
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json)
Hash identifier: 4qqbU6WlaeSZomRZI9hWH1fOmnoUgw+gajzYSwn9gdQ=
Subject key identifier: CA:1B:6C:61:C7:DC:50:10:83:2B:25:C9:00:38:45:B4:32:5F:33:7F
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019F0AE2CC145F6794EC8A0718CF521099E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
Manifest number: 198C
Signing time: Sat 27 Jun 2026 21:01:03 +0000
Manifest this update: Sat 27 Jun 2026 21:01:03 +0000
Manifest next update: Sun 28 Jun 2026 21:01:03 +0000
Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=)
2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=)
3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=)
4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: MTZsHQZi+bX3bZrjWhg2IYfDxtZBdsmNdfJX5tgoQHk=)
5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=)
6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=)
7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=)
8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=)
9: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=)
10: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=)
11: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=)
12: rpXQzYMi2LaNrk065am7U1-g2SA.roa (hash: /ykY3CvF0oXXdlRqhSK0Ui83N9HzCRWvebrOuzZmzOI=)
13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:e2:cc:14:5f:67:94:ec:8a:07:18:cf:52:10:99:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jun 27 21:01:03 2026 GMT
Not After : Jun 28 21:01:03 2026 GMT
Subject: CN=ca1b6c61c7dc5010832b25c9003845b4325f337f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:0d:d7:ca:5b:98:03:f4:ae:62:60:3e:9d:
07:69:d1:96:e9:24:84:6b:27:fd:8d:7a:8e:63:ca:
2b:4b:e8:2e:36:40:da:96:91:29:ae:60:f9:6f:ff:
cc:c2:56:67:c6:3f:73:61:55:f1:72:a6:08:d7:31:
ac:f3:ef:86:a1:53:28:15:aa:f4:50:74:52:97:78:
47:3a:9e:4f:e8:8c:e7:6f:f8:0b:7e:c3:c8:7e:ea:
f2:2b:47:6a:df:de:64:87:8d:23:f7:bb:94:57:fc:
75:3d:ce:06:14:93:88:08:28:67:f2:c1:d0:e4:2e:
ee:4e:01:21:f1:9d:ba:c0:74:85:3b:7d:2d:f8:62:
18:ae:c1:a2:6b:1a:d2:31:50:c5:8b:f5:aa:89:3b:
3f:f3:cc:06:af:15:54:73:5b:72:b5:91:43:04:ac:
49:96:c8:06:22:7a:a4:42:fc:84:b5:84:b1:b2:bb:
41:39:3f:f6:29:fd:3e:74:33:4f:f0:77:8c:9e:38:
bd:cc:b1:12:d9:78:e4:73:42:e5:0a:d8:30:f7:e3:
8a:67:c2:24:5b:02:d3:7b:34:38:4f:b9:fb:c4:a8:
e3:84:55:5f:64:94:01:56:df:69:2a:da:11:b9:9e:
88:d7:38:49:70:b6:5b:ed:c7:4e:bf:1c:fd:9a:18:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:6C:61:C7:DC:50:10:83:2B:25:C9:00:38:45:B4:32:5F:33:7F
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:77:47:94:36:fe:0a:d8:64:b6:88:52:83:a6:68:9a:f9:aa:
1f:4c:94:78:37:89:8c:7c:06:ff:8f:68:bf:0b:03:23:38:c6:
0f:02:ce:c3:3b:76:a5:71:56:a1:73:5f:12:aa:62:41:e5:ba:
a4:a8:54:cf:12:a1:d1:48:84:ad:81:c1:f0:3e:68:65:b1:16:
ca:c7:ef:74:1e:ce:86:56:9c:c4:59:98:11:65:a0:15:5c:46:
3b:01:4a:d0:23:21:c3:69:0e:d7:98:91:80:2c:f7:fe:71:e0:
e3:6d:b7:69:b3:d1:c0:1b:fb:2d:8f:2f:a7:9b:f7:d2:dc:d4:
97:5b:5f:dc:70:d9:9f:88:47:2b:ac:40:6d:d1:59:ee:e0:d6:
02:5b:e4:1a:dc:25:c0:38:83:64:83:03:3f:6a:27:d0:75:9c:
f4:59:01:eb:12:53:98:31:eb:41:d6:43:84:3e:81:54:5e:a5:
3a:a9:56:6c:1e:b8:e3:e2:de:f9:52:b8:01:40:88:20:dd:51:
8a:a8:9a:8d:c8:ca:95:64:16:07:b5:bc:fc:67:d2:73:c4:68:
e0:1b:cd:b2:cd:5c:2c:6c:86:e0:91:fa:b1:7d:7a:ea:63:7f:
08:3d:63:0f:a7:32:15:58:cd:07:f0:1b:3f:93:53:6f:9d:3b:
e7:3c:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:05:05 2026 by rpki-client