
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:c8:8a:7a:ef:03:ac:fb:ae:e5:38:bb:95:82:da:11:db:
28:78:81:df:cb:78:71:e7:09:03:50:2b:f6:b5:17:29:ef:ec:
a9:4e:e5:99:fd:f3:e7:45:fe:f9:72:5d:89:92:60:cf:32:d4:
b6:46:ca:85:c8:99:96:f8:5b:3c:da:24:70:16:d9:33:80:63:
ed:31:5f:3f:e6:a7:aa:d1:52:de:2a:96:71:8d:69:e8:3a:02:
d3:fe:d7:b7:13:d6:d9:18:e8:b7:25:b1:1e:41:19:14:64:d6:
61:77:af:6b:60:27:ce:0d:41:2c:1b:28:a3:e9:b3:95:7a:0f:
39:6d:76:8f:f8:18:85:68:c4:bf:9f:09:e8:6b:14:e6:f8:c1:
d2:e4:1b:67:21:3c:d5:c5:a5:34:d4:d9:1e:7b:7b:bb:f0:c2:
87:32:f7:cf:ed:09:7c:2a:a9:d5:e9:10:da:f2:9e:3e:ea:90:
25:3b:8f:0e:26:2f:a3:39:5b:0e:16:88:ab:e9:38:19:dc:0f:
5c:4f:29:55:b7:67:63:10:c7:07:5e:1e:da:c9:bb:a9:80:e3:
c9:51:b2:74:d2:5a:9e:3b:a1:12:50:83:c0:a4:b7:99:94:95:
c0:4e:c9:a3:ae:b7:ed:c2:cf:91:f3:71:d2:e9:82:0b:4d:ef:
32:4d:89:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400VfxcJAayiBPKM0O1HOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk
MWZjNjEwHhcNMjYwMzI5MDkwMTAzWhcNMjYwMzMwMDkwMTAzWjAzMTEwLwYDVQQD
EyhmNmVlYmRiNGQ3OGY4N2M5ODY4ZGFhYzVjZjAwMGEzZjA1YzQyNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuImD+rox2XGZAw8L9uTk6sEh9fxx
dyHG43joqDX59r+x5KgR7vHCqWxKPhoJ0MRNvBbTOZ5pFE5z/QMO0GIfKIpfmmON
X5WDLvKJ8aUTtPo5g6VWdB9v7GE4Gn7nReTtbG1AUIVycpJZMmFurpBKbaLc2BY5
aHtVPmx87TUBNFuGg5rJa14VsRuQsw0541Bjzph+T3Yo4/TB+3AKECVF2ZrVeAHD
I4OID9IIGVGhlETAYdMbiRTJnv7yLvfBt/6SsitCWoCtc4wj32qBBcCK+MRnpE/o
can7+thBg8c7OMA8zX7CzSRVzj2qxK0Ng+IlQtwiEZgT8YWcxofqJdyaxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbuvbTXj4fJho2qxc8ACj8FxCa2MB8GA1UdIwQY
MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut
OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5
LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAfIinrv
A6z7ruU4u5WC2hHbKHiB38t4cecJA1Ar9rUXKe/sqU7lmf3z50X++XJdiZJgzzLU
tkbKhciZlvhbPNokcBbZM4Bj7TFfP+anqtFS3iqWcY1p6DoC0/7XtxPW2RjotyWx
HkEZFGTWYXeva2Anzg1BLBsoo+mzlXoPOW12j/gYhWjEv58J6GsU5vjB0uQbZyE8
1cWlNNTZHnt7u/DChzL3z+0JfCqp1ekQ2vKePuqQJTuPDiYvozlbDhaIq+k4GdwP
XE8pVbdnYxDHB14e2sm7qYDjyVGydNJanjuhElCDwKS3mZSVwE7Jo6637cLPkfNx
0umCC03vMk2JGg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:50 2026 by rpki-client