$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json) Hash identifier: 7WceuuQo6/1ShkjPlcgZTUgdUYAhFV6kPe+CPUJugyc= Subject key identifier: F0:79:C2:DE:8A:10:A6:82:90:2C:93:93:53:2E:7C:8A:92:5D:A1:90 Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Certificate serial: 019D9A06B4ED94906F523395A00C503F6DC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft Manifest number: 18CD Signing time: Fri 17 Apr 2026 06:00:23 +0000 Manifest this update: Fri 17 Apr 2026 06:00:23 +0000 Manifest next update: Sat 18 Apr 2026 06:00:23 +0000 Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=) 2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=) 3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=) 4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: duwrsqxN0M+YOIKGb+w3BMNPdO2IXH77uZd5ewlNXpk=) 5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=) 6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=) 7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=) 8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=) 9: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=) 10: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=) 11: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=) 12: rpXQzYMi2LaNrk065am7U1-g2SA.roa (hash: /ykY3CvF0oXXdlRqhSK0Ui83N9HzCRWvebrOuzZmzOI=) 13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:b4:ed:94:90:6f:52:33:95:a0:0c:50:3f:6d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Validity Not Before: Apr 17 06:00:23 2026 GMT Not After : Apr 18 06:00:23 2026 GMT Subject: CN=f079c2de8a10a682902c9393532e7c8a925da190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:e1:bc:7e:ed:01:68:6a:93:62:c6:0e:5f: c9:dd:cf:bd:9d:ee:a7:b1:72:01:1e:96:ff:44:8d: 64:88:a9:1d:cb:91:72:06:48:c5:13:cc:61:c7:e0: d7:c4:69:a3:63:e0:13:39:76:83:81:a8:b5:a3:6f: f5:61:a7:ef:a5:de:b1:ff:8c:d5:38:bf:03:06:f1: 41:78:8a:e6:23:ae:17:ca:31:09:69:ad:80:27:a6: b7:b0:37:2d:d0:3e:31:45:bb:eb:d9:bd:77:ca:0a: 5a:0d:93:26:d8:43:07:40:50:59:cb:98:80:e4:a2: 8d:4d:6c:a6:30:a2:cd:a4:5b:4d:ac:49:9f:bc:91: 08:c4:c0:3c:f4:a8:46:af:74:69:cd:54:97:ff:ef: 39:e2:77:8e:11:4f:ff:a6:c7:52:1b:8a:ce:90:89: fe:be:a0:7e:8a:b6:8d:4c:2a:0a:65:02:f7:ff:07: 6e:ca:f0:df:68:b5:75:d1:eb:0c:3b:50:f2:94:0a: 28:32:9e:ec:14:9c:cc:c6:d8:3e:d7:66:ef:c6:72: b6:40:1a:c6:37:1d:1c:4b:63:91:77:16:ee:68:97: 99:40:a7:45:67:f3:30:9e:73:40:c4:d4:7a:8c:9c: 35:95:a1:11:4c:22:9e:f9:a2:3f:f2:01:63:a8:09: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:C2:DE:8A:10:A6:82:90:2C:93:93:53:2E:7C:8A:92:5D:A1:90 X509v3 Authority Key Identifier: keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5e:2d:98:11:f7:a2:67:c4:91:59:9b:b8:74:0c:f7:f6:f6: 23:a3:aa:a8:c9:a6:0f:a8:0d:8b:54:28:fc:07:b5:6d:a8:3d: 40:f7:0e:9d:24:c4:ca:50:61:bc:07:72:1e:a8:7c:b2:2d:b3: c4:7c:58:5f:a9:57:9c:cd:af:2c:84:6b:92:a3:49:c9:e0:16: f5:5b:3a:8d:7d:7c:b9:d0:15:80:bd:74:8e:b4:26:39:bb:0a: 60:96:dd:64:d9:78:cb:95:b4:4a:7c:9f:8d:c3:d3:bd:56:ad: ff:02:6b:01:c0:01:bf:b1:22:64:97:2d:90:da:05:d7:97:22: 98:48:7d:30:60:ed:8a:e6:02:88:ba:36:72:4c:02:72:23:eb: 9c:8d:2a:5b:ed:ea:6f:83:e1:1f:da:66:67:0f:df:e2:29:cc: bd:a7:4d:c8:a8:fd:32:dc:6c:38:a9:f2:7e:fe:38:82:12:f8: ae:ac:b0:53:3b:79:6b:ab:04:45:dd:10:76:60:88:43:e8:4b: 9f:be:5b:bf:bd:0d:61:eb:29:af:d7:50:d5:d7:4d:74:a4:a4: 08:7b:9b:2b:14:b5:cb:f1:5c:03:83:28:6c:6a:0e:8b:d4:51: b4:92:f9:8f:f9:cf:84:16:17:d7:34:6f:08:67:f9:95:93:06: 5d:14:10:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBrTtlJBvUjOVoAxQP23BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5 ZDJmYjQwHhcNMjYwNDE3MDYwMDIzWhcNMjYwNDE4MDYwMDIzWjAzMTEwLwYDVQQD EyhmMDc5YzJkZThhMTBhNjgyOTAyYzkzOTM1MzJlN2M4YTkyNWRhMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2fhvH7tAWhqk2LGDl/J3c+9ne6n sXIBHpb/RI1kiKkdy5FyBkjFE8xhx+DXxGmjY+ATOXaDgai1o2/1Yafvpd6x/4zV OL8DBvFBeIrmI64XyjEJaa2AJ6a3sDct0D4xRbvr2b13ygpaDZMm2EMHQFBZy5iA 5KKNTWymMKLNpFtNrEmfvJEIxMA89KhGr3RpzVSX/+854neOEU//psdSG4rOkIn+ vqB+iraNTCoKZQL3/wduyvDfaLV10esMO1DylAooMp7sFJzMxtg+12bvxnK2QBrG Nx0cS2ORdxbuaJeZQKdFZ/MwnnNAxNR6jJw1laERTCKe+aI/8gFjqAm9HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB5wt6KEKaCkCyTk1MufIqSXaGQMB8GA1UdIwQY MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt MTkwM2VkYWZhOGJmLzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPV4tmBH3 omfEkVmbuHQM9/b2I6OqqMmmD6gNi1Qo/Ae1bag9QPcOnSTEylBhvAdyHqh8si2z xHxYX6lXnM2vLIRrkqNJyeAW9Vs6jX18udAVgL10jrQmObsKYJbdZNl4y5W0Snyf jcPTvVat/wJrAcABv7EiZJctkNoF15cimEh9MGDtiuYCiLo2ckwCciPrnI0qW+3q b4PhH9pmZw/f4inMvadNyKj9MtxsOKnyfv44ghL4rqywUzt5a6sERd0QdmCIQ+hL n75bv70NYespr9dQ1ddNdKSkCHubKxS1y/FcA4MobGoOi9RRtJL5j/nPhBYX1zRv CGf5lZMGXRQQBQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:36:49 2026 by rpki-client