$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json) Hash identifier: L67deN7tgEiBIfRLtT3X2wWDhfaaoSebwBD6/BvOmEc= Subject key identifier: 81:EF:32:8E:9C:74:B9:77:7F:A7:05:9D:5A:0A:35:01:F5:AF:D7:14 Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Certificate serial: 019D31BECC9C9C8BCF17698B30B9D9C68670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft Manifest number: 1897 Signing time: Sat 28 Mar 2026 00:01:20 +0000 Manifest this update: Sat 28 Mar 2026 00:01:20 +0000 Manifest next update: Sun 29 Mar 2026 00:01:20 +0000 Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=) 2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=) 3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=) 4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: gr8JiX0bKqYslIITlJIvnSGbj4H4nfdxtUgNOOoK7dM=) 5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=) 6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=) 7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=) 8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=) 9: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=) 10: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=) 11: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=) 12: rpXQzYMi2LaNrk065am7U1-g2SA.roa (hash: /ykY3CvF0oXXdlRqhSK0Ui83N9HzCRWvebrOuzZmzOI=) 13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:be:cc:9c:9c:8b:cf:17:69:8b:30:b9:d9:c6:86:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Validity Not Before: Mar 28 00:01:20 2026 GMT Not After : Mar 29 00:01:20 2026 GMT Subject: CN=81ef328e9c74b9777fa7059d5a0a3501f5afd714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:31:ee:f4:ea:9c:d4:da:a9:1b:32:6f:da: ef:85:40:67:8e:84:56:79:a1:aa:be:41:33:5b:17: c2:16:c1:a2:56:e2:47:8e:9c:ad:6c:84:5b:74:b8: 72:fc:29:47:04:e4:b2:4e:ff:76:87:64:44:ac:f8: 00:7f:15:02:86:40:21:af:5f:07:3e:b2:a9:5e:7d: a3:a0:75:26:ef:c2:89:c4:b4:18:16:4c:7e:5c:68: c3:3b:e1:0a:3a:9a:bb:99:8a:f4:2c:3b:66:47:40: a0:7c:f3:71:b3:f5:a6:08:f1:d8:ab:07:31:63:c5: b9:2a:ab:77:8c:ea:b8:30:46:1c:94:96:c9:98:a5: a3:7f:9d:dc:0a:61:ed:4c:72:fa:c2:b3:d5:5d:1e: 34:88:86:e2:2d:53:c7:8e:5f:d5:9e:1c:df:84:3d: 95:6e:67:fe:ed:40:a7:7a:9e:b4:0d:0e:53:55:43: f4:54:1c:82:a5:4b:eb:81:91:7a:1d:a6:a5:a2:6f: 49:25:38:f5:d3:04:04:54:c9:6f:0d:46:05:a4:e5: 7b:e3:59:05:38:6f:ac:51:49:71:a0:53:77:ec:f1: ab:ce:7c:09:bc:14:ce:3b:0c:aa:0c:ec:d7:d3:56: c7:c8:5a:da:67:5a:a6:09:2d:88:9c:a3:ba:f6:44: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EF:32:8E:9C:74:B9:77:7F:A7:05:9D:5A:0A:35:01:F5:AF:D7:14 X509v3 Authority Key Identifier: keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:19:77:b3:08:3a:37:91:0a:57:7e:bