Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: RuTw8MRg+4FtjRMOnSW6CO5Qsk0VODO1nLjmOhO4NpY=
Subject key identifier: 07:45:A5:8C:DE:54:E1:C4:EA:2A:E1:52:D7:DF:A6:43:6C:BE:62:7A
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 01A10BF0857A4F093589890961BC23F6B980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 08D1
Signing time: Mon 05 Oct 2026 12:01:14 +0000
Manifest this update: Mon 05 Oct 2026 12:01:14 +0000
Manifest next update: Tue 06 Oct 2026 12:01:14 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: GbfC+3Df0HGEEGHUC6zEUtpSkwpprPiTdlERXda4UBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:85:7a:4f:09:35:89:89:09:61:bc:23:f6:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Oct 5 12:01:14 2026 GMT
Not After : Oct 6 12:01:14 2026 GMT
Subject: CN=0745a58cde54e1c4ea2ae152d7dfa6436cbe627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:d2:34:5a:3e:59:fb:df:f8:03:15:cb:f3:
4f:3f:bd:81:d0:88:e3:8f:8f:76:e1:1d:9a:9c:ab:
80:0e:8f:59:29:67:d8:c2:5c:79:fc:07:67:d8:f1:
0a:1d:d8:31:70:89:47:ba:f8:ec:ef:14:0e:c4:d3:
ae:d5:4e:15:15:94:ae:22:5f:8b:50:8f:6f:31:05:
d4:0a:68:7e:e5:60:62:22:3a:72:af:78:0d:f7:ed:
91:d6:d6:f6:33:11:24:a6:89:9c:ff:9c:6a:d6:4e:
a6:4e:21:92:30:3c:91:1c:1a:dd:f7:93:a1:b2:0d:
9a:3c:3c:ff:2e:4e:0a:28:1c:e4:4c:63:a6:57:40:
a2:66:24:5c:4f:3d:e0:6c:56:af:7d:e0:95:cd:b8:
a0:75:c3:6d:bd:7a:77:56:d5:56:dc:f6:06:4f:b1:
ae:a5:97:47:8a:fc:57:cc:df:3d:17:50:2c:cc:bd:
68:70:67:04:1c:69:91:c9:d1:aa:70:c3:87:ea:ae:
6e:84:13:7e:17:34:23:60:7c:65:92:e4:72:7b:ba:
2e:42:2e:3e:a1:f5:f2:11:73:07:89:6f:80:fe:f9:
ed:14:a4:41:3a:19:ed:66:40:0f:54:05:39:43:ef:
9f:53:58:7d:f5:57:bb:60:bf:ff:45:5d:84:f8:01:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:A5:8C:DE:54:E1:C4:EA:2A:E1:52:D7:DF:A6:43:6C:BE:62:7A
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a5:d5:d2:bf:ba:f0:0d:64:aa:48:d6:d2:4e:73:fa:00:97:
75:b2:88:e6:8a:b6:af:d5:3c:13:7e:fc:d0:9e:f0:ec:d9:4c:
40:2b:43:87:51:78:ee:a5:ec:96:3f:ef:9c:e5:1d:09:9d:79:
76:b0:a4:6f:66:be:59:d4:b2:00:34:1f:34:79:03:ac:93:3b:
51:76:c6:72:43:34:20:6f:9c:c9:41:e6:9b:43:c6:42:a7:38:
34:b7:6d:76:5a:77:de:ba:e1:99:78:8c:c7:50:e9:dc:66:d4:
8e:57:23:85:5d:16:4b:1e:97:55:50:db:04:a9:83:6f:4a:8c:
54:dd:cb:0e:b8:1b:9a:f1:3d:06:2d:31:4d:ac:16:86:c0:53:
14:47:b7:33:fe:2e:31:f4:60:21:b5:10:66:ee:5b:8a:be:35:
37:4d:25:ad:5d:42:d2:28:56:76:ca:a2:a3:75:84:b4:52:a4:
e6:45:8e:18:a9:c9:1d:67:c4:6d:e9:59:25:da:6f:ad:22:29:
08:1f:ce:d6:12:a8:44:ef:a1:53:5d:db:59:33:ca:b1:7b:1b:
f6:35:8d:00:d3:df:cb:92:76:6d:6c:6f:30:6f:26:d2:ba:16:
a8:91:06:ef:b0:91:b0:4f:28:70:c2:06:7c:b9:35:b3:09:6d:
62:fc:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 17:43:32 2026 by rpki-client