Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: qE4h90VuBtJagAP3Naj9xgKp2bMEWcPefoaPB+byyBE=
Subject key identifier: 94:87:DC:E7:6F:24:25:62:EC:5D:EE:16:A5:54:12:05:17:AC:28:8C
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019F93C8A1EDFAC1EAA370098FD57A53F349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0DD7
Signing time: Fri 24 Jul 2026 11:00:27 +0000
Manifest this update: Fri 24 Jul 2026 11:00:27 +0000
Manifest next update: Sat 25 Jul 2026 11:00:27 +0000
Files and hashes: 1: NsglSN_UBejAze19UkT_CNNq5dM.asa (hash: RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: Qpwrk+J/KUBhxo0QjjOco+aA3c7LkDa26JnAOrkw5xo=)
3: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:a1:ed:fa:c1:ea:a3:70:09:8f:d5:7a:53:f3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Jul 24 11:00:27 2026 GMT
Not After : Jul 25 11:00:27 2026 GMT
Subject: CN=9487dce76f242562ec5dee16a554120517ac288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:bf:e4:ff:96:58:c6:d5:30:6f:33:75:02:
16:f0:47:ed:cc:0d:03:45:2d:cd:ae:57:65:f9:2f:
1b:08:f5:0a:7e:33:8b:16:59:8b:6a:11:e3:22:f8:
43:7e:07:3e:c9:41:e5:db:df:a8:ae:07:8d:a5:92:
66:93:45:a4:c0:8e:e5:b2:fb:ff:09:67:d5:63:01:
ee:f4:fe:62:84:c6:9f:c6:b5:e8:b1:b1:74:3b:57:
6f:5b:65:36:a6:97:41:e8:87:c6:8d:7b:0a:27:a4:
53:0f:e3:b6:bf:9c:86:17:68:8a:b7:15:05:4b:e1:
dd:8c:25:f4:09:15:53:7b:4b:86:a5:53:80:87:f8:
e8:0c:02:4f:12:6c:ce:d2:a9:d9:54:9d:fb:51:18:
7f:cd:46:b0:7e:ca:81:47:15:d3:ef:c0:da:73:f6:
36:4d:e6:76:ad:79:99:6d:5a:eb:6d:09:7b:93:a8:
98:82:44:f5:39:bc:8e:48:64:8d:3c:07:f3:ee:db:
36:38:d6:9f:7f:4e:76:9a:65:fd:77:23:36:80:6f:
e7:1d:c4:9f:1a:4d:b7:12:1c:91:3b:bc:bd:12:1d:
8a:cf:30:86:28:98:a0:3b:57:0c:b7:c3:91:bd:f6:
e8:f1:7a:ca:20:11:53:0e:94:c6:67:1c:e6:0f:30:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:DC:E7:6F:24:25:62:EC:5D:EE:16:A5:54:12:05:17:AC:28:8C
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:51:d5:a3:1a:86:61:3a:ee:3f:f5:18:38:2b:f2:5a:47:
fd:b3:48:6c:e5:fc:96:57:0a:3f:5a:db:3a:3c:52:74:40:33:
80:62:74:0a:9c:c2:5c:54:20:01:e4:9a:71:51:b6:ec:47:2b:
1b:ee:b1:aa:d8:e1:a3:1a:9e:5a:16:af:14:18:ca:c3:ad:00:
7c:8c:16:3f:98:26:f3:c3:35:f1:53:fd:92:72:e9:7d:ec:ab:
ec:a3:ab:3d:37:c4:74:66:c6:e5:dc:45:17:af:54:c6:a7:ad:
4b:3d:5f:66:c7:0a:b9:e7:55:db:3e:4d:74:05:8f:b4:1a:9b:
81:e1:d3:51:70:10:3b:ae:0d:c1:92:aa:32:1d:8d:e6:e4:fc:
75:f7:48:d7:7c:06:08:65:b6:a2:c3:12:97:85:6b:c0:a3:db:
c7:b3:e2:ce:76:b2:f7:fc:f6:9a:19:50:7e:48:d9:90:34:27:
68:1e:5d:f1:31:ae:18:53:51:cc:c0:91:22:48:c5:ee:0f:74:
d2:94:b3:1e:83:65:b5:0e:61:2c:5e:5f:8a:2a:4b:5d:11:e1:
a4:9a:75:99:f8:14:4b:86:38:78:df:97:db:33:de:2a:56:66:
c1:02:ac:35:c9:78:c8:ef:89:c7:f1:c5:2b:ba:9a:e7:85:00:
17:7d:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:09:43 2026 by rpki-client