Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: zRTkYW2MMNuU1v/8+RbGGUpC5Glx1OdjmIZezqObzrc=
Subject key identifier: 04:F7:38:E8:25:0D:B3:C1:B7:64:FB:39:E3:25:6B:05:89:D2:37:42
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 01A142047842BB006896046C0C8DEBC73851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 08ED
Signing time: Fri 16 Oct 2026 00:02:31 +0000
Manifest this update: Fri 16 Oct 2026 00:02:31 +0000
Manifest next update: Sat 17 Oct 2026 00:02:31 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: RjWcCcGAr8ZqCA5AeIC1S3iTwf6CllIktCx4O4A2ab4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 23:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:04:78:42:bb:00:68:96:04:6c:0c:8d:eb:c7:38:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Oct 16 00:02:31 2026 GMT
Not After : Oct 17 00:02:31 2026 GMT
Subject: CN=04f738e8250db3c1b764fb39e3256b0589d23742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:fc:8c:39:54:cc:88:c3:ec:20:81:4a:33:
92:7a:a4:dc:58:67:ff:a1:60:29:08:b8:9d:42:cc:
40:51:51:a9:60:1e:dc:fd:1a:bd:d5:98:c1:e8:cc:
91:f1:1b:76:4e:ce:14:eb:83:33:38:de:ad:aa:a5:
f0:0a:d8:40:03:9f:ab:a1:9a:c5:fa:5d:fd:ea:49:
3b:78:37:ee:0d:9b:7b:f0:28:f4:4a:b0:e6:fa:cc:
fb:9c:ed:63:88:33:a7:a2:1a:a8:2d:9a:18:41:29:
bf:73:fe:42:a8:67:fe:ca:64:2d:e8:3b:b5:40:94:
e7:3b:98:eb:fb:c1:c1:82:05:07:e3:4c:8d:e6:6c:
0a:8b:81:ce:1c:f3:59:0a:69:ad:64:4e:81:0a:1f:
db:1b:6e:fd:c4:f1:7f:98:7f:13:cb:07:82:62:a5:
88:8c:bd:05:27:76:45:98:68:de:10:58:87:d5:5a:
fd:8e:28:85:cd:69:15:81:7d:81:c3:1f:2a:cf:3c:
81:dd:25:a9:b8:63:81:dc:be:da:f9:b5:c6:c1:a4:
29:e1:00:34:bb:e0:9e:a2:35:50:a4:39:3f:cf:3f:
fe:38:b9:cb:fc:4e:6b:66:25:c0:e4:9d:7f:3d:e3:
60:ef:9a:f2:2d:34:de:8f:49:42:44:9d:d6:6a:29:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F7:38:E8:25:0D:B3:C1:B7:64:FB:39:E3:25:6B:05:89:D2:37:42
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f9:ac:5c:9b:4c:04:21:6b:9a:d1:25:55:b0:64:7f:a3:30:
63:86:53:c5:69:74:55:77:81:d9:a3:4d:06:48:3b:46:c9:1c:
30:04:48:e4:2e:54:4a:50:94:6a:ec:0d:8e:3c:3f:dd:b9:95:
41:9e:ba:ff:e2:d1:a2:7d:31:65:a1:55:91:ac:e0:f0:50:89:
01:9e:e6:22:1e:06:92:aa:64:ca:0d:6f:8f:c6:32:64:32:04:
6a:61:1b:00:81:60:77:bd:b8:23:c0:0d:ed:fa:f0:b1:15:19:
38:27:d5:90:2c:a4:f0:58:c7:97:30:67:bc:23:07:f7:d3:1c:
a0:1b:b2:37:2d:72:9e:8c:12:bc:a5:02:e4:91:9f:1c:48:d2:
40:b7:50:57:4f:78:e3:4f:0c:f0:d1:60:4d:b9:58:86:d0:e2:
90:b1:8e:bc:7f:6e:a2:b7:a2:4d:60:44:10:f8:66:2c:5c:5d:
3f:6c:4a:1e:cb:4e:10:8b:34:8d:c3:12:8f:32:51:e8:28:b2:
4b:87:ac:a0:e6:52:83:ad:5f:96:c2:bb:0d:70:d9:8a:76:f2:
00:19:3a:a8:0b:95:e9:e5:49:19:7c:3a:31:bb:be:05:ea:fc:
94:b8:db:80:1d:d8:f8:28:58:49:70:da:eb:87:bf:0e:84:f1:
33:65:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 07:25:39 2026 by rpki-client