Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: +ssLNal8eXNoLvM88tynLXTSeWdjXZkeqz9+jrH5TDQ=
Subject key identifier: 6E:BA:14:A5:34:AC:F8:92:6D:AF:62:2D:89:7C:E4:F9:73:F4:ED:4B
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019E1D225FBEA7EE080908FBB90A33AEF746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0D15
Signing time: Tue 12 May 2026 17:00:52 +0000
Manifest this update: Tue 12 May 2026 17:00:52 +0000
Manifest next update: Wed 13 May 2026 17:00:52 +0000
Files and hashes: 1: NsglSN_UBejAze19UkT_CNNq5dM.asa (hash: RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: rENJSgQ8PUcL2ZHOjfklD1x6vI3ups8V3Tntw69wNv4=)
3: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:5f:be:a7:ee:08:09:08:fb:b9:0a:33:ae:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: May 12 17:00:52 2026 GMT
Not After : May 13 17:00:52 2026 GMT
Subject: CN=6eba14a534acf8926daf622d897ce4f973f4ed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:d0:5a:92:4b:98:05:ef:18:04:54:f6:09:
03:43:eb:41:a7:af:bb:f7:9a:7a:78:ee:2b:39:90:
bf:bd:dd:a9:2b:f8:5a:7a:cc:7b:06:47:5b:cd:bb:
5a:04:cd:2a:11:fa:ce:2c:ce:56:fa:fd:4c:4f:95:
91:70:c9:19:9e:19:d3:28:12:e3:73:40:25:99:fa:
6c:4a:88:7b:52:7f:bc:a6:2d:ea:9b:f9:11:20:d9:
23:33:9c:db:f2:dd:57:cf:73:5c:57:eb:81:ea:18:
0b:60:5c:38:d4:de:c3:2a:88:ae:1f:07:66:17:ed:
e7:9e:b3:0f:dc:ad:78:c7:0b:df:c1:87:70:15:c9:
aa:63:13:dc:78:bb:fb:b2:56:2d:7d:f0:35:2b:d2:
54:bd:96:7f:12:00:15:13:90:dd:d5:f3:78:2e:0c:
c1:df:08:53:df:58:45:41:f9:e4:ea:4e:78:b9:6e:
30:2f:7a:47:1d:ad:17:6f:3a:9d:e7:d3:f0:45:6e:
8d:3c:a5:1e:98:d1:e5:cd:a8:bd:f9:d5:94:28:e0:
27:ff:20:0a:c7:40:a7:22:73:55:93:d4:d7:d6:92:
11:20:11:4c:fb:df:64:6d:14:a4:5a:4a:03:2e:5a:
84:35:99:d6:45:9b:73:73:e3:8f:24:fb:59:70:46:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:14:A5:34:AC:F8:92:6D:AF:62:2D:89:7C:E4:F9:73:F4:ED:4B
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cc:d4:00:3c:bc:9c:c9:b4:a3:ec:1a:ce:55:99:43:1a:18:
a2:b4:22:21:6e:bd:6d:fa:d2:c5:71:c9:78:3c:1f:8c:e7:a4:
a5:20:f4:09:34:83:3c:12:9c:16:bb:f2:80:5a:d5:cd:2e:e6:
dd:13:c1:46:85:18:b6:f7:d2:35:df:03:fa:2e:eb:1d:8c:0d:
41:fc:94:bd:47:ba:58:57:6d:23:75:e8:5e:5b:61:fe:c6:0c:
23:f5:3f:33:74:bc:37:af:50:20:46:88:14:e4:74:ae:b4:0b:
81:d2:aa:63:fe:f5:24:84:25:60:81:5c:1d:2b:03:51:61:a9:
c4:a6:ea:83:69:bc:1e:67:d9:b8:40:0e:13:42:01:f2:ad:ba:
58:ac:57:a3:8d:9e:53:dc:9e:16:6d:12:a7:52:00:88:c7:da:
a5:bf:05:fb:b6:20:cd:e9:01:03:d7:18:fd:aa:38:0f:7d:43:
7f:cf:e3:5b:8c:ea:b3:34:33:35:e0:b2:c6:a9:32:a3:c6:8e:
19:f6:f9:de:01:d5:4b:a8:fc:58:eb:f4:c6:63:b2:ca:5e:d6:
95:48:8f:84:0d:66:ef:80:cc:0d:c9:26:5b:4e:ee:c6:a3:a4:
e4:60:99:e6:46:f7:44:bf:d0:6b:57:35:98:96:b3:af:29:9e:
74:2b:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:19 2026 by rpki-client