Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: tRtEmnQMsV0DaLwpkNaPLNO28rIRMDParJ5O4zo0Uk8=
Subject key identifier: 90:09:02:79:D5:D8:3B:57:1D:E9:57:CF:11:F0:85:0D:EB:D9:8A:1F
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019EC3375157AB2E0078BE3EAABC4F3E6A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0D6B
Signing time: Sat 13 Jun 2026 23:00:42 +0000
Manifest this update: Sat 13 Jun 2026 23:00:42 +0000
Manifest next update: Sun 14 Jun 2026 23:00:42 +0000
Files and hashes: 1: NsglSN_UBejAze19UkT_CNNq5dM.asa (hash: RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: S3qqNye3/CI3/dy8YSJ1UnCojIQ2dUs86t7cXbQiYDQ=)
3: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:51:57:ab:2e:00:78:be:3e:aa:bc:4f:3e:6a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Jun 13 23:00:42 2026 GMT
Not After : Jun 14 23:00:42 2026 GMT
Subject: CN=90090279d5d83b571de957cf11f0850debd98a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:0c:43:bc:70:de:05:02:c9:95:54:33:96:
37:00:b1:74:c2:e2:a0:57:2f:33:8d:d0:34:78:49:
b1:fe:a2:f5:48:a5:50:82:45:8d:5d:99:0b:88:a4:
2a:25:ab:76:ae:e1:45:59:42:86:13:19:d2:96:d0:
6e:49:06:58:b8:ce:12:a0:3d:a2:b9:4c:40:a6:d6:
99:09:f7:c6:e5:90:64:90:49:58:9f:46:c8:05:8b:
a2:fd:98:a8:de:5a:29:60:f8:4b:c8:a9:65:01:ad:
31:35:b4:79:4a:a5:a0:98:15:9c:75:76:68:19:cf:
be:89:7a:cf:29:82:9a:21:df:46:f7:5c:a5:c2:5c:
7f:86:30:d9:b9:81:c5:78:39:e4:75:ce:63:bd:3c:
e8:89:5a:ce:75:de:dd:64:f9:94:8b:17:0b:0f:65:
01:b8:96:be:ec:21:74:03:1e:cb:00:1a:67:04:9c:
26:6e:62:ca:d1:16:12:d2:67:f6:6f:96:12:25:f5:
ef:a4:12:5f:65:c0:e2:dd:97:2d:28:ed:90:03:92:
6d:6f:c8:67:7d:9e:74:dd:42:21:b1:b7:24:aa:a2:
f1:57:80:ce:28:10:7b:3f:ea:aa:67:96:cf:91:45:
f9:d0:5a:e3:e0:38:47:1f:07:85:5f:5e:29:c8:91:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:02:79:D5:D8:3B:57:1D:E9:57:CF:11:F0:85:0D:EB:D9:8A:1F
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:cf:86:8d:08:16:b0:c7:dc:ab:bd:c3:27:60:5b:41:46:
a5:c2:18:84:88:f7:91:73:d9:c8:86:08:5e:37:92:e6:28:fa:
98:b1:4b:8c:fd:05:f7:0f:a0:8a:16:e4:ac:77:37:31:27:ef:
3f:f1:a4:ae:18:65:4b:23:60:bb:9c:79:62:4a:1a:00:99:33:
da:da:60:af:fe:39:b7:8e:15:6d:89:31:1e:23:a6:7b:bb:24:
b6:2f:3a:f7:ae:b3:18:d3:2d:7b:0a:48:fb:0e:48:9b:eb:1b:
4b:df:d1:bc:60:c8:dc:fa:77:45:a4:75:61:04:bd:a7:31:bd:
44:6a:39:3f:44:73:d7:42:5e:26:d0:cd:0d:f8:cb:2e:43:8e:
43:38:98:40:d4:fd:3f:87:b2:41:af:8e:e6:03:cb:77:97:2e:
de:a6:09:d9:a6:0b:d6:87:c1:cb:71:df:a3:63:ea:a7:a9:9d:
b0:e1:e0:b6:0c:57:c3:ac:dc:d6:cf:b9:5d:25:2e:e1:6b:48:
d2:95:30:57:df:e8:aa:d1:13:c5:2e:58:10:8f:75:84:08:0a:
e3:d9:ee:33:07:8a:5a:97:66:7e:3f:67:54:2f:d9:92:41:5f:
79:d7:88:82:01:8e:21:29:34:d3:7a:cc:56:e0:e6:67:7a:4e:
35:d1:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:34 2026 by rpki-client