Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: LSi6MT5JKwAppsPgHMh8mBf3na+mw7l0gwU9mTpi1ks=
Subject key identifier: A6:44:77:2E:C7:08:7F:D1:99:2E:DD:EA:26:26:B8:BE:6D:37:34:00
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 019F92B6BAA1E1E06708D21E4633DA8A0F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:01:16 +0000
Manifest this update: Fri 24 Jul 2026 06:01:16 +0000
Manifest next update: Sat 25 Jul 2026 06:01:16 +0000
Files and hashes: 1: Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa (hash: JfT+vlrYbEM9FjvE79Xki+Hz1cWLi2L1kmNNGPO6oHE=)
2: _U22vN84xU23wqCg1BXBlTKaXTA.roa (hash: c1GMqxqdH9Wh0URr1Zqm3LRB+FQXb9Kf/PLnjRWf17A=)
3: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: RtpbfQ8PIj8IgTtrzFs3IoorVlvHlD/tNjWeUIKQk3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:ba:a1:e1:e0:67:08:d2:1e:46:33:da:8a:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jul 24 06:01:16 2026 GMT
Not After : Jul 25 06:01:16 2026 GMT
Subject: CN=a644772ec7087fd1992eddea2626b8be6d373400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:07:97:85:ae:14:4f:3a:a8:ad:4d:dd:d4:
e3:31:76:be:4c:3d:43:69:9d:ea:cd:fe:3a:a6:cb:
f8:1d:81:82:55:a0:8e:5c:87:cd:90:97:10:1b:11:
2a:fa:94:8e:04:06:9f:34:0a:99:38:af:d9:d2:08:
36:96:c5:8a:ec:49:6e:01:89:20:59:e2:fe:eb:c1:
d0:ed:94:e6:e3:1c:88:86:61:de:a1:48:e2:fc:af:
5b:5c:d7:0c:13:7e:16:65:f9:11:cb:cc:6e:a6:29:
3a:e9:2a:90:f6:87:83:11:62:ff:d1:94:fd:57:0d:
e3:72:51:42:12:45:f1:f8:92:86:ed:b3:fc:54:ec:
f8:16:78:27:25:25:75:97:1d:3b:e9:9f:cf:db:6c:
93:1b:f8:5f:37:a7:b0:29:b5:bf:d9:ed:45:da:77:
b1:31:a6:2b:a9:bd:dd:b8:ac:b7:d6:2b:44:81:a7:
e5:7e:e3:a1:76:c0:8d:e3:e8:e9:de:ef:95:a8:d3:
5f:ba:0c:9b:e4:cf:06:6c:65:5f:be:5f:ac:f3:28:
ab:b5:7a:9d:3d:73:be:9d:cb:7a:dc:ca:0c:83:fa:
2c:b1:59:74:6c:1d:1a:a4:d2:31:27:07:bf:c6:01:
0d:7d:87:75:51:0c:89:f3:8e:68:4b:13:91:a5:21:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:77:2E:C7:08:7F:D1:99:2E:DD:EA:26:26:B8:BE:6D:37:34:00
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:4d:89:dd:41:a6:6e:74:61:0b:c8:41:77:b4:5d:ab:5b:
fa:76:62:24:0d:e7:07:b9:d8:9f:d5:e6:d0:06:9a:f4:06:02:
99:a8:95:ed:97:25:b6:47:c3:c3:99:73:33:8e:44:5e:36:3b:
c0:0b:3e:0e:16:c5:29:2d:f2:24:e9:a0:d8:ca:34:0a:9a:b3:
86:90:fa:bb:3b:a5:01:ad:39:be:05:3c:0c:b7:cc:9b:e4:bc:
97:53:03:65:f1:2a:35:65:f0:06:47:30:9b:71:6f:3c:7a:47:
6e:d1:cc:ed:e0:ec:ac:41:89:fe:df:ee:48:a0:40:50:b6:ec:
f0:32:74:b9:39:07:97:6a:ff:ee:76:0a:5d:01:1e:fe:cf:20:
eb:f1:ea:46:4a:87:a0:f1:87:71:f5:fd:7f:91:75:3c:bf:21:
46:c4:ab:13:5f:e1:d4:ea:da:a1:3d:d1:75:be:da:b8:df:43:
9d:a8:7a:1c:2f:35:a6:5b:0c:88:1e:18:17:9d:78:64:cc:35:
30:99:c5:1b:67:b7:c1:c2:43:31:c8:c9:f8:4e:ee:37:e0:2e:
e7:9f:03:a6:41:e3:a3:82:6d:dd:97:9e:d1:e1:aa:91:74:9c:
8a:90:8f:94:0e:7c:a3:4c:77:75:7a:fc:24:87:72:b9:d6:70:
d6:38:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:22 2026 by rpki-client