Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: kK4F377dZm08VF/F4kE0cxqyw8qdFxCLkmLFW4ZcUjE=
Subject key identifier: 37:F1:02:0B:54:E5:17:15:9E:04:C6:02:32:C9:34:8F:7D:D7:6D:24
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01A19468F1455E46A11CB524B202E46DC145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 1AD2
Signing time: Sun 01 Nov 2026 00:01:07 +0000
Manifest this update: Sun 01 Nov 2026 00:01:07 +0000
Manifest next update: Mon 02 Nov 2026 00:01:07 +0000
Files and hashes: 1: Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa (hash: JfT+vlrYbEM9FjvE79Xki+Hz1cWLi2L1kmNNGPO6oHE=)
2: _U22vN84xU23wqCg1BXBlTKaXTA.roa (hash: c1GMqxqdH9Wh0URr1Zqm3LRB+FQXb9Kf/PLnjRWf17A=)
3: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: RDsGOJcvc23JVanjnTWdPNqLy4cRrzm3/rHCtQR9S7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:68:f1:45:5e:46:a1:1c:b5:24:b2:02:e4:6d:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Nov 1 00:01:07 2026 GMT
Not After : Nov 2 00:01:07 2026 GMT
Subject: CN=37f1020b54e517159e04c60232c9348f7dd76d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:b1:1a:5a:4e:f0:7e:e3:fc:c9:01:76:e2:
18:86:cc:30:d4:89:cc:d8:51:f2:ea:16:f5:1f:77:
78:5e:12:13:df:0d:be:51:d5:9c:7f:ac:74:34:7b:
83:dd:6b:f2:ae:0a:2b:88:b4:9b:cc:26:93:bf:00:
6b:02:38:6e:77:2d:eb:58:dc:4c:bf:e8:aa:6b:43:
a6:95:d8:d1:a9:9a:9f:18:15:8a:0d:ca:b6:a8:ce:
63:1f:41:9e:79:84:47:13:3d:9f:68:32:46:63:23:
a7:3e:10:4c:39:db:0f:25:eb:01:7e:6b:dd:13:fe:
ad:50:43:4b:26:51:90:2c:61:46:f9:8e:e1:4b:99:
cb:eb:f4:4a:80:58:28:25:0a:d4:d5:5a:1c:f4:db:
46:a6:0e:8e:a8:ce:8b:1a:95:08:88:86:5a:97:0a:
9e:03:45:a9:b7:81:e0:e1:96:41:c5:58:e9:1f:e9:
41:4c:70:79:c2:05:b3:33:dc:72:f0:b7:2c:6e:c9:
6f:1c:4d:71:40:1a:4c:8b:26:1b:48:2c:8a:12:32:
2e:c4:4b:80:d0:cd:b7:16:f0:9d:01:61:85:5e:bb:
c6:77:e9:93:c9:02:8a:35:41:76:14:db:5a:d0:5d:
ef:22:3b:7f:f2:16:91:05:9a:10:ea:06:f3:eb:e1:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F1:02:0B:54:E5:17:15:9E:04:C6:02:32:C9:34:8F:7D:D7:6D:24
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:67:b3:47:44:24:64:a0:3e:f2:c5:b6:cd:2a:58:01:aa:0f:
f5:8d:2d:9c:4b:58:bb:eb:0c:90:dc:ef:bf:6c:24:03:9b:a8:
71:d0:f0:8c:90:11:04:b4:1d:f5:2e:f4:50:86:5a:4e:63:b1:
0d:64:09:7a:87:dc:8f:51:b0:dd:a9:46:1d:7f:e8:4f:38:fb:
78:11:e4:35:c6:ef:c2:bb:52:d1:24:f6:71:3e:2b:5b:96:f4:
5c:2c:76:61:83:a9:d7:75:a6:d8:71:58:13:cb:3d:b0:c3:03:
e0:92:37:a9:e8:28:d5:bf:b7:81:7a:b9:40:4d:2e:f0:f1:1d:
2e:be:d7:52:fe:8b:18:e6:ea:a4:3b:ec:4a:54:a5:a3:88:eb:
f3:a7:1e:6c:54:39:4a:cb:33:50:17:1c:3b:24:ac:a7:11:50:
79:a5:5a:6f:17:df:e3:63:18:c9:a7:55:21:47:f7:84:5c:ff:
88:01:5d:73:75:9a:ef:53:3f:a4:2c:5d:23:f2:0d:2d:68:59:
ad:de:0c:0d:d9:ce:85:8b:27:fb:73:8b:f5:ed:3c:c9:9d:28:
11:c2:f4:2f:d9:ea:b9:dd:8f:a2:0b:a2:0b:87:e1:8b:5d:66:
c4:69:2f:e1:6b:9f:49:88:11:6c:aa:d7:9c:8b:57:8b:37:da:
25:d8:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:43 2026 by rpki-client