
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json)
Hash identifier: SpivD0Aoa23Us2A4nF657Q4tQVwN9Z/5FfxoeA9UxSE=
Subject key identifier: 9A:EC:2B:47:19:5A:4C:60:57:7B:81:04:44:FE:7B:38:D5:44:29:F8
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019EBDA35D1FF9422E2925DC0B71409B86E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
Manifest number: 1964
Signing time: Fri 12 Jun 2026 21:01:00 +0000
Manifest this update: Fri 12 Jun 2026 21:01:00 +0000
Manifest next update: Sat 13 Jun 2026 21:01:00 +0000
Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=)
2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=)
3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=)
4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: 4O104NoNe1dLUq7W1n3jzs8RctsEQNo1QxV5zzRcsxA=)
5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=)
6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=)
7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=)
8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=)
9: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=)
10: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=)
11: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=)
12: rpXQzYMi2LaNrk065am7U1-g2SA.roa (hash: /ykY3CvF0oXXdlRqhSK0Ui83N9HzCRWvebrOuzZmzOI=)
13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:5d:1f:f9:42:2e:29:25:dc:0b:71:40:9b:86:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jun 12 21:01:00 2026 GMT
Not After : Jun 13 21:01:00 2026 GMT
Subject: CN=9aec2b47195a4c60577b810444fe7b38d54429f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:f7:3e:80:b8:ff:d4:11:26:dc:9c:31:59:
0f:6c:1e:54:fa:08:1a:9f:ae:ca:da:c9:60:46:6a:
07:ec:30:d4:95:7d:09:ac:12:43:98:0c:bd:49:24:
99:5c:e9:3a:69:8a:6d:1d:b1:f3:32:74:71:37:18:
37:cd:b6:6a:14:42:4c:6c:50:68:0c:f3:cc:54:db:
36:10:8f:d6:94:e6:e1:81:a5:ed:68:c0:dd:0e:9d:
76:17:46:67:b3:dd:7d:55:fc:3b:02:93:a9:76:c9:
5b:12:31:af:84:04:7c:ef:4b:e0:36:7a:a6:c9:74:
4b:4a:9b:a5:47:22:bb:b2:fe:b8:a2:7e:a4:12:f3:
d0:d7:2c:a3:51:1c:66:be:0e:99:91:cc:6e:f8:ba:
a5:77:56:1c:39:8e:31:a6:f2:a7:a3:8d:2f:bf:f7:
c2:52:5f:54:b6:d3:96:ff:59:b4:cd:10:97:4c:70:
4a:80:c0:87:fc:19:1d:c5:62:75:ea:4e:00:3e:a8:
6e:88:08:38:f4:64:ea:58:5f:c6:c7:7e:97:79:a7:
a4:b6:c5:fd:78:77:32:c0:17:d6:c0:81:c3:82:28:
e9:5c:7e:a1:8c:e1:f5:b9:27:bd:b0:1a:1e:4b:92:
74:90:ad:dd:3b:00:ae:13:e5:1d:f5:b3:28:ad:e6:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:2B:47:19:5A:4C:60:57:7B:81:04:44:FE:7B:38:D5:44:29:F8
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:63:16:97:d2:a3:b5:fe:19:23:6b:9e:ef:71:42:62:23:24:
be:6a:7d:7d:a9:a5:a4:a9:df:c1:c5:d0:8e:56:d4:90:28:08:
22:77:93:3c:1e:c2:14:ef:51:03:bf:0c:cc:35:42:19:1e:62:
75:df:8d:c7:9e:e3:80:93:ad:ee:57:a6:68:d6:55:ba:f0:c0:
89:ad:7f:26:70:c3:41:f3:7d:65:e7:9e:55:60:ec:4e:ea:4f:
29:6d:b8:f1:8a:fa:fb:c0:55:01:ab:dd:01:17:ad:3e:9e:7c:
fa:a3:59:43:94:ec:b1:c7:7a:c4:05:8b:3d:e1:a9:4d:80:b5:
d7:cd:ba:bd:99:4b:62:98:96:f0:67:92:d6:32:a4:e2:b9:74:
56:6f:e7:c4:d3:f8:93:f7:d6:83:69:60:6f:45:f0:40:48:4f:
fd:bd:27:f8:fe:e5:df:34:c8:ac:4e:6e:90:46:76:d1:df:56:
63:a1:3e:14:4b:42:31:99:ef:67:c6:2d:3c:29:c6:53:83:e9:
b0:1d:9d:4f:44:13:db:ad:05:94:74:3f:f8:92:85:5a:bb:fd:
59:ea:7b:65:84:1c:0e:f3:b5:75:6d:db:76:4e:eb:53:93:fc:
8c:fe:bc:34:57:c5:0e:5a:64:56:1a:14:fd:ea:93:0a:f1:b3:
1d:e3:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:59 2026 by rpki-client