Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: NF2G9ripKZFOiEIJKS5SlRSTXTOWkAcvsx/FCccFkVI=
Subject key identifier: 03:85:39:EB:A5:4B:24:C3:8C:FB:00:F4:0A:71:7E:AA:A3:3A:05:AC
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01A08BD5AC340B161AC4B56E3F51122A0875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 15:00:31 +0000
Manifest this update: Thu 10 Sep 2026 15:00:31 +0000
Manifest next update: Fri 11 Sep 2026 15:00:31 +0000
Files and hashes: 1: Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa (hash: JfT+vlrYbEM9FjvE79Xki+Hz1cWLi2L1kmNNGPO6oHE=)
2: _U22vN84xU23wqCg1BXBlTKaXTA.roa (hash: c1GMqxqdH9Wh0URr1Zqm3LRB+FQXb9Kf/PLnjRWf17A=)
3: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: kuKXz+xfrc5KEJX/e31fel5jgkc5aa/IYJ9uSQvQxQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:ac:34:0b:16:1a:c4:b5:6e:3f:51:12:2a:08:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Sep 10 15:00:31 2026 GMT
Not After : Sep 11 15:00:31 2026 GMT
Subject: CN=038539eba54b24c38cfb00f40a717eaaa33a05ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:08:6a:01:7d:39:72:08:66:9b:33:32:3d:
9f:9a:48:cf:bd:89:3b:27:bb:28:54:6c:49:23:1e:
90:5b:6f:24:23:b3:41:af:75:14:d0:6f:65:c5:51:
7c:14:c1:d8:f4:f4:82:6a:ac:fc:66:95:3e:ec:fa:
f8:cb:fb:2a:fd:2d:19:7c:11:45:c3:37:11:3f:da:
cd:7c:2d:14:f4:59:2b:60:b6:9c:28:61:42:95:db:
7d:0d:9e:e3:06:30:fc:9e:69:36:5f:30:1c:c0:28:
6d:9a:aa:27:10:fe:1f:7b:eb:06:66:da:3d:85:43:
56:d6:fc:f4:23:0b:7e:ca:52:9e:e8:32:dd:fe:66:
ab:4c:19:c3:dd:c8:10:3b:16:2c:d7:36:5f:51:71:
ed:0a:b2:b1:2d:9a:96:9f:fd:25:de:94:f1:e6:ae:
69:e2:2e:57:0a:03:75:d8:c1:4d:2a:2a:41:5c:c2:
2b:5f:64:db:95:29:f1:37:1a:55:c9:a8:1e:14:7c:
0f:fa:f7:32:85:b3:13:22:95:f5:cc:69:b0:86:dd:
06:92:20:cb:80:39:c4:90:e7:95:42:04:fb:7f:e7:
e4:0e:63:7b:e9:40:c4:7b:cc:39:4f:ef:97:33:c6:
25:18:ec:b1:82:9a:d8:10:43:12:6d:61:71:d6:5b:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:39:EB:A5:4B:24:C3:8C:FB:00:F4:0A:71:7E:AA:A3:3A:05:AC
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:79:ed:6c:1e:ef:87:ba:b8:98:5d:34:47:0b:d0:64:f2:55:
ad:d5:08:be:1b:e3:a2:b0:93:2d:7b:90:2a:2a:5e:81:d8:44:
26:99:d1:c6:e9:d7:04:8f:bc:aa:cf:1c:66:56:d5:ee:1b:bf:
b6:dc:06:2a:1a:52:34:32:c8:cf:bb:9b:37:bd:b2:91:19:7f:
75:28:d1:4c:e7:8d:53:4f:8f:71:43:46:a1:72:8f:fc:de:8a:
bd:f4:dc:44:ee:ca:11:59:6f:6c:c3:81:2e:15:fe:da:30:fc:
02:8e:89:2a:76:96:31:84:aa:0f:5a:51:91:33:c8:f0:ea:7f:
97:fc:8b:73:9d:81:5e:0e:d3:e2:05:e3:bb:fe:39:95:10:c0:
47:4e:4f:c6:a7:b8:0d:1a:8f:af:24:a6:55:13:ff:d0:27:43:
72:47:77:9a:38:29:0f:0b:29:ab:55:33:24:e7:93:af:c1:fa:
8c:28:55:39:42:ca:87:b2:09:e0:e5:ac:33:e0:02:63:1b:3e:
10:0c:5a:93:d8:b7:0c:cd:88:a8:81:81:ee:02:3a:66:1e:6c:
0d:ad:ef:06:d2:c0:b9:f1:e3:b2:a3:20:ad:ab:b1:3a:56:52:
04:06:d6:47:2f:23:d8:b4:06:f9:77:83:52:d0:cd:10:54:17:
0e:be:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:41 2026 by rpki-client