Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: vF+OjQSjsUMRUAQefsMZQXyvyvWXTb9QD2TuCAhxTWc=
Subject key identifier: 0C:39:B7:31:B8:52:02:DB:2B:19:12:E9:0B:F8:90:9C:69:27:05:90
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019D2B4F16DD6BCEE864A249491FC8186366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0C97
Signing time: Thu 26 Mar 2026 18:01:36 +0000
Manifest this update: Thu 26 Mar 2026 18:01:36 +0000
Manifest next update: Fri 27 Mar 2026 18:01:36 +0000
Files and hashes: 1: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: 4+Wx9spdvNOcF8wRiLwXqneUKtqnf9gkjngdo/3pG28=)
2: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:16:dd:6b:ce:e8:64:a2:49:49:1f:c8:18:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Mar 26 18:01:36 2026 GMT
Not After : Mar 27 18:01:36 2026 GMT
Subject: CN=0c39b731b85202db2b1912e90bf8909c69270590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:b0:98:8c:32:71:df:f7:84:a5:c0:7c:17:
2d:d3:0c:42:18:df:d0:7b:37:32:09:40:95:68:76:
c5:83:1a:1d:36:89:45:1f:dc:7c:28:8b:a8:80:8a:
e2:ae:c5:c5:3e:db:97:2c:87:43:d8:bf:7c:11:ac:
57:79:ef:c6:56:db:db:ef:40:53:d3:83:0f:f2:d3:
81:f5:e9:1b:44:b7:84:a7:70:d1:64:04:b5:5f:29:
5a:20:20:c9:04:f3:b5:a7:dd:2a:8f:ac:80:bf:55:
e1:0e:a4:08:d6:ea:a0:93:b6:b7:0d:e5:34:4a:98:
07:e0:bd:77:99:80:a6:4c:d0:9a:31:75:bc:d2:d5:
d7:27:6e:a6:a1:ea:23:e7:54:a2:4f:8e:f2:7f:50:
b1:ff:55:04:bd:91:67:a8:42:4a:63:b6:43:65:72:
84:4e:bc:d5:be:78:39:a2:6a:0d:75:61:33:14:d5:
13:36:9a:e8:f1:1f:78:b8:b7:d5:0b:9c:8d:70:e3:
f0:95:c4:46:38:db:f8:07:37:ff:0b:e4:0b:6b:66:
82:26:04:64:7c:08:02:ed:01:81:77:30:10:4d:7e:
e7:1c:99:59:07:b3:0f:34:9c:3f:e6:69:dd:5b:eb:
0a:e5:ca:a7:f2:ba:d5:51:c6:9a:43:79:83:cb:fb:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:B7:31:B8:52:02:DB:2B:19:12:E9:0B:F8:90:9C:69:27:05:90
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b3:49:e7:98:d8:99:a9:27:a2:b3:36:5b:7b:09:2a:6f:d8:
4f:57:eb:45:24:2d:24:bb:3c:31:99:9a:7a:85:a9:80:e4:a2:
bc:2f:8e:0d:f3:ee:9c:3d:29:81:8d:2b:7e:34:b9:98:72:07:
26:73:96:f2:c7:e2:24:a7:1c:fa:77:19:4c:21:f6:93:4e:a0:
fd:07:fd:10:fb:71:85:ca:10:b6:0b:dc:84:77:7a:6c:0e:11:
bc:76:6c:4c:8d:c1:68:9b:4f:fe:57:7c:6c:1a:44:9b:04:a0:
5f:2f:95:6c:4b:8e:23:97:b2:4c:8c:2b:b8:26:c5:e7:ab:86:
0f:f1:18:11:f9:7c:70:f8:06:48:00:f9:7b:00:cc:8d:35:95:
b3:99:4d:96:4d:e0:ed:54:24:04:df:1d:d6:e6:04:0b:55:d4:
b2:92:08:29:71:ee:75:d5:7f:3b:27:af:9d:9b:f5:1f:19:16:
e9:81:ab:15:45:79:57:84:28:69:f3:b1:9d:e4:58:f6:e6:07:
06:21:d4:f6:48:41:b1:23:13:54:b6:50:a7:96:5d:93:25:1d:
cf:26:aa:57:c5:c4:82:a0:f9:68:13:a6:cd:77:ed:f6:81:31:
ff:e7:83:ba:23:be:6d:ec:43:84:7c:26:e1:4a:46:88:55:02:
40:c2:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:14 2026 by rpki-client