Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: rTx0aG6vLt8WcSeX5LoXwKD2v8dVsiG40+dbli0wPhk=
Subject key identifier: 08:AB:07:3B:3F:35:3E:85:B1:25:4D:87:57:6F:76:6E:C6:F6:07:45
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019EC2C957278E8353D078475E9257CA354C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 07A2
Signing time: Sat 13 Jun 2026 21:00:35 +0000
Manifest this update: Sat 13 Jun 2026 21:00:35 +0000
Manifest next update: Sun 14 Jun 2026 21:00:35 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: HzJrD2MaZeBhPRTMF90ZXSJEseyGErNZxRZmu7tb8ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:57:27:8e:83:53:d0:78:47:5e:92:57:ca:35:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jun 13 21:00:35 2026 GMT
Not After : Jun 14 21:00:35 2026 GMT
Subject: CN=08ab073b3f353e85b1254d87576f766ec6f60745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:9c:bb:55:b9:1c:99:89:39:2b:79:5f:e2:
f9:25:15:d3:b4:b5:eb:85:59:3a:2b:aa:23:fa:71:
9d:7c:31:3c:3b:80:21:68:7d:f1:40:00:d6:66:82:
da:b6:e7:80:0b:0d:08:c5:ca:d2:1c:33:f2:b8:d9:
18:01:43:20:e5:83:29:6f:08:a5:d9:8b:a9:a4:be:
41:53:e3:13:d0:4f:f4:9a:1d:58:e7:17:e1:19:0c:
28:02:0d:6e:f3:81:b1:c8:2c:98:41:02:ca:89:4e:
a0:37:91:d4:98:8b:fe:e2:1d:56:69:50:f6:21:3e:
d0:f6:ab:f0:69:cf:f2:5a:63:c0:86:2e:25:b3:a0:
eb:c3:39:96:27:e0:26:ec:b0:6a:f0:68:f2:74:e4:
f8:5d:6e:9a:23:52:89:2f:4f:6b:14:e6:91:e0:42:
06:28:04:8e:81:49:18:63:7b:9c:04:52:fb:0d:90:
b0:e6:64:d0:88:eb:e5:e5:84:dc:e6:bb:e1:e3:54:
39:a9:25:00:75:d9:15:03:12:cc:db:39:e5:4e:ae:
e5:66:a2:52:3a:97:d1:10:f7:e2:9d:d6:6b:92:d5:
f7:12:94:f5:3e:8a:e4:93:dd:3e:9e:55:51:87:a3:
f2:81:23:66:5d:1c:cc:da:47:fd:86:8b:8f:05:6e:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:07:3B:3F:35:3E:85:B1:25:4D:87:57:6F:76:6E:C6:F6:07:45
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:e6:5d:35:c2:d3:51:16:fd:26:2d:bd:45:68:49:de:b5:
31:d9:8a:33:c4:65:42:b9:e5:1d:09:da:d0:2c:24:8f:10:b8:
09:4b:25:79:b2:46:e6:7a:b3:2a:52:55:20:d1:c5:c0:45:32:
90:66:50:26:6a:df:82:7e:46:48:c3:7d:56:7d:42:3d:1c:88:
19:eb:97:cb:31:1c:0a:99:02:38:9b:c8:8f:43:79:a5:ce:ef:
09:99:60:6a:9c:5b:1b:6f:17:a4:cb:95:b0:c6:ed:f0:b8:df:
0f:c8:22:37:af:0b:17:04:31:c4:33:df:3b:c6:15:b4:58:20:
9e:10:bf:ae:a1:b6:d5:0f:5e:a0:dd:ff:67:0b:06:8c:fd:eb:
cb:08:8c:a6:c6:49:a4:1e:70:92:f9:f4:40:8e:90:a6:3a:fd:
19:8b:06:7f:98:c7:51:93:b5:35:cc:2c:d2:ca:5f:66:70:b9:
ef:2a:18:48:73:81:af:a3:2c:90:5c:3a:8e:93:20:1f:2b:68:
a4:61:0f:64:28:8d:7e:3a:70:18:ba:40:d1:cc:28:3f:d6:cd:
19:7b:6c:a2:33:99:1e:58:c6:43:55:29:00:28:b6:76:bc:85:
8b:5d:1e:00:77:c6:20:ee:d9:c6:41:d4:12:f3:84:6d:0f:0d:
8a:cd:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:49 2026 by rpki-client