Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: CAvC4f7DwTMHJkBMV3gjbegn85DnRCK0sAvCccpOepQ=
Subject key identifier: 2A:AB:75:4D:B3:8B:2D:E1:7D:28:35:9E:7F:BF:DF:A1:F0:0D:71:2F
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019F12652A7FDE5C291D28AA85DE08B34419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0D94
Signing time: Mon 29 Jun 2026 08:00:47 +0000
Manifest this update: Mon 29 Jun 2026 08:00:47 +0000
Manifest next update: Tue 30 Jun 2026 08:00:47 +0000
Files and hashes: 1: NsglSN_UBejAze19UkT_CNNq5dM.asa (hash: RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: 5HZfoKw1/VAlu9RC5rWghid4ucjBlk+3AjcZhyG1TZ8=)
3: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:2a:7f:de:5c:29:1d:28:aa:85:de:08:b3:44:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Jun 29 08:00:47 2026 GMT
Not After : Jun 30 08:00:47 2026 GMT
Subject: CN=2aab754db38b2de17d28359e7fbfdfa1f00d712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:43:c2:46:59:f7:9a:80:44:3c:62:0d:51:
75:51:89:45:bc:50:7b:5a:e6:3f:e9:de:c0:ee:26:
13:4e:70:7a:aa:3c:74:a7:64:ee:a1:f6:84:2b:a3:
96:78:94:2a:4b:a6:07:ee:9e:16:0c:5f:67:da:4e:
a7:c4:0c:50:fb:7f:9d:d6:92:83:2d:32:cd:15:17:
9c:dc:c4:d0:21:1d:d1:b9:e5:71:a3:0c:3d:05:cc:
6a:cf:71:d8:0c:f9:0a:de:12:0e:1a:41:db:9c:df:
17:0a:d5:a4:fc:91:ab:ae:48:f0:0e:34:81:b4:c3:
dd:3e:f2:23:de:93:dc:e2:d3:2d:8f:41:49:c8:29:
ae:3c:81:42:45:9c:88:91:48:04:98:d1:ac:72:59:
82:0e:fb:76:80:a5:d9:f9:f1:7a:6d:f1:cf:58:17:
af:99:9f:28:8d:6c:3b:8b:dd:1c:24:a0:a9:da:dc:
f4:0f:ef:78:0b:98:b6:fb:0e:a4:fd:63:a2:4d:44:
3e:18:6c:9c:f2:3d:76:fc:23:af:62:a0:4d:28:d6:
bf:db:43:5b:40:11:c4:8d:32:6f:20:73:ed:a4:5c:
48:b7:71:17:73:2d:af:25:44:7b:26:10:b3:d6:12:
b0:13:2e:20:0d:f7:ef:b2:8b:1e:00:6e:1d:17:ea:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AB:75:4D:B3:8B:2D:E1:7D:28:35:9E:7F:BF:DF:A1:F0:0D:71:2F
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:64:42:09:d8:3b:16:41:ed:ce:cc:43:46:2c:79:87:8c:fa:
62:eb:3a:94:61:9d:7b:ee:62:ba:fe:81:bc:33:a2:a2:52:fc:
55:c9:0a:90:f7:0e:0e:5d:95:2d:5f:f7:bc:ce:e6:25:2d:a7:
93:85:0e:0e:7e:1d:19:cb:19:c3:40:92:dc:e3:2b:2b:80:a0:
11:f9:ea:d3:0b:6b:ed:98:68:e6:b8:1b:ae:6f:f9:72:ed:45:
d2:27:35:c0:57:42:31:b8:6a:7b:98:d0:09:78:6e:8a:02:61:
46:21:ba:be:99:f3:70:1c:34:0f:6e:9b:5d:d7:b9:f3:be:a3:
9a:95:f2:98:a6:f0:f3:9a:d5:65:82:4f:3f:3f:f8:87:34:c6:
3b:76:85:2e:b2:db:83:bd:b8:6e:93:20:76:76:af:1d:b6:b8:
dd:46:03:e1:c6:b1:0b:a9:87:39:5a:26:35:7e:b1:b4:64:77:
86:05:21:e1:8a:cf:f7:44:12:ca:ec:2a:54:b3:51:39:af:46:
5a:32:39:48:f6:72:79:f9:03:d4:67:7e:cb:ba:c9:77:26:68:
8e:fa:9e:c4:dc:32:34:da:e7:d5:8d:ba:45:a8:e9:2a:0d:35:
cd:74:62:1a:9e:45:a1:55:4e:f4:cc:58:61:0d:14:1c:5b:af:
30:4c:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:44:04 2026 by rpki-client