Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: +TkCmpjY8+aqaa21vwnY3XK6sfE1SUd3F0rGLF3nwc4=
Subject key identifier: 64:54:9B:B7:B4:FE:3C:C8:16:EB:D9:8F:E8:04:74:08:A9:75:FE:B6
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01A1908C0BAF70AB5CFB3D557C2AD989ECA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 1AD0
Signing time: Sat 31 Oct 2026 06:00:59 +0000
Manifest this update: Sat 31 Oct 2026 06:00:59 +0000
Manifest next update: Sun 01 Nov 2026 06:00:59 +0000
Files and hashes: 1: Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa (hash: JfT+vlrYbEM9FjvE79Xki+Hz1cWLi2L1kmNNGPO6oHE=)
2: _U22vN84xU23wqCg1BXBlTKaXTA.roa (hash: c1GMqxqdH9Wh0URr1Zqm3LRB+FQXb9Kf/PLnjRWf17A=)
3: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: mzCxXHkTPs7+6o4y5hxZhR0WmPbNlvAoaLKSct3IKhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:8c:0b:af:70:ab:5c:fb:3d:55:7c:2a:d9:89:ec:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Oct 31 06:00:59 2026 GMT
Not After : Nov 1 06:00:59 2026 GMT
Subject: CN=64549bb7b4fe3cc816ebd98fe8047408a975feb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:ee:3c:70:81:b6:12:7c:ae:2d:65:43:2b:
eb:29:03:b4:c6:0d:f7:eb:79:93:13:b9:9c:2d:89:
93:22:29:b2:f4:ec:7f:38:77:06:a6:24:0a:f0:7f:
39:3f:40:10:e7:83:4a:55:ed:29:af:a9:b5:8a:23:
46:25:ba:6b:ae:ca:b8:03:cd:94:31:57:10:99:f1:
b5:5a:72:13:ed:3a:4f:b8:f9:69:a1:68:d2:fa:84:
e9:1e:d6:09:c2:04:4b:95:5f:1c:1f:9a:d0:9a:9c:
79:0d:19:aa:55:7b:9e:d4:6d:21:f9:ff:bb:8b:37:
3f:f0:15:13:56:61:46:59:f8:37:39:c2:f8:a5:ee:
15:25:72:57:86:5e:43:b5:61:f2:65:8a:e5:52:dc:
6a:3f:d7:41:34:72:ba:d6:0a:c4:ce:06:e8:43:dc:
4d:b4:b8:d6:db:8b:48:74:f3:cc:9b:d9:57:ef:ed:
56:99:f9:16:1c:b1:80:1d:8c:b6:00:b4:b8:61:c0:
54:8b:34:30:eb:06:99:a3:7f:04:03:64:c8:14:57:
e1:33:9f:eb:d3:f3:87:78:28:42:a8:61:63:81:e3:
a4:b1:a4:60:93:8c:24:f5:e4:05:97:ef:29:fa:1e:
00:21:cc:ca:30:ee:54:bf:f3:b3:f7:74:3f:15:06:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:9B:B7:B4:FE:3C:C8:16:EB:D9:8F:E8:04:74:08:A9:75:FE:B6
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cb:1f:6b:60:14:02:3d:17:98:15:b3:e8:73:16:a3:a5:ab:
8e:02:bc:4a:1e:d2:d7:bf:1d:92:7f:b4:81:dc:4b:2d:75:4f:
a0:a7:85:6f:88:c0:ba:c7:ae:3d:6d:90:6e:35:4d:68:90:d1:
7d:cc:67:30:a5:15:ca:e4:f7:76:f3:e7:ed:49:4c:5b:78:ca:
ca:60:a5:de:88:ac:a6:52:66:fc:2f:a7:ad:e3:45:a8:91:09:
55:f7:bc:55:b1:cd:e5:02:ca:fa:ed:63:ca:e1:45:c1:cc:15:
73:d2:0a:ad:f6:b0:ba:34:c6:29:c6:5b:e7:5a:44:05:4b:82:
72:88:11:96:f1:0f:9d:32:bc:6f:07:b3:19:70:62:9b:f1:ce:
89:65:5b:cc:7b:76:5a:88:80:e6:ab:5c:35:85:6d:bf:2d:95:
fb:48:df:3c:fe:d8:1f:d8:90:04:17:69:a1:ce:4e:d9:c7:e7:
db:2b:7f:7c:4d:c2:9a:12:21:a7:1b:fc:b9:2d:03:b8:8c:fc:
2c:c0:27:a4:8e:e8:47:63:2b:82:dc:c4:ec:7e:25:09:8e:4c:
9f:65:68:e0:0a:bc:ae:24:51:3b:1c:c5:f5:a1:4c:87:62:ce:
a7:6e:8d:cb:66:ea:9e:ef:61:89:08:32:c3:6f:60:8d:4f:7a:
fd:80:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:47:19 2026 by rpki-client