Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: fxcBaMrL/8D7C+OfgoKrGiyf4VqtzVjV9kOn2ZhWc5M=
Subject key identifier: 3E:7D:FC:FE:1C:88:E2:3E:7B:60:7E:CD:F4:48:82:2E:97:E2:63:2E
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019CABD974D2F33EF34E9E77D7387FC31131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 068D
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: LDWtCneP9XAP2cx7BnHXlu3pTM6ZPyh/GlzPC+Yv/rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:74:d2:f3:3e:f3:4e:9e:77:d7:38:7f:c3:11:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=3e7dfcfe1c88e23e7b607ecdf448822e97e2632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:c6:7f:93:de:fc:67:93:a4:2b:a3:e0:94:
be:30:8b:c6:ff:5a:67:77:65:fc:6d:d0:ac:d9:16:
7c:da:2e:06:5a:d1:23:f5:85:5e:80:bb:05:fe:4e:
68:2d:5e:4d:ce:4c:e9:7b:57:3b:6e:8a:b9:26:88:
22:cb:a1:7f:ae:84:56:c6:c8:07:f1:c0:24:8b:5d:
42:55:86:de:f2:c7:18:b4:ac:71:88:a5:8c:30:16:
80:3d:4e:97:b9:21:1d:35:fe:b7:e1:da:3b:a8:da:
35:32:1a:6f:64:3d:98:f8:ca:22:49:d7:9f:5f:01:
19:a5:68:16:7b:27:61:b7:92:5b:5b:ec:25:28:00:
26:1f:14:01:e1:56:3d:cc:d2:3d:a7:6e:2b:5e:7d:
4f:67:c3:88:c6:71:6f:32:aa:3f:47:8b:42:cd:5c:
33:ff:be:aa:7d:bf:fd:bd:c9:34:6b:43:8d:be:f7:
51:91:1d:88:a4:18:4b:3f:de:85:0f:09:ce:51:9a:
22:a5:55:1b:b0:f9:b2:77:d3:2e:d7:66:68:8e:dc:
de:01:36:59:be:46:e4:c6:ed:6c:3e:7d:a8:35:7f:
34:5a:a3:a7:00:0f:db:8b:75:b9:23:8f:58:a5:b1:
f0:2e:17:8d:be:9b:61:6f:a9:ba:08:af:b9:d4:f6:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:FC:FE:1C:88:E2:3E:7B:60:7E:CD:F4:48:82:2E:97:E2:63:2E
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e5:d4:eb:cb:ab:35:3a:20:3c:7d:20:df:73:fd:75:5f:95:
2c:33:14:1f:20:bd:1a:65:b2:ac:ae:1d:3b:36:b6:66:a4:5f:
24:59:c6:df:9e:de:48:d8:20:20:24:e4:b4:f6:c0:1a:e2:4c:
4b:d4:95:36:fc:20:25:c4:75:ad:0f:03:81:92:10:07:95:93:
35:8a:ed:57:ff:e0:9f:04:83:81:c7:4b:4f:f6:62:a4:85:4e:
48:64:51:21:7c:48:9f:db:c3:ab:d5:21:b5:fb:e7:2f:9a:17:
9d:9e:6a:ef:35:65:a7:05:ab:aa:40:36:60:1a:73:87:8d:92:
7b:6d:3a:e6:4a:a8:ca:d3:ef:b8:56:c8:f0:4f:4c:99:87:a6:
9c:84:3d:3f:5a:94:6d:b8:39:a5:4e:f6:bb:f0:a2:a0:bb:c1:
90:8e:1d:42:d0:c7:d2:dd:6d:6c:bd:4b:0d:9c:4f:e6:96:52:
7c:db:dd:c6:fc:bb:49:17:f8:76:27:07:4f:98:62:21:51:62:
43:2f:47:6e:4c:91:39:96:4d:45:fb:18:dd:f1:4c:54:9f:e4:
62:94:10:b3:ad:6e:11:03:d4:ee:0c:fe:7d:e9:de:94:34:2c:
d7:48:84:c4:92:17:e1:e7:d6:c2:ab:6f:67:57:12:48:01:1a:
6f:97:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:54 2026 by rpki-client