Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: O0Gdj3BGsZezRC3QU6jRnlBIPa5cjNLNUFAZsphTHzk=
Subject key identifier: 54:3E:E0:7D:C0:3B:C0:53:04:7E:0A:CC:C7:90:B2:74:02:39:7B:72
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01A0F230E7DE556BF862C164265DE0793B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 12:01:26 +0000
Manifest this update: Wed 30 Sep 2026 12:01:26 +0000
Manifest next update: Thu 01 Oct 2026 12:01:26 +0000
Files and hashes: 1: Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa (hash: JfT+vlrYbEM9FjvE79Xki+Hz1cWLi2L1kmNNGPO6oHE=)
2: _U22vN84xU23wqCg1BXBlTKaXTA.roa (hash: c1GMqxqdH9Wh0URr1Zqm3LRB+FQXb9Kf/PLnjRWf17A=)
3: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: 4kyvMChXHP7wYO0Rr2OYZs2op46s2g0QG5o2+hB5CAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:30:e7:de:55:6b:f8:62:c1:64:26:5d:e0:79:3b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Sep 30 12:01:26 2026 GMT
Not After : Oct 1 12:01:26 2026 GMT
Subject: CN=543ee07dc03bc053047e0accc790b27402397b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:21:cd:f1:8b:67:40:ec:48:a4:70:5c:74:
94:80:16:f5:d3:e8:c1:e1:a0:87:3d:19:0f:40:67:
6d:2e:d4:a3:d2:e8:61:6f:ea:07:4c:ad:34:8f:8a:
7e:2b:92:12:b8:66:ed:25:93:48:d2:2c:fe:2d:8d:
7f:25:15:80:0b:38:c6:ae:ac:54:da:86:20:48:8d:
08:7f:34:34:17:cd:cb:a6:ef:99:f8:ab:c6:8f:84:
a4:da:2f:8c:7f:56:50:7a:31:a5:f5:f3:91:b1:81:
f5:c0:39:97:4b:96:d4:6e:1a:f0:fa:b9:5e:aa:96:
a0:71:b0:03:c8:bb:ac:1c:d2:bd:60:1d:73:17:81:
d0:df:16:a8:79:08:82:c9:40:39:d8:58:fa:23:27:
94:d7:8f:1a:80:01:cb:5b:54:47:52:b5:65:09:8e:
48:42:88:7f:dd:24:bb:4a:e9:a1:91:23:6d:e9:ca:
37:21:88:28:e4:9d:67:86:6c:8e:e1:0b:1b:b6:a5:
54:9e:a2:f6:23:75:42:0a:46:b6:25:f1:a9:f8:4e:
37:80:dd:28:5b:63:82:d2:21:9e:56:10:5d:85:4f:
dc:2e:11:51:98:72:d8:da:ed:e9:d2:1f:0b:cd:d2:
f9:3e:e2:59:80:cb:df:c0:65:49:e0:cc:a5:8f:bd:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:E0:7D:C0:3B:C0:53:04:7E:0A:CC:C7:90:B2:74:02:39:7B:72
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:91:f6:e3:fd:64:15:40:a4:ac:45:18:a0:5a:28:51:57:62:
8c:50:96:9b:c6:e7:28:c3:74:00:6a:aa:44:3e:a7:5c:d7:ab:
a9:85:7c:1b:35:0f:27:57:08:b9:05:4a:de:62:97:70:fd:70:
9d:b9:6c:d7:6e:db:30:a8:fd:a5:e8:e6:84:82:5e:a0:ec:62:
5a:a5:51:e5:f9:b1:bc:64:64:fa:19:25:b1:cf:20:66:89:6f:
57:04:36:cf:8d:a3:f7:da:a9:91:76:39:19:9c:7a:45:4a:8f:
83:71:92:11:99:e6:77:4b:2f:f0:74:73:23:9d:8d:90:94:ee:
74:1b:0e:8e:07:f4:e3:ac:12:5e:56:b5:30:38:57:3b:2f:e8:
ba:0d:41:e5:4b:0f:10:83:12:83:8e:04:5f:b8:b8:b4:25:43:
d3:42:5f:44:e5:e3:e1:4d:a4:48:27:41:ba:3c:d7:8b:65:7d:
01:43:04:12:84:bf:4d:57:84:c0:92:10:27:e4:2c:9d:a2:dd:
80:31:57:c3:d1:06:06:de:b9:4b:8e:d2:d8:7a:61:6e:70:b8:
44:2e:ce:d0:85:be:76:7b:f9:82:9e:74:69:d4:dc:78:9c:9d:
75:59:13:1e:2b:7f:77:39:b7:84:a5:3f:d5:f5:ad:98:07:8a:
7e:f5:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 23:53:04 2026 by rpki-client