Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
File: qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft (raw, json)
Hash identifier: k+TxY4wgWy8KQ6zf6Dy6IfDEhby/qwPGlagdHSVfhZY=
Subject key identifier: 69:F8:08:12:AE:61:56:0E:3D:62:01:2A:B9:43:C8:33:7B:55:D1:2B
Authority key identifier: A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
Certificate issuer: /CN=a804ff75b90312fd516b80d84454dd78f4a38923
Certificate serial: 01A1DC8303494AA0443BD2569EB70A597756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 00:02:15 +0000
Manifest this update: Sun 15 Nov 2026 00:02:15 +0000
Manifest next update: Mon 16 Nov 2026 00:02:15 +0000
Files and hashes: 1: 7CnxpDPVlxKH81qFN_dOyKbsUss.roa (hash: /xY/rPneqbupFZk4cdAOyaaqNwLCD9obEUgK/3SZ7HQ=)
2: _bajoAs7IshxDLQiTYyJzv1Bm5E.roa (hash: uQSAmD4VKNGF+UiWybQdbv/JC0YWn0wCO4Ez1EgY17w=)
3: qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl (hash: ZANItF2DYjSqH6koH1w8zPat3Jh2bPgtjxHaBCNpay8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:83:03:49:4a:a0:44:3b:d2:56:9e:b7:0a:59:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a804ff75b90312fd516b80d84454dd78f4a38923
Validity
Not Before: Nov 15 00:02:15 2026 GMT
Not After : Nov 16 00:02:15 2026 GMT
Subject: CN=69f80812ae61560e3d62012ab943c8337b55d12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:90:66:a1:5a:84:61:0f:7b:d5:eb:74:e5:
9b:7f:66:ed:94:5f:1b:dd:45:71:f2:6b:f1:da:8e:
7a:24:89:21:90:6d:1e:e7:44:6f:46:8d:bc:c4:64:
35:40:1c:f2:f0:c5:ce:05:8b:4a:0f:83:53:5f:56:
db:1d:06:80:ce:cf:2f:f7:e7:09:13:01:16:38:d5:
bd:9a:66:88:6d:b5:cf:de:ca:5b:59:a3:61:37:a3:
5c:d1:9f:19:f6:01:86:6c:f2:48:1d:f5:d9:9b:84:
94:cf:69:0f:7e:12:84:93:9a:f2:77:f1:01:d1:7b:
07:49:23:5a:a6:48:5a:36:fb:b2:92:fe:88:1e:ba:
b8:12:10:a9:61:c4:48:ce:93:52:ea:f5:42:06:05:
09:db:7f:42:cb:d9:86:ec:eb:c6:6b:9b:d7:59:72:
b6:52:1a:73:bc:11:b1:71:83:3a:99:a6:c8:e7:e4:
4e:1c:86:95:a7:b7:e9:28:6a:88:d3:d4:3b:b9:e4:
c4:e9:d0:1f:48:96:d7:79:88:b7:f2:f3:cb:bd:7c:
2f:6b:3c:ea:3d:e5:4b:d9:d6:c4:ff:c9:f2:34:a5:
9c:f4:5e:61:e3:cf:6d:53:ab:8d:c8:84:c4:20:d4:
be:e8:d7:3d:17:c5:63:c8:6d:32:51:65:f8:76:f1:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F8:08:12:AE:61:56:0E:3D:62:01:2A:B9:43:C8:33:7B:55:D1:2B
X509v3 Authority Key Identifier:
keyid:A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:02:2d:36:97:d2:30:43:7b:4d:2e:11:f4:ef:bf:26:74:74:
