
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json)
Hash identifier: /xbDX4kd4789R3pAIGfhYnGi2JF0Whb/tAhrAPtIKwI=
Subject key identifier: 02:30:22:33:49:E7:0A:72:E4:B2:4E:A7:F9:6D:27:E2:37:DF:04:FA
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019FA975733CC4DC9165987D5719466B5629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
Manifest number: 19E0
Signing time: Tue 28 Jul 2026 16:01:14 +0000
Manifest this update: Tue 28 Jul 2026 16:01:14 +0000
Manifest next update: Wed 29 Jul 2026 16:01:14 +0000
Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=)
2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=)
3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=)
4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: Yh+1no+5wgZ+ObhptLDiM8L470y6k5SoGUZBYrYYlHE=)
5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=)
6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=)
7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=)
8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=)
9: _GZsTaYtf6eqAppmdh6ZDxD7Hkk.roa (hash: DIdXsDDv58Wrc/uyJjH4ZMd/VEHNxyJG9yJsNZC5inA=)
10: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=)
11: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=)
12: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=)
13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:73:3c:c4:dc:91:65:98:7d:57:19:46:6b:56:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jul 28 16:01:14 2026 GMT
Not After : Jul 29 16:01:14 2026 GMT
Subject: CN=0230223349e70a72e4b24ea7f96d27e237df04fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:7f:96:30:25:ab:50:1d:e3:05:0c:a8:e9:
fd:d6:50:4b:da:30:c1:84:ae:26:65:c9:44:bf:3a:
2c:ee:2d:7f:90:06:e1:06:88:76:03:a0:c5:1c:e7:
de:11:07:8c:00:5a:db:68:0d:57:b1:ae:71:56:12:
66:63:c6:72:70:ab:bc:2d:e5:b1:c5:65:58:d7:6e:
5d:66:c6:31:da:c7:2e:05:9b:52:f2:c4:7f:c8:7c:
89:9c:9b:b1:15:47:5b:79:48:2b:72:13:54:f4:db:
5f:02:b9:65:33:d4:53:83:6f:00:b7:30:c0:86:ad:
6c:1b:6e:bf:44:50:7e:46:53:64:c7:31:04:75:06:
34:04:c9:0c:bb:de:94:c8:ff:0b:33:e1:70:d5:4d:
65:92:04:1f:36:4a:66:4f:5b:33:1e:e9:86:51:1c:
a9:64:3b:b0:c1:19:5b:71:2d:24:0f:8c:fc:5a:0d:
cb:0b:e7:82:f8:93:fb:f2:cb:75:c1:3c:5c:69:ed:
e0:dd:7f:8f:48:14:df:43:76:ff:81:26:16:53:5c:
98:c2:af:7b:9a:f7:13:e4:6f:b6:95:bf:72:96:9b:
c7:8d:a5:97:fb:27:32:11:12:5c:7a:ae:48:46:61:
68:1d:64:3a:0c:44:a6:f6:d6:f9:2c:9f:fe:42:ae:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:22:33:49:E7:0A:72:E4:B2:4E:A7:F9:6D:27:E2:37:DF:04:FA
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:f8:b9:4c:25:52:29:73:8d:0c:eb:51:22:0c:96:ae:f4:
e1:58:69:8d:3b:4e:24:31:a5:f1:18:f2:7b:8b:3c:76:59:75:
31:e3:0d:90:3a:4b:fe:14:6f:40:5c:5c:fb:13:b5:91:59:91:
24:6a:84:a2:66:70:5d:dc:4a:1c:56:c3:90:ac:fa:26:d5:aa:
d8:21:50:0f:cf:8d:6d:13:c0:ec:b4:c1:7d:9f:8a:d1:3b:b5:
2c:03:d3:97:76:2a:3c:f5:d2:b6:74:f9:6b:7b:e5:62:f8:45:
a5:df:5f:82:1c:54:2b:4b:96:c9:d2:05:ff:1f:51:f3:f8:d2:
33:eb:3c:40:83:27:5b:96:0f:dd:1e:29:3c:8c:ea:7f:09:a2:
ca:39:1b:84:c6:fe:13:2c:9f:02:b7:4e:6b:02:94:f4:c5:91:
4c:4f:da:02:44:d8:3e:72:af:22:0c:81:ce:9d:60:65:62:ec:
3f:08:4c:41:c8:de:2c:3b:91:02:91:b0:c1:12:2d:f2:fc:b5:
a7:bf:fa:50:03:b1:02:b5:d5:70:3e:c5:cd:97:bc:46:41:bf:
23:5a:31:39:54:5b:35:41:26:cf:c5:c1:bd:d0:c6:ed:98:3d:
50:73:61:e1:a6:a5:a3:86:bd:ed:97:4e:f9:c6:06:17:54:b4:
42:e8:86:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdXM8xNyRZZh9VxlGa1YpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5
ZDJmYjQwHhcNMjYwNzI4MTYwMTE0WhcNMjYwNzI5MTYwMTE0WjAzMTEwLwYDVQQD
EygwMjMwMjIzMzQ5ZTcwYTcyZTRiMjRlYTdmOTZkMjdlMjM3ZGYwNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH9/ljAlq1Ad4wUMqOn91lBL2jDB
hK4mZclEvzos7i1/kAbhBoh2A6DFHOfeEQeMAFrbaA1Xsa5xVhJmY8ZycKu8LeWx
xWVY125dZsYx2scuBZtS8sR/yHyJnJuxFUdbeUgrchNU9NtfArllM9RTg28AtzDA
hq1sG26/RFB+RlNkxzEEdQY0BMkMu96UyP8LM+Fw1U1lkgQfNkpmT1szHumGURyp
ZDuwwRlbcS0kD4z8Wg3LC+eC+JP78st1wTxcae3g3X+PSBTfQ3b/gSYWU1yYwq97
mvcT5G+2lb9ylpvHjaWX+ycyERJceq5IRmFoHWQ6DESm9tb5LJ/+Qq43KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIwIjNJ5wpy5LJOp/ltJ+I33wT6MB8GA1UdIwQY
MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt
MTkwM2VkYWZhOGJmLzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm
LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsL4uUwl
UilzjQzrUSIMlq704VhpjTtOJDGl8Rjye4s8dll1MeMNkDpL/hRvQFxc+xO1kVmR
JGqEomZwXdxKHFbDkKz6JtWq2CFQD8+NbRPA7LTBfZ+K0Tu1LAPTl3YqPPXStnT5
a3vlYvhFpd9fghxUK0uWydIF/x9R8/jSM+s8QIMnW5YP3R4pPIzqfwmiyjkbhMb+
EyyfArdOawKU9MWRTE/aAkTYPnKvIgyBzp1gZWLsPwhMQcjeLDuRApGwwRIt8vy1
p7/6UAOxArXVcD7FzZe8RkG/I1oxOVRbNUEmz8XBvdDG7Zg9UHNh4aalo4a97ZdO
+cYGF1S0QuiGNQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:22 2026 by rpki-client