Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: GoFmSRAYCgzTnD/uO/IWk5fBXE2g34BfvaVt0btw43k=
Subject key identifier: 11:53:5A:A9:82:10:41:2D:76:BA:C0:05:B4:4B:CD:63:97:CD:68:96
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019D9D3EDC1AEA95639576128C0D392747A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0CD2
Signing time: Fri 17 Apr 2026 21:00:35 +0000
Manifest this update: Fri 17 Apr 2026 21:00:35 +0000
Manifest next update: Sat 18 Apr 2026 21:00:35 +0000
Files and hashes: 1: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: +11LoYV2UEh6mQBh/Pryott8k3Ifan/L0ntP+6Qdqs4=)
2: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:dc:1a:ea:95:63:95:76:12:8c:0d:39:27:47:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Apr 17 21:00:35 2026 GMT
Not After : Apr 18 21:00:35 2026 GMT
Subject: CN=11535aa98210412d76bac005b44bcd6397cd6896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:c0:1c:ac:8a:a8:01:11:82:88:8c:6d:1b:
e4:41:bf:e2:87:29:de:5a:b0:83:ab:79:d5:12:e5:
cd:7f:97:42:94:22:24:f5:bc:cc:1b:54:be:88:0b:
5c:fd:1c:e6:23:de:9c:89:2c:16:7a:06:a1:2a:af:
af:0c:a8:00:1c:61:9f:c2:31:1c:b9:48:e4:d1:b1:
15:0c:b0:5d:42:a7:34:7b:7a:4c:9d:00:95:6f:26:
63:4e:85:d5:c3:03:43:c0:ba:a9:a3:cc:36:c4:81:
8b:69:a1:11:7e:ad:0d:5d:b8:c9:b4:83:3f:ed:83:
5f:cd:57:8f:e6:19:35:f3:24:6d:1e:d5:9f:d8:34:
d5:a6:33:31:eb:9a:54:09:7e:51:48:e0:3f:b8:7f:
94:4a:1a:33:96:33:f7:dc:39:5b:38:6a:6f:a8:d9:
41:be:a1:30:49:c6:8e:75:8d:89:76:bd:df:88:1d:
a2:d4:09:20:59:91:d2:20:d0:5f:93:67:64:b5:9c:
64:31:4c:c6:6a:2e:82:a9:d9:d6:27:d4:1c:40:ad:
be:35:d1:18:a8:fc:24:f4:dc:de:bc:f7:6b:20:1e:
b7:b5:90:37:68:e5:f6:7e:2c:96:6c:c3:25:ff:e0:
87:2e:ac:79:a6:f9:a9:de:2a:d7:7c:c4:2e:1a:21:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:5A:A9:82:10:41:2D:76:BA:C0:05:B4:4B:CD:63:97:CD:68:96
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:4a:1a:2d:72:b8:3a:22:d1:2e:39:3f:83:82:95:72:cb:
04:bf:98:91:db:2e:91:77:84:85:fa:70:3e:e5:22:a6:75:40:
00:4f:b0:52:9e:62:98:3d:e8:21:73:3c:a6:29:3c:73:85:ec:
07:9c:74:6b:b4:01:3b:ea:84:ce:3b:57:60:34:6b:71:67:42:
d3:d7:16:54:3d:38:a6:0f:e4:fa:89:e6:e8:52:88:8d:31:6e:
b4:58:ac:86:c8:a3:e4:8d:98:80:89:85:e2:7f:71:c2:f7:d3:
5d:0a:ba:72:6d:35:17:d0:dc:9a:60:8c:f4:56:d6:fd:ff:9b:
2f:fa:08:4e:c5:65:c6:cb:7d:fa:f0:cf:3d:09:03:39:b4:f1:
e6:3b:87:81:d1:03:ec:76:f0:c7:d8:44:ff:74:e4:6c:17:ad:
63:88:b8:67:63:19:c7:c8:8f:d7:31:8d:51:97:85:e2:00:5f:
7b:52:3e:92:67:57:04:7d:21:66:45:8a:1b:28:6a:28:ee:ed:
2e:78:58:07:a0:c5:7b:4e:40:58:ba:af:e2:7c:e4:21:81:c1:
57:05:63:c0:9b:d8:93:2a:59:cf:fc:5c:05:37:55:16:24:2c:
3c:57:6c:60:42:ea:62:40:e3:31:6d:f4:f5:96:63:29:a5:71:
a1:a1:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:16 2026 by rpki-client