ff:66:a5:62:14:4b:fc:84:04:45:8a:47:df:61:3b:8e:28:9c:
a7:2d:aa:96:63:2b:36:9f:36:38:f4:20:2d:71:ab:d8:86:60:
d8:09:32:08:15:33:32:80:5d:c3:95:6d:ae:35:59:56:06:87:
49:13:ad:ef:92:29:b9:e2:ce:bb:30:1a:88:4c:b8:05:eb:7a:
69:33:24:23:8f:9a:ce:09:ed:b6:7a:d0:70:d1:bb:f6:44:a3:
8a:e6:de:35:bc:79:dd:d0:46:3b:d6:6a:b0:d0:13:e7:88:4c:
a0:ac:92:74:d9:64:0d:41:70:90:88:5a:ed:9f:44:95:ad:6d:
9c:3f:79:40:2b:a1:fb:ea:aa:d5:e1:1f:65:30:f5:db:4d:ec:
24:22:87:0f:f6:09:03:f2:43:bb:2e:3b:ed:86:24:36:bc:a9:
75:67:4a:63:25:bc:84:88:e6:d8:7f:83:77:57:57:92:5f:51:
16:24:52:e6:21:7d:14:c1:ca:2f:85:96:28:a4:41:0a:e6:1a:
a1:c9:5a:e4:d2:03:ce:4b:68:39:43:b2:3e:5d:90:7f:03:99:
1b:8c:bd:83:21:ae:ba:f5:35:47:b8:b2:1f:91:b6:4c:77:7b:
de:8c:ed:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcgwNJSqBEO9JWnrcKWXdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDRmZjc1YjkwMzEyZmQ1MTZiODBkODQ0NTRkZDc4ZjRh
Mzg5MjMwHhcNMjYxMTE1MDAwMjE1WhcNMjYxMTE2MDAwMjE1WjAzMTEwLwYDVQQD
Eyg2OWY4MDgxMmFlNjE1NjBlM2Q2MjAxMmFiOTQzYzgzMzdiNTVkMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr++QZqFahGEPe9XrdOWbf2btlF8b
3UVx8mvx2o56JIkhkG0e50RvRo28xGQ1QBzy8MXOBYtKD4NTX1bbHQaAzs8v9+cJ
EwEWONW9mmaIbbXP3spbWaNhN6Nc0Z8Z9gGGbPJIHfXZm4SUz2kPfhKEk5ryd/EB
0XsHSSNapkhaNvuykv6IHrq4EhCpYcRIzpNS6vVCBgUJ239Cy9mG7OvGa5vXWXK2
UhpzvBGxcYM6mabI5+ROHIaVp7fpKGqI09Q7ueTE6dAfSJbXeYi38vPLvXwvazzq
PeVL2dbE/8nyNKWc9F5h489tU6uNyITEINS+6Nc9F8VjyG0yUWX4dvEgzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn4CBKuYVYOPWIBKrlDyDN7VdErMB8GA1UdIwQY
MBaAFKgE/3W5AxL9UWuA2ERU3Xj0o4kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFUX2Ria0RFdjFSYTREWVJGVGRlUFNqaVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt
NGRmODkxMjE4OGY3LzEvcUFUX2Ria0RFdjFSYTREWVJGVGRlUFNqaVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3
LzEvcUFUX2Ria0RFdjFSYTREWVJGVGRlUFNqaVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwItNpfS
MEN7TS4R9O+/JnR0/2alYhRL/IQERYpH32E7jiicpy2qlmMrNp82OPQgLXGr2IZg
2AkyCBUzMoBdw5VtrjVZVgaHSROt75IpueLOuzAaiEy4Bet6aTMkI4+azgnttnrQ
cNG79kSjiubeNbx53dBGO9ZqsNAT54hMoKySdNlkDUFwkIha7Z9Ela1tnD95QCuh
++qq1eEfZTD1203sJCKHD/YJA/JDuy477YYkNrypdWdKYyW8hIjm2H+Dd1dXkl9R
FiRS5iF9FMHKL4WWKKRBCuYaocla5NIDzktoOUOyPl2QfwOZG4y9gyGuuvU1R7iy
H5G2THd73oztfw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:48:20 2026 by rpki-client