Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: eTxvfwxQsBochalDNoQqfDJRZyewrZMsm9PCe2d/l/Q=
Subject key identifier: 69:30:33:98:43:5F:4E:41:B7:10:01:28:35:C2:3D:85:95:1E:A9:ED
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019F954A783726EF8DD4D1F11109170D36F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 080F
Signing time: Fri 24 Jul 2026 18:01:53 +0000
Manifest this update: Fri 24 Jul 2026 18:01:53 +0000
Manifest next update: Sat 25 Jul 2026 18:01:53 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: swr13qbuByhA3nZDAPLNyW6vt2o8Bjh/TIC7jvex468=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:78:37:26:ef:8d:d4:d1:f1:11:09:17:0d:36:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jul 24 18:01:53 2026 GMT
Not After : Jul 25 18:01:53 2026 GMT
Subject: CN=69303398435f4e41b710012835c23d85951ea9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:a0:f3:a2:51:1c:1b:0a:fe:98:3f:a1:db:
f5:57:67:6e:22:44:45:d2:e0:d0:d8:ea:52:37:8c:
c8:a9:74:43:42:39:84:bf:ea:97:7b:f0:7a:5b:3e:
b7:3c:57:73:5e:09:fd:d1:d8:68:c2:4f:3c:a3:d4:
bb:21:70:35:8f:f7:2a:37:dd:42:01:60:f3:31:80:
fa:75:79:b2:39:02:3b:fe:26:19:a3:99:1a:c7:f6:
b7:cb:42:bc:47:ac:61:bd:f3:ab:79:ba:4d:5f:c5:
ef:c6:37:6f:9f:73:91:b5:8d:92:db:e8:e3:e5:be:
af:63:e3:07:b6:4f:ed:cd:1f:aa:db:c4:b9:4d:0e:
d1:73:4a:eb:89:99:17:5f:68:b5:62:8a:2e:cf:ef:
f2:c3:f9:69:3b:d6:f1:71:35:2b:05:1b:e5:35:20:
9e:be:f4:69:04:4c:3a:0e:6d:ef:b9:c3:f6:e8:a8:
9c:7a:ca:69:4a:e2:2a:29:f1:53:c1:e9:55:34:de:
bb:9e:78:16:1b:5b:d3:a9:e8:07:8f:9c:f4:57:c1:
13:61:4c:f8:2a:71:72:62:65:2d:77:08:f2:73:64:
28:71:06:76:76:26:65:ef:d6:a5:51:6f:62:0b:14:
f8:5b:37:4a:a5:63:a2:ca:af:96:0c:62:fc:74:99:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:33:98:43:5F:4E:41:B7:10:01:28:35:C2:3D:85:95:1E:A9:ED
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c1:c5:a7:12:e4:1b:ff:a2:fd:d9:a2:ba:ce:f1:ce:85:64:
ce:1c:43:b4:4b:6c:10:4c:ec:73:d8:bc:64:ef:8f:29:29:29:
48:ab:9b:e1:37:8a:fd:a2:0d:25:d2:3c:c6:22:aa:9c:8f:86:
bb:1c:e1:9d:ae:a2:c3:e7:8d:df:ca:5b:10:4b:89:0a:a4:28:
06:8b:64:b5:5f:d0:5a:b3:ff:f3:29:fc:26:8b:6b:a0:42:e6:
da:c6:c7:77:c1:b4:41:7c:9d:bf:33:1b:b9:c0:54:7e:c8:9f:
c4:23:c7:e7:27:80:1c:3a:2b:15:eb:db:ea:37:2a:ea:7d:59:
b7:99:48:81:1d:72:cf:b4:f8:e2:d5:39:44:8a:7d:70:73:3e:
0f:3f:6e:fd:e4:0e:94:a0:14:22:68:44:44:7f:36:8f:c5:4f:
ec:ab:1a:22:b2:10:0c:17:a2:8c:2f:31:1d:17:43:7f:27:a2:
35:5a:87:c6:fb:8d:c1:4b:52:86:bb:54:bb:96:ed:95:af:35:
61:6f:1e:6e:e6:b1:39:40:d9:6e:de:72:be:34:a9:db:e4:b2:
ac:1c:db:60:fb:f2:db:eb:1a:10:91:51:e3:ea:3e:76:62:20:
10:eb:ff:dd:80:e1:c8:e0:0c:c1:8d:7e:6d:05:f9:43:8a:ab:
43:8c:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:08 2026 by rpki-client