Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
File: qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft (raw, json)
Hash identifier: kDEdG8mVxNy7sXBP9bdcaQbJ3vtORZ2/ailkX5zHsQQ=
Subject key identifier: 07:B9:76:80:34:C8:0E:A2:8C:A4:A1:72:66:EF:85:A4:A3:13:1D:3F
Authority key identifier: A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
Certificate issuer: /CN=a804ff75b90312fd516b80d84454dd78f4a38923
Certificate serial: 01A0D3F0306B75AB67945A9C3E3D394EA023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:08 +0000
Manifest this update: Thu 24 Sep 2026 15:02:08 +0000
Manifest next update: Fri 25 Sep 2026 15:02:08 +0000
Files and hashes: 1: 7CnxpDPVlxKH81qFN_dOyKbsUss.roa (hash: /xY/rPneqbupFZk4cdAOyaaqNwLCD9obEUgK/3SZ7HQ=)
2: _bajoAs7IshxDLQiTYyJzv1Bm5E.roa (hash: uQSAmD4VKNGF+UiWybQdbv/JC0YWn0wCO4Ez1EgY17w=)
3: qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl (hash: G0ZJxZOC6icDINvagGdjQRdFXKhhcGJLnvZ3YPOxS4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:30:6b:75:ab:67:94:5a:9c:3e:3d:39:4e:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a804ff75b90312fd516b80d84454dd78f4a38923
Validity
Not Before: Sep 24 15:02:08 2026 GMT
Not After : Sep 25 15:02:08 2026 GMT
Subject: CN=07b9768034c80ea28ca4a17266ef85a4a3131d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:5a:8f:b8:3e:46:4b:d9:88:4c:ce:5c:b4:
19:89:11:5b:50:c2:4e:84:49:f8:9c:1e:6d:0c:86:
95:bb:c9:ba:fa:d7:e3:e5:52:58:d2:5b:63:20:06:
8f:cc:c0:81:c3:14:86:6c:f0:a8:10:47:0b:e8:00:
c0:69:b1:c2:1f:72:f2:62:e9:56:47:e8:91:43:b9:
26:b6:df:7b:4e:2f:c7:68:25:f8:b4:ae:8f:5e:e3:
e2:f0:01:ad:09:7b:13:52:92:96:a1:3a:39:34:36:
30:80:de:18:93:ba:ec:ff:bc:63:4d:c9:ca:c0:96:
d5:54:8c:86:7e:a4:0d:a6:b6:9e:56:65:97:a5:9c:
c2:3d:b3:8b:11:df:1a:89:01:22:be:a1:6b:2b:8c:
99:f2:9e:92:9e:ab:a8:4e:f9:32:18:78:4e:f5:d0:
aa:82:38:68:ee:d6:a1:29:ec:da:b0:04:89:d9:61:
a7:0f:6a:45:05:2f:40:2e:59:db:44:02:19:98:2e:
1b:b1:49:3a:e1:85:18:fb:d5:58:3b:98:82:fc:4b:
0a:8a:f0:c5:44:de:a7:1b:9c:7c:f9:a6:a7:4e:64:
bc:51:2f:7a:54:b4:04:4c:42:2b:99:22:09:df:e0:
c0:ff:86:db:f9:e5:cd:39:91:95:fe:19:15:a8:b6:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:76:80:34:C8:0E:A2:8C:A4:A1:72:66:EF:85:A4:A3:13:1D:3F
X509v3 Authority Key Identifier:
keyid:A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:d4:62:b9:cb:2d:94:4f:a4:82:42:f4:89:11:7d:59:c5:
27:c7:1f:99:e8:90:90:f1:5c:ae:e8:02:c3:7f:7f:0c:00:45:
a6:4f:04:9a:55:82:59:e7:d9:87:d0:37:61:14:f6:ac:e0:a2:
de:8f:42:96:06:b0:24:9e:01:33:8c:91:74:c0:9c:ee:b9:d6:
19:f5:92:06:3d:93:d9:d2:3d:bc:bb:33:cc:51:ed:09:61:0c:
1a:56:5c:ae:65:9b:79:74:48:54:a6:ea:ba:b7:9f:ab:24:4b:
d5:99:ad:7d:4d:6e:be:ae:4a:fa:bc:ea:6b:e8:89:04:d5:54:
26:88:96:ce:a7:7b:e1:70:25:87:90:ca:02:fd:c0:2d:9d:c8:
bc:55:f4:c2:87:44:76:d4:fe:0f:c3:70:5f:c4:ae:04:2c:eb:
93:78:c8:c6:fb:fa:08:48:c4:1e:5d:78:ee:87:89:ba:c7:29:
22:01:28:0c:d5:2f:12:f1:aa:21:b5:be:65:12:b4:5e:36:5d:
0c:6e:4a:0a:aa:f2:6c:96:e5:9b:b6:5e:1f:01:5c:34:00:75:
80:fd:d7:3f:e7:c9:f3:d5:5b:ff:f9:7c:89:21:75:87:7e:f5:
76:ac:08:87:1f:c4:d0:b1:d3:97:e1:4d:bb:8d:28:d7:4e:de:
a8:f1:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:05:59 2026 by rpki-client