Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: FWAjK/P6PhTAT/MPfAYtF/PVEFMdBEJtUvgtuArbr0s=
Subject key identifier: BD:A7:7C:6B:F4:95:1A:AF:D8:07:95:4B:24:15:03:E6:F7:0A:CD:DA
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 01A03FA9E0CAAC3590535774B08CF188D8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0E30
Signing time: Wed 26 Aug 2026 20:01:32 +0000
Manifest this update: Wed 26 Aug 2026 20:01:32 +0000
Manifest next update: Thu 27 Aug 2026 20:01:32 +0000
Files and hashes: 1: NsglSN_UBejAze19UkT_CNNq5dM.asa (hash: RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: fDvjtkfPWgY41tNHoqDk4LySt547SAvy6Kw8ZsCf1WE=)
3: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:e0:ca:ac:35:90:53:57:74:b0:8c:f1:88:d8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Aug 26 20:01:32 2026 GMT
Not After : Aug 27 20:01:32 2026 GMT
Subject: CN=bda77c6bf4951aafd807954b241503e6f70acdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:af:d2:5f:93:26:a4:de:16:11:c4:dc:b3:
91:7a:de:07:f5:51:9a:33:48:b2:90:b5:56:97:a9:
61:5e:82:1a:9b:f0:9d:dd:4b:f3:5e:10:62:cb:a8:
2b:2a:88:ce:99:51:0f:87:22:57:26:ae:54:86:a6:
db:5b:c3:e9:0b:d6:a5:1a:34:14:b8:93:73:c8:46:
b1:0b:23:1a:eb:1c:8f:98:70:0f:2f:10:18:bd:1e:
01:60:65:96:97:c7:37:34:97:5f:f6:e5:5b:5e:48:
d4:2f:bf:8d:23:e7:ac:1c:4e:09:5b:f9:c9:8f:5c:
d1:f7:34:91:56:f7:4f:98:a7:57:8a:d1:9a:96:45:
ca:76:47:42:ca:9b:f6:88:d6:f1:1f:23:cd:60:4b:
d2:d6:e6:0d:94:43:72:9a:62:48:07:5f:3c:46:22:
11:88:e6:0c:5d:0f:c7:f6:ff:97:12:e5:35:23:06:
16:40:a8:9c:6c:bc:d7:b9:30:f0:69:97:90:ec:23:
c9:9a:ac:f2:af:ed:b5:3b:9e:9a:2c:32:64:27:96:
8b:56:ee:d8:ba:9c:44:42:11:53:37:50:43:08:5d:
d5:a7:a4:6c:31:d1:67:51:e7:43:1a:dd:cf:46:44:
d1:67:a4:d7:f9:59:c6:52:86:be:85:0c:5f:44:08:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:7C:6B:F4:95:1A:AF:D8:07:95:4B:24:15:03:E6:F7:0A:CD:DA
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:df:8a:6d:74:97:83:73:90:59:60:e4:7f:34:74:fa:d1:70:
ef:b0:73:28:09:9b:f8:72:59:a8:b6:9d:7a:5c:24:8b:bd:cd:
7d:5c:44:03:4e:92:3e:62:81:36:00:ce:33:30:60:89:06:86:
ab:a6:11:99:b9:eb:b5:da:39:b2:16:01:fd:4f:e3:7f:6c:55:
5a:2a:04:4b:50:b8:ad:1c:a9:5e:05:4f:82:15:c8:90:01:d3:
f3:22:e4:66:53:b1:84:73:c8:a4:be:27:b2:d5:68:65:d6:70:
93:5c:8e:2f:91:a0:ec:71:c5:9e:ef:8b:c3:9a:96:d8:2c:71:
67:15:67:68:8a:d3:64:51:27:d5:a7:f5:d6:fd:a7:ba:22:a3:
39:3c:3c:5b:f0:dc:a5:21:e1:e6:d8:da:6a:22:2a:9d:d2:1e:
dd:2d:e3:dd:63:ff:d8:c5:ef:c9:d3:20:0a:2b:51:96:e9:33:
15:e2:5b:2c:b2:e6:23:e0:8f:c6:fe:6b:c4:aa:6f:67:d4:a7:
33:a3:03:e1:cd:01:36:0a:ea:f4:33:d3:a3:bf:28:7a:4d:4a:
9c:95:09:41:93:7e:4d:30:1d:5e:22:5f:99:01:7b:97:88:41:
5d:8d:d7:ec:9e:f1:7d:65:08:29:bf:71:a2:06:9d:bb:26:c6:
de:f5:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:12:38 2026 by rpki-client