Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: Esd2jMrGpWcFRBFQQqpX5Xa98SndJ53AeKc+4o1ud7c=
Subject key identifier: 99:5F:D9:3A:B7:2D:FA:8A:8A:2C:2B:21:6C:26:92:FD:6B:F0:81:BD
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019F8FEBDE6219941B4A2E81026E657300E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0DD5
Signing time: Thu 23 Jul 2026 17:00:27 +0000
Manifest this update: Thu 23 Jul 2026 17:00:27 +0000
Manifest next update: Fri 24 Jul 2026 17:00:27 +0000
Files and hashes: 1: NsglSN_UBejAze19UkT_CNNq5dM.asa (hash: RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: 5Oj5ZDUW+WCD2BKWD2tcby+WKX78P9DBAfqeU06yqxo=)
3: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:de:62:19:94:1b:4a:2e:81:02:6e:65:73:00:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Jul 23 17:00:27 2026 GMT
Not After : Jul 24 17:00:27 2026 GMT
Subject: CN=995fd93ab72dfa8a8a2c2b216c2692fd6bf081bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:0c:8f:91:01:ac:de:22:07:b9:39:1a:3e:
0d:2d:26:cc:b1:49:9f:5e:3b:b5:5c:b8:c4:e0:13:
ef:8e:95:00:2b:76:45:4d:97:a7:bd:c2:be:b3:3b:
30:bc:05:07:3c:45:90:57:05:31:eb:df:40:46:fd:
39:6c:f2:c3:4d:fc:7a:14:e4:9e:86:0d:05:9e:7d:
40:6a:46:58:e6:af:b5:7a:70:0e:b6:34:93:2c:2e:
c3:00:9d:9f:71:db:fa:00:04:97:10:5b:48:bd:0e:
81:7e:a9:47:44:ab:98:b4:02:25:fb:ed:e6:07:68:
3e:0d:13:28:a2:21:05:5e:13:9a:25:3f:69:af:04:
d9:8b:eb:47:95:1a:c3:a8:9b:76:cc:0d:68:25:c4:
f7:9a:f4:58:e4:1d:9b:bf:6b:3b:03:5f:cb:95:af:
5e:7d:da:41:dc:07:7f:fa:21:f2:14:e5:92:db:fa:
a3:9c:f8:3f:23:bc:de:b9:d0:90:df:1e:6b:3b:e6:
15:2f:67:f5:5c:dc:f1:6b:28:15:83:14:1f:d6:35:
3b:66:f9:12:e4:51:64:f7:af:d4:e2:f6:4b:20:eb:
83:dc:18:98:e6:b7:2c:b0:3a:20:ff:1a:0a:29:a2:
68:20:3f:a1:53:5b:64:53:6c:12:49:21:2d:93:73:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:D9:3A:B7:2D:FA:8A:8A:2C:2B:21:6C:26:92:FD:6B:F0:81:BD
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0d:66:6c:20:87:13:5f:8d:22:97:e2:1e:70:ad:bc:69:18:
41:d6:e4:89:2d:78:df:68:f0:86:c0:90:9a:4d:28:79:0b:9c:
44:b8:d9:a6:21:99:11:22:ed:f1:c8:fc:e2:a3:01:40:a0:88:
7f:55:00:7c:a9:74:de:56:53:9c:6e:f0:dc:b7:82:e9:9f:12:
7d:97:75:da:b2:9c:9f:60:1b:27:a9:88:42:4e:b4:c4:2e:b3:
10:8e:8d:2f:19:6f:1f:a7:32:f1:e4:f4:dd:43:78:68:71:a1:
23:2b:32:ad:2d:61:cf:a6:63:bc:3b:01:2b:ab:22:44:26:33:
5c:72:19:89:68:1f:d9:55:e8:7f:f5:f1:0a:fd:3b:d1:2f:98:
f8:2a:fa:6d:cb:bf:52:f6:d5:48:f0:1b:a8:c0:0a:5c:3c:98:
c5:4f:6d:9c:07:fe:2a:06:73:63:bc:a5:56:69:e6:29:48:9c:
9f:9b:cd:c1:4a:b5:22:59:85:cb:63:0b:46:39:0e:92:07:66:
12:02:3a:ae:3c:fb:e9:7f:9b:5d:0d:79:18:8a:65:05:de:09:
8b:e7:0a:c6:7e:ad:01:01:e4:b6:6b:2a:84:48:f3:39:4a:d2:
6e:e8:d0:dc:e3:ab:a6:ab:82:96:f3:c0:0e:83:77:ae:eb:b3:
90:84:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:14:34 2026 by rpki-client