Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: Z3Id1BTiysrYDM3J1jI6dU/YygQZfuVorgca+Wa3rfs=
Subject key identifier: 9B:55:1C:DD:7D:89:76:1A:D8:97:C2:C5:AD:AF:95:D9:6C:37:3A:73
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019E28B8A8F78AE9BFA2018F7A0A6BCF0C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0D1B
Signing time: Thu 14 May 2026 23:00:50 +0000
Manifest this update: Thu 14 May 2026 23:00:50 +0000
Manifest next update: Fri 15 May 2026 23:00:50 +0000
Files and hashes: 1: NsglSN_UBejAze19UkT_CNNq5dM.asa (hash: RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: C+uZQY5SmJMhlHg2hPM9LJRwxvW7VEuhTxsTZYFb8UY=)
3: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:a8:f7:8a:e9:bf:a2:01:8f:7a:0a:6b:cf:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: May 14 23:00:50 2026 GMT
Not After : May 15 23:00:50 2026 GMT
Subject: CN=9b551cdd7d89761ad897c2c5adaf95d96c373a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:84:c0:70:03:5f:60:13:17:2c:da:d0:4a:
e7:f0:7d:04:1c:0d:b4:29:15:e3:e1:0a:48:f2:d1:
99:db:ad:f6:f0:af:0f:e0:da:d9:c7:9d:42:55:53:
8b:ef:25:97:32:e7:a6:00:e9:39:11:ac:b0:6c:bb:
6c:d9:81:b6:89:19:df:26:68:e1:6d:60:03:f5:37:
3b:bc:95:ff:0d:27:93:c4:20:af:c4:98:db:d6:54:
5f:59:54:f9:43:8f:ef:5d:9f:9a:29:93:bd:dd:ed:
bf:b6:cf:5b:e0:15:f3:28:51:dd:3e:d9:e0:7c:d2:
49:04:d5:3c:cb:ed:41:26:84:fd:14:b0:04:ac:30:
2b:69:b2:72:d1:54:6a:54:72:8d:f5:2c:ff:0c:b0:
51:33:47:5f:5e:eb:32:02:c6:46:0e:a0:3b:a9:5d:
1f:47:30:05:e2:28:88:00:75:92:be:97:d5:8a:e7:
3c:be:60:96:38:b9:77:9c:68:ed:39:15:96:30:d8:
e8:11:b5:08:74:03:83:87:fd:00:ab:10:fb:36:15:
9b:b0:85:fc:01:86:94:c1:9d:26:41:ad:97:3b:5e:
32:07:4f:66:8e:e9:87:41:19:7e:3d:be:77:ce:47:
8f:a3:1d:26:9a:24:c3:8e:8d:66:37:62:8a:5a:d9:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:55:1C:DD:7D:89:76:1A:D8:97:C2:C5:AD:AF:95:D9:6C:37:3A:73
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2c:3a:10:29:b5:0d:97:83:4e:39:a5:80:1a:52:e2:23:dd:
a6:ab:8d:fc:ef:ef:cb:7e:81:d0:55:99:31:fc:22:47:b0:6a:
a6:a6:e8:58:d0:07:d8:63:ec:04:95:9a:19:4b:47:38:67:d5:
43:e6:97:ce:a1:90:92:da:ea:d2:06:46:95:bd:0e:e3:32:d3:
28:6f:1c:80:2f:90:8f:13:04:5b:89:19:a8:7e:87:66:15:51:
4e:e6:f0:65:0e:2b:22:6f:8a:59:55:fe:5a:fe:2f:21:1b:e5:
17:d8:3f:cc:ff:35:b4:12:29:0a:2a:8b:73:b0:79:60:84:66:
e5:a9:a8:35:14:f0:73:fa:5b:a2:8f:15:68:4d:a8:e3:4a:43:
95:9f:dc:80:d6:e7:e6:f7:1d:27:a5:02:6e:8f:66:fb:2b:c3:
05:67:8c:68:59:05:c0:6a:16:8c:d5:a7:4e:e8:e7:aa:58:d3:
4c:a9:58:aa:a7:2f:6e:9b:7c:a4:70:32:98:48:8c:b7:78:f6:
a0:0c:fe:70:29:8d:fc:15:a8:a3:e3:13:03:79:f1:27:b2:29:
30:0c:d7:5f:dc:75:1d:cf:7f:22:8d:d6:b7:ed:a1:f6:b5:01:
b2:d6:93:3a:88:56:15:f4:15:19:ea:28:d8:7d:4a:b4:dc:fe:
80:d6:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:54:59 2026 by rpki-client