
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json)
Hash identifier: M+wNu/urTs66k00Abv67A2lhmNVfYkPx2kytBIvUOyU=
Subject key identifier: AA:51:59:97:E0:04:46:C9:96:01:6F:C6:3B:64:49:40:BF:47:45:7C
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019CAA8FCD4E8616A19145E4A15B780987E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=)
2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=)
3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=)
4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: C4IAMjcbh8OLmn0knyAEeDdQ46LUlWf2Rvrc0sdnMUc=)
5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=)
6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=)
7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=)
8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=)
9: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=)
10: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=)
11: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=)
12: rpXQzYMi2LaNrk065am7U1-g2SA.roa (hash: /ykY3CvF0oXXdlRqhSK0Ui83N9HzCRWvebrOuzZmzOI=)
13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cd:4e:86:16:a1:91:45:e4:a1:5b:78:09:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=aa515997e00446c996016fc63b644940bf47457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:8c:64:79:f4:e3:58:c2:87:11:ff:62:e9:
53:72:0c:ce:9a:7e:b9:8a:05:bb:98:e2:2a:33:83:
08:bd:a7:1d:a9:3d:ca:78:33:84:a6:4f:88:f4:fa:
4d:ff:c9:31:df:e6:fc:da:98:32:92:d7:a0:32:fb:
9b:7d:01:52:77:2e:d0:ea:a5:89:9e:56:75:35:a8:
8f:55:d2:a7:c0:ff:32:1f:7f:17:39:6d:54:fd:b3:
f7:8f:bc:ad:94:d0:f5:be:1b:51:ef:7f:17:37:de:
fe:8f:d9:5f:0b:64:33:58:21:26:1c:e9:b2:74:5b:
b4:fc:e7:7d:d4:c3:71:b6:1c:25:cc:11:48:85:1f:
e6:33:53:94:c4:fa:b6:be:10:e6:af:91:19:c3:19:
f8:17:9d:eb:f5:bd:e5:d5:50:87:a0:a9:d4:d9:9a:
49:59:b8:0a:f9:62:3f:7e:98:c2:57:f9:eb:59:2d:
a9:58:b3:59:ca:2a:a6:b3:18:e8:27:c2:76:f7:e9:
fc:d5:6a:87:03:44:0c:c4:0a:8a:62:2c:6d:b7:0b:
a2:1f:55:fc:b1:a1:7c:8e:b1:75:34:8b:fd:fe:4a:
14:0e:e0:39:ea:87:a9:f2:4c:3e:91:24:57:76:0f:
c5:4a:89:3c:69:d8:ac:dc:97:77:ec:bc:fb:8d:25:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:51:59:97:E0:04:46:C9:96:01:6F:C6:3B:64:49:40:BF:47:45:7C
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fb:58:05:18:c0:2d:c5:22:45:95:d1:05:96:98:a9:9b:24:
cd:e0:87:a2:7f:e8:df:22:0e:e8:53:7a:98:2d:01:9e:ee:ce:
ee:3c:d2:b6:7a:07:a9:2f:10:a9:10:f3:fc:4c:ca:dd:e8:ea:
b4:85:c1:a3:4a:b5:e9:a5:56:3d:3e:eb:75:21:49:31:f0:cb:
28:46:1e:12:12:4f:02:2d:27:7e:a7:ac:49:b9:fe:a8:11:c0:
b8:8c:cf:61:0e:00:32:a6:2d:f6:91:67:d0:f1:36:51:2d:1a:
e2:42:c1:f0:f7:08:e9:81:87:8a:1f:4d:f0:99:32:4b:ae:84:
50:43:1d:3e:f7:8a:df:b3:96:c1:8d:6c:18:a1:ae:73:dc:e9:
cf:c7:1e:4d:9b:cb:97:bd:6b:ba:ca:c0:60:05:10:08:39:d2:
c4:72:5f:49:d1:27:3e:63:b9:0b:94:f6:bd:9d:c9:23:65:a5:
49:45:6b:8d:e7:e3:85:b8:4f:35:34:a0:9b:53:c7:ef:a8:a8:
71:f7:2e:5e:75:dd:20:a5:c4:68:04:51:1e:62:0a:70:d3:ab:
b7:60:d8:d3:f5:40:c8:72:f0:c2:7f:c9:94:5f:b3:68:c0:15:
a4:5b:8d:a4:8c:ad:d6:d0:16:81:94:16:e3:02:cf:78:ea:2c:
1c:c3:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:48 2026 by rpki-client