Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: 4LQOu/rIvw7Qfg7yXvh2/tfJ/WUojuSGrrHpOu/902w=
Subject key identifier: DC:C4:28:62:91:41:97:07:08:B3:6D:3F:99:72:6C:FB:3C:C8:74:BB
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019D38D311CBBA7CB99317E418A5915FEAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0C9E
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: HmXcZ8AKzweNcHnZby676Oo1TEhcjOtixBO9uT2ryhA=)
2: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:11:cb:ba:7c:b9:93:17:e4:18:a5:91:5f:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=dcc428629141970708b36d3f99726cfb3cc874bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:dc:ed:c5:f0:17:0e:a6:59:d4:8a:f0:f8:
45:bc:5b:0b:5c:86:34:49:8f:55:86:ad:de:d7:75:
90:69:b3:c8:4b:66:57:00:0d:60:93:4c:63:ae:ea:
47:3c:f6:52:8b:7d:93:05:7b:a1:27:bb:ef:5b:b9:
88:99:4d:89:f5:ef:c6:60:81:cc:ba:01:2d:84:c4:
f8:17:3b:25:8c:43:85:da:fc:7f:f3:5d:d3:0e:09:
88:a2:43:69:4b:9f:95:53:05:af:68:c0:35:97:58:
ae:b8:b8:12:c3:63:65:b6:b6:da:0e:9c:93:5f:71:
cb:29:a4:a0:04:68:65:99:ef:d6:20:14:21:fe:62:
98:77:4b:5b:b6:3b:80:92:7f:80:eb:fa:47:53:1c:
f6:2b:86:bb:aa:ea:14:ee:89:f2:c9:5f:64:36:2a:
7a:94:23:fb:f7:95:0e:43:e8:8d:36:08:84:42:1b:
68:c7:79:f3:94:12:98:49:b8:32:bb:8b:f7:96:1a:
95:15:f5:77:87:b6:a4:ab:a0:c9:e0:ee:6e:a8:ff:
4a:fd:46:8f:35:f5:31:61:e7:76:a0:e3:9b:db:18:
35:8a:08:59:da:7e:bb:af:37:11:cf:e3:c3:4a:30:
e6:cb:02:58:4e:26:df:31:9c:53:3e:03:0a:52:f7:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:28:62:91:41:97:07:08:B3:6D:3F:99:72:6C:FB:3C:C8:74:BB
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d9:4a:ea:2e:9e:48:7a:26:3a:a9:ad:a7:c9:a5:72:f8:bb:
97:d7:67:63:ba:bc:04:a0:28:d8:03:fc:cb:e5:1c:cf:e5:78:
7f:17:9a:18:07:c7:21:4c:34:b9:b9:eb:d6:e9:fd:75:35:f1:
85:6a:40:05:0a:82:8b:70:ed:76:87:88:82:c2:d0:6d:a7:b8:
fa:d8:de:fa:a4:5e:d0:bc:21:05:ba:bb:12:75:4b:be:d3:d2:
96:a4:f2:33:9f:cb:15:f5:e3:fc:bd:62:8b:fa:d5:e5:3c:e6:
6a:b5:2d:7b:79:cf:fd:0f:0b:6f:fe:e2:67:2e:53:66:44:0e:
63:ac:9f:24:d2:af:3e:01:a6:88:a7:23:4b:06:42:20:4f:9c:
85:17:c6:8e:54:b3:0b:0e:53:85:ce:63:a4:fa:54:af:31:22:
17:c4:92:3a:3e:78:3d:3b:48:d1:68:d1:95:59:60:bc:87:a9:
da:45:ba:89:49:c9:d1:31:c0:52:5c:fd:ec:b9:3c:f5:99:9d:
b5:85:84:27:a7:e8:50:00:6d:f5:9e:f1:0c:dd:bd:ec:98:b3:
73:56:60:00:d9:17:9c:c7:69:5c:35:c9:c5:7c:b6:d3:52:e4:
f8:80:01:5d:b7:09:ca:bb:90:4b:54:ed:bc:16:c7:68:c9:a2:
41:db:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:56 2026 by rpki-client