Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: XmipcBjf3LEokJW1KLG/jAq2yLM8vHMN2ItCutNnNzg=
Subject key identifier: D7:32:3E:00:DF:7E:57:86:68:28:EE:17:1F:CD:00:55:DF:57:CC:06
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019DA4F89064F142182345A42186A210ACAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 070E
Signing time: Sun 19 Apr 2026 09:00:46 +0000
Manifest this update: Sun 19 Apr 2026 09:00:46 +0000
Manifest next update: Mon 20 Apr 2026 09:00:46 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: 2DD0vb+YX0mcEaCETQ7UInXar3TokGfUEyWdpALe6LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:90:64:f1:42:18:23:45:a4:21:86:a2:10:ac:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Apr 19 09:00:46 2026 GMT
Not After : Apr 20 09:00:46 2026 GMT
Subject: CN=d7323e00df7e57866828ee171fcd0055df57cc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:10:4d:7a:76:88:f7:a7:c0:fd:ca:42:0a:
ab:44:60:af:3a:43:6d:d4:93:da:0f:2b:82:50:89:
92:c5:0f:93:d7:d7:83:83:42:0e:f5:71:01:3e:bf:
b3:f0:b6:63:76:9e:3c:06:4c:94:4e:eb:f2:4a:4c:
44:ec:0b:b5:e7:e0:de:64:d9:6d:68:5f:44:ac:be:
52:1a:34:d7:9f:80:bc:9a:78:24:05:9b:b4:6f:28:
39:17:c6:05:c2:35:c3:a7:65:22:f4:16:0f:a8:cc:
b7:e6:e7:e0:f1:c6:cf:0a:b9:fa:63:95:59:02:64:
66:3c:62:1f:83:63:17:20:bb:4f:cd:ab:46:a7:3c:
b6:e6:3c:95:a1:fd:f2:a3:4b:88:52:f0:20:d4:bd:
c1:d9:c1:65:5a:fe:55:97:c6:2a:7f:c0:1e:c0:8b:
2f:bb:df:57:4e:97:13:4b:0d:ae:74:b5:04:7f:09:
47:64:06:5d:dd:ba:38:6c:3c:63:68:25:8c:c4:1f:
ab:44:fe:2b:82:95:1d:d0:30:b4:0d:b1:a1:df:0c:
b3:70:74:dc:8c:21:9a:69:2f:3c:57:48:ea:95:67:
b7:3f:15:d6:83:d3:7d:43:16:ec:dc:3d:c7:bf:5b:
27:85:2f:f1:b2:33:71:fe:35:87:f5:a9:9b:f3:6b:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:3E:00:DF:7E:57:86:68:28:EE:17:1F:CD:00:55:DF:57:CC:06
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:ae:c6:38:28:84:3d:81:a6:d9:03:09:5e:2f:37:66:4c:
57:7c:7d:f6:0a:17:52:49:ef:22:66:66:15:63:4e:9c:d3:52:
a4:eb:8d:eb:ab:fc:7f:4a:b2:47:41:2a:9f:f3:da:6f:2a:eb:
df:60:99:af:8c:2b:03:b0:09:27:78:09:9a:f0:cf:45:a9:c8:
ad:f8:74:31:ab:c5:39:7f:1f:e2:83:69:8c:8f:af:bf:6f:b9:
45:9a:86:cc:61:cc:0d:4d:87:43:15:a8:f3:65:2f:2c:7e:5f:
1e:93:f2:a2:1e:72:1d:d9:b3:ad:c4:92:52:28:df:4c:a8:26:
45:ab:5a:ce:44:e3:8c:38:fe:f0:42:c8:39:0a:57:bd:b5:6a:
b5:72:19:95:57:39:9f:4e:0e:86:42:45:47:37:d8:3b:f3:0c:
e6:b8:b9:32:ab:36:da:09:d9:fc:bf:2d:59:48:01:25:05:db:
f6:1e:ce:25:78:8b:b8:2f:7c:7c:98:6b:6b:8d:b5:04:84:de:
92:15:2b:f5:d2:81:5e:13:8d:d0:53:66:9b:a1:5b:22:8e:2f:
31:6d:4c:1d:49:fa:4d:8d:08:dd:19:96:43:d5:54:1f:92:b4:
88:28:b8:de:2d:b1:91:0c:58:b1:1b:aa:88:fa:90:4c:46:a4:
0c:22:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:23 2026 by rpki-client