Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: CXvryioyW1x8N3tInAJQ1M8KOglx0Zjtltn0fnw052Y=
Subject key identifier: B3:2C:83:E3:BF:2F:20:F9:52:F1:F7:97:FC:89:C5:78:73:EE:8A:C0
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019FAE658F7FD9AC77820681F92D29EF5FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 081C
Signing time: Wed 29 Jul 2026 15:01:59 +0000
Manifest this update: Wed 29 Jul 2026 15:01:59 +0000
Manifest next update: Thu 30 Jul 2026 15:01:59 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: KAQuN+XQ+eePkZT1GJJDaSZJJKbSHxxhrYUTvyTGvtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:65:8f:7f:d9:ac:77:82:06:81:f9:2d:29:ef:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jul 29 15:01:59 2026 GMT
Not After : Jul 30 15:01:59 2026 GMT
Subject: CN=b32c83e3bf2f20f952f1f797fc89c57873ee8ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:b2:ff:c9:75:d4:73:cf:34:e4:8b:2a:66:
ac:eb:4f:b7:bf:22:b6:20:e6:30:fb:b8:2c:3b:6b:
fd:7f:84:b8:bd:b3:86:71:e8:32:4e:f4:cb:6a:fc:
bc:c6:41:c9:a2:a6:44:82:e1:61:cb:a1:82:97:51:
31:c9:ee:88:da:a9:d7:59:18:2f:27:46:12:23:66:
12:0c:f1:16:99:40:ef:23:10:9c:df:d3:2f:0a:18:
a4:7a:71:3d:f8:d0:84:c9:d5:e1:d0:f2:0c:32:c6:
ec:64:ab:35:10:95:02:e2:7c:95:af:fc:f3:8f:f0:
7a:dd:cb:6f:28:34:fb:96:64:98:45:4f:f0:c6:dd:
d1:81:95:6f:e5:e8:68:a8:a1:8f:5e:26:04:69:e6:
7a:e4:88:20:bb:8e:4e:79:f1:2e:f3:0a:7a:b4:73:
36:de:36:e4:52:05:d3:f9:d3:e3:55:ab:58:84:f1:
1e:d9:c1:d9:ea:b3:e2:20:ce:b7:39:31:19:f0:bf:
a3:65:f4:e9:94:45:ee:b4:87:5b:bc:6b:4b:89:98:
72:60:cb:45:30:22:db:ac:98:03:26:f4:2b:03:5d:
f1:8d:2e:d5:f6:19:1d:e0:c0:0c:f6:e2:19:1d:db:
1b:5e:38:68:bd:f0:31:2a:91:5a:34:c4:85:d8:32:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:83:E3:BF:2F:20:F9:52:F1:F7:97:FC:89:C5:78:73:EE:8A:C0
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:6c:65:c7:ce:0f:90:cf:46:10:a3:6f:4e:73:5d:13:ed:
c5:4f:73:69:a2:90:b3:60:ad:63:37:2c:96:50:71:df:2f:16:
f1:ed:99:b4:db:b2:ac:b2:b1:58:2f:56:03:c1:f2:a6:2a:d2:
dc:15:c2:54:9c:e1:f9:27:9e:db:b9:b4:06:2a:ed:42:35:a1:
36:56:34:9c:0a:c7:8a:36:af:79:60:0a:2a:14:b5:6e:bc:a9:
62:6a:a9:d4:95:92:d8:34:69:58:e2:12:3e:c6:c5:b5:6d:37:
a0:b7:2f:9d:a3:be:e2:2e:69:86:9c:61:82:5e:bd:7f:8b:6d:
c7:7f:f3:4e:c4:2e:65:33:53:d3:87:96:22:43:dd:dc:57:9d:
78:e7:1d:43:3c:ce:ae:7c:0c:de:84:40:0d:60:03:a7:43:1e:
7f:c0:8b:d3:bd:36:4a:b6:6a:55:80:ad:1a:17:38:93:80:cb:
6b:13:75:ee:36:63:40:3b:2d:f1:f5:b6:31:79:e8:09:ee:eb:
5b:09:08:eb:2c:3e:f9:57:05:2d:61:ac:7f:0a:10:49:2a:45:
e3:20:da:d5:68:03:a3:74:03:db:05:00:0f:23:98:46:33:dd:
1a:61:42:bc:7d:55:de:cf:86:05:5f:8a:02:af:67:74:0e:2d:
a7:2f:dd:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+uZY9/2ax3ggaB+S0p71/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk
MWZjNjEwHhcNMjYwNzI5MTUwMTU5WhcNMjYwNzMwMTUwMTU5WjAzMTEwLwYDVQQD
EyhiMzJjODNlM2JmMmYyMGY5NTJmMWY3OTdmYzg5YzU3ODczZWU4YWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW2y/8l11HPPNOSLKmas60+3vyK2
IOYw+7gsO2v9f4S4vbOGcegyTvTLavy8xkHJoqZEguFhy6GCl1Exye6I2qnXWRgv
J0YSI2YSDPEWmUDvIxCc39MvChikenE9+NCEydXh0PIMMsbsZKs1EJUC4nyVr/zz
j/B63ctvKDT7lmSYRU/wxt3RgZVv5ehoqKGPXiYEaeZ65Iggu45OefEu8wp6tHM2
3jbkUgXT+dPjVatYhPEe2cHZ6rPiIM63OTEZ8L+jZfTplEXutIdbvGtLiZhyYMtF
MCLbrJgDJvQrA13xjS7V9hkd4MAM9uIZHdsbXjhovfAxKpFaNMSF2DK2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMsg+O/LyD5UvH3l/yJxXhz7orAMB8GA1UdIwQY
MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut
OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5
LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY5sZcfO
D5DPRhCjb05zXRPtxU9zaaKQs2CtYzcsllBx3y8W8e2ZtNuyrLKxWC9WA8HypirS
3BXCVJzh+See27m0BirtQjWhNlY0nArHijaveWAKKhS1brypYmqp1JWS2DRpWOIS
PsbFtW03oLcvnaO+4i5phpxhgl69f4ttx3/zTsQuZTNT04eWIkPd3FedeOcdQzzO
rnwM3oRADWADp0Mef8CL0702SrZqVYCtGhc4k4DLaxN17jZjQDst8fW2MXnoCe7r
WwkI6yw++VcFLWGsfwoQSSpF4yDa1WgDo3QD2wUADyOYRjPdGmFCvH1V3s+GBV+K
Aq9ndA4tpy/dQg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 17:50:10 2026 by rpki-client