Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: Cs7I8Y99HO2MK8Pbadg2Vd7jvWffnt2bfH2Vn4CMD2A=
Subject key identifier: E5:E0:6A:7C:4D:1B:CB:39:BE:3D:21:95:41:CA:3D:81:AE:A0:14:E1
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 019DA30A37CA4D708FC47D4FC133AE6ABFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 070D
Signing time: Sun 19 Apr 2026 00:00:48 +0000
Manifest this update: Sun 19 Apr 2026 00:00:48 +0000
Manifest next update: Mon 20 Apr 2026 00:00:48 +0000
Files and hashes: 1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: O8dL5DZxcLSLjUjUO66JPYtBrSdGIK1ODqzeUtAi/Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:37:ca:4d:70:8f:c4:7d:4f:c1:33:ae:6a:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Apr 19 00:00:48 2026 GMT
Not After : Apr 20 00:00:48 2026 GMT
Subject: CN=e5e06a7c4d1bcb39be3d219541ca3d81aea014e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:87:a3:59:f1:04:4d:5e:3b:0f:06:b8:0c:
46:10:68:24:dd:c4:5b:d1:49:21:bf:d2:db:cd:a2:
36:14:de:06:9a:75:de:36:29:5e:bb:5c:07:86:09:
61:2f:58:14:a7:98:d2:10:66:d6:4c:82:e1:5a:85:
79:e4:cc:8b:07:3f:dc:1b:81:6d:05:14:17:94:72:
00:10:2a:44:bf:54:44:e2:f2:ec:eb:84:78:f5:1b:
38:a5:a1:e1:a9:e2:d3:30:cc:b4:b2:ea:ba:38:cd:
47:76:76:cf:6e:d9:fb:b9:16:88:4e:79:b0:84:17:
63:0f:fb:28:25:99:4c:bd:eb:ad:d0:30:cd:87:ca:
eb:ff:22:43:b2:e2:65:31:05:20:c4:31:cf:e5:a9:
47:31:98:0d:cc:bf:05:8b:34:f5:7c:fb:5e:f7:38:
7b:54:df:cd:7d:fe:24:d6:00:c3:64:7f:41:fd:5a:
a2:49:e1:4b:54:e6:cb:88:e6:e8:14:9e:d5:f8:b9:
a5:55:05:b8:e8:f4:76:a5:e2:f5:aa:88:0c:7a:e3:
68:86:75:03:eb:d1:d1:f6:48:51:7b:0c:6b:77:9d:
6b:61:78:3b:78:78:bd:7e:2e:08:b5:d9:62:f2:9f:
2e:2a:af:0b:92:df:35:d9:eb:73:b2:b1:10:3c:ec:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:6A:7C:4D:1B:CB:39:BE:3D:21:95:41:CA:3D:81:AE:A0:14:E1
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6f:09:d9:6d:42:85:95:68:64:3a:dc:bc:fa:c7:a7:1b:a5:
a0:73:24:46:e6:5d:06:23:2b:1a:ea:28:78:12:8d:4c:ed:96:
f7:09:8e:8a:a8:5d:ff:20:eb:bc:90:b0:c1:4a:97:82:a3:6b:
24:ea:6c:db:e7:70:0d:20:a7:67:d2:fd:1f:8c:3f:f5:f1:ce:
92:ac:38:df:a5:14:dd:32:02:ff:80:a6:0a:30:79:38:99:7c:
8e:99:e3:fd:6a:1c:cf:38:c4:c0:e3:e5:00:42:d4:70:08:95:
01:70:1a:47:b0:19:4a:02:12:3e:6f:4e:c0:6e:55:b4:49:83:
10:56:a8:0d:25:34:16:ec:9f:fd:f6:82:e7:9b:c8:11:ef:15:
88:b7:36:18:04:4f:9c:df:83:87:87:33:eb:52:2d:16:a6:e4:
99:28:36:6d:0e:ba:69:b7:70:5b:84:bb:46:c2:3d:82:62:38:
cb:1b:6e:d6:9e:22:17:62:fa:a8:78:d6:63:e1:81:fe:74:29:
78:fd:03:d5:56:97:b3:d4:d5:aa:cd:19:b2:db:a7:e6:9c:01:
38:00:63:a6:d9:43:97:69:00:d8:c8:e9:ea:e2:67:f9:db:4f:
98:d2:3e:9e:ca:fd:ff:5e:c4:41:d2:ea:30:1d:be:e9:06:ae:
09:7a:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:58 2026 by rpki-client