Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: 4RA8/PencVmA5EeSFOTG7FAah79ntX9RhBL1lEkrBRg=
Subject key identifier: C7:08:B4:0A:9B:90:98:05:8A:FA:03:1D:5B:07:26:8E:0B:48:74:6A
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019D25834DEA78E9C0DF7F2A007CFB57B3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 06CC
Signing time: Wed 25 Mar 2026 15:00:55 +0000
Manifest this update: Wed 25 Mar 2026 15:00:55 +0000
Manifest next update: Thu 26 Mar 2026 15:00:55 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: jw6H9EM6YXBiug7q4AIcwiW9cdFrL46EFVGjOnwtYYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:4d:ea:78:e9:c0:df:7f:2a:00:7c:fb:57:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Mar 25 15:00:55 2026 GMT
Not After : Mar 26 15:00:55 2026 GMT
Subject: CN=c708b40a9b9098058afa031d5b07268e0b48746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:22:d1:82:3a:f1:d5:a4:0b:ae:79:31:0e:
88:d0:b0:ab:c4:1c:2f:45:9d:06:55:31:8d:12:6a:
27:ce:be:a7:3d:94:14:ad:a9:7c:7d:2a:96:97:46:
f1:1d:d6:fe:8b:6a:f0:c7:17:da:bc:c2:3d:ad:95:
2b:7c:42:ba:a7:17:ea:bf:42:f4:ad:c7:e4:92:94:
c0:5f:5c:fa:ac:26:95:f9:68:c6:6a:c1:8e:00:41:
3e:7e:d0:eb:65:ee:87:27:2c:d8:cb:02:1e:56:2d:
d1:d2:1e:6f:82:03:c9:81:bd:e4:66:f4:cc:0f:bc:
b8:34:50:e8:0e:7a:62:e5:6c:b3:d6:fd:fe:f3:5c:
9e:17:9a:a6:a7:32:34:ad:e9:62:c8:5d:de:73:32:
13:b3:e5:ad:70:13:57:17:68:a8:f3:ce:ee:21:b2:
b1:1b:9d:b0:04:b2:a2:ee:b3:58:0a:de:98:4e:06:
24:f9:18:2b:19:d3:c8:97:ed:f7:82:ad:c5:88:b9:
44:57:66:8e:97:aa:ad:e7:95:08:44:cc:b0:6f:3c:
de:4d:37:3a:6f:f5:35:80:04:dc:1b:7b:f0:d0:ac:
fc:e6:fd:32:d5:1a:84:31:b2:b9:8e:9a:6f:df:c5:
c0:01:9a:a8:55:5b:f2:91:68:f2:4c:7a:46:f0:32:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:08:B4:0A:9B:90:98:05:8A:FA:03:1D:5B:07:26:8E:0B:48:74:6A
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1c:ea:92:4b:f8:6c:b1:89:d7:fb:90:71:d1:14:59:0c:ad:
99:05:84:e5:a9:58:26:c2:14:35:87:e2:c0:5d:47:0d:d5:10:
5e:3c:58:a7:95:be:35:95:03:fe:d6:e7:7e:39:4f:c0:bc:ab:
6a:d1:94:53:62:de:c2:a2:93:80:28:25:7f:5e:ff:aa:ba:1d:
eb:a4:23:ae:ff:80:56:d8:af:6c:bc:94:31:f6:89:2b:df:a7:
bc:79:ab:66:4a:f1:27:61:91:92:55:0b:fe:43:55:5b:7b:2c:
67:12:9a:49:35:f3:88:16:ce:92:09:37:5e:19:96:e4:b5:8e:
d9:1e:74:60:0c:0e:47:8c:85:97:a7:67:14:c7:a4:74:84:e5:
50:34:ca:4d:e9:6d:50:fa:a4:ea:ea:85:fa:18:9b:13:6f:74:
0c:30:64:3d:98:0a:ea:33:33:53:b1:c4:fd:d5:2d:4f:a9:7b:
97:08:ef:0d:39:90:59:5c:e7:50:4b:87:f9:a1:56:50:00:32:
82:a4:b2:f5:49:d5:01:58:3d:25:b4:a6:e2:8d:d6:16:24:ea:
a2:0a:6d:c5:12:4a:d9:44:d6:33:05:82:3d:2d:76:48:fb:db:
d3:e0:fc:f8:f7:2e:88:5f:ef:6e:93:6a:0d:6e:5a:33:a3:20:
15:b8:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:20 2026 by rpki-client