Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
File: qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft (raw, json)
Hash identifier: xFUsYt4mipLedBxhbUgqTwAELVemMzgv25ylW6zjfJk=
Subject key identifier: 12:03:36:A7:0F:AF:CA:1C:CB:B7:5E:85:F1:54:B9:C1:FC:7A:DD:D9
Authority key identifier: A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
Certificate issuer: /CN=a804ff75b90312fd516b80d84454dd78f4a38923
Certificate serial: 019FAC75E6CEF80E0F4B179C8CE60559E967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:35 +0000
Manifest this update: Wed 29 Jul 2026 06:00:35 +0000
Manifest next update: Thu 30 Jul 2026 06:00:35 +0000
Files and hashes: 1: 7CnxpDPVlxKH81qFN_dOyKbsUss.roa (hash: /xY/rPneqbupFZk4cdAOyaaqNwLCD9obEUgK/3SZ7HQ=)
2: _bajoAs7IshxDLQiTYyJzv1Bm5E.roa (hash: uQSAmD4VKNGF+UiWybQdbv/JC0YWn0wCO4Ez1EgY17w=)
3: qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl (hash: LJgOXdXmjgGPhhmbUyySLaO2aplz305pL8F3uqJrDVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:e6:ce:f8:0e:0f:4b:17:9c:8c:e6:05:59:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a804ff75b90312fd516b80d84454dd78f4a38923
Validity
Not Before: Jul 29 06:00:35 2026 GMT
Not After : Jul 30 06:00:35 2026 GMT
Subject: CN=120336a70fafca1ccbb75e85f154b9c1fc7addd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:8b:1e:92:2e:a6:b6:43:69:24:2d:04:17:
63:f5:5d:40:c9:5a:f6:89:33:21:77:30:04:0d:5c:
1a:bb:85:61:2b:4c:08:b0:9e:99:ac:f5:ab:ef:c7:
0c:e2:09:f3:78:b0:6f:ae:ad:2e:24:58:f9:09:ef:
72:c6:22:25:a1:57:9c:44:92:b7:21:27:4c:81:5d:
83:05:77:c0:c3:16:4f:d1:8b:6a:0b:c5:fe:83:ab:
03:9f:53:bd:cc:93:a0:82:b2:b9:e5:82:07:79:d8:
08:d2:35:95:1b:08:5b:02:d4:91:3b:e7:c6:a9:31:
16:e5:0f:80:7b:67:74:01:bd:87:10:30:b7:51:6f:
7e:7a:00:2a:f1:ba:c4:2e:11:88:4e:8f:03:d4:99:
fc:5d:ae:bc:8a:40:d7:61:52:b5:ee:74:22:f7:00:
ab:e9:e5:f2:b4:52:6a:02:19:f8:34:23:0e:3a:ba:
f8:59:10:b7:01:d4:03:23:73:f8:22:80:33:e8:b9:
96:fe:cb:96:49:78:65:18:39:e5:ac:24:58:a2:ff:
05:66:54:98:a1:9c:93:95:b5:c7:49:4a:bf:3d:f3:
17:b1:36:ce:3e:9c:df:7c:c0:a6:df:06:fd:63:8c:
4d:82:f3:32:20:97:9c:1a:33:81:61:0e:f7:a9:71:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:03:36:A7:0F:AF:CA:1C:CB:B7:5E:85:F1:54:B9:C1:FC:7A:DD:D9
X509v3 Authority Key Identifier:
keyid:A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a9:54:1f:f5:7a:68:94:a7:af:b2:a2:99:10:1e:a0:c4:fb:
0b:8e:85:8a:93:09:92:e4:fa:6f:07:25:26:f9:fc:84:38:c9:
18:d4:39:ac:03:a0:1b:06:01:53:cb:55:b9:23:f6:b4:94:39:
2d:f6:33:5a:9e:3a:a8:d1:db:9d:80:e2:53:0a:40:85:93:1d:
c0:d6:21:5d:2e:b4:4b:b4:e1:6c:fa:1d:cd:17:6b:82:a3:51:
8e:97:0f:c0:e9:51:f1:48:41:3c:1b:49:27:9f:10:2b:4d:44:
ea:2a:bb:2d:ee:03:df:fa:38:9c:4c:c2:d5:74:e8:d0:ee:c8:
43:e3:0c:df:5c:78:86:12:39:4e:8f:9d:db:66:6b:6c:59:d5:
46:a2:41:94:4c:8b:34:9e:f7:25:a2:72:da:19:3a:ff:ae:26:
7e:0f:b3:97:46:05:12:2c:d6:4b:81:2d:1b:43:41:b2:48:6c:
7c:0e:9d:b4:19:a2:5e:85:98:47:1e:6f:be:ec:bb:bf:17:0d:
1c:fe:86:4f:02:d8:20:02:74:92:02:44:d1:35:da:b5:d6:44:
e4:ea:3e:44:62:6f:b8:a5:0a:36:84:f9:96:66:7c:d0:3c:59:
d9:f0:e2:02:59:bd:ab:d9:5e:de:6b:bb:dd:52:2e:fb:9e:0d:
10:a1:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:57:48 2026 by rpki-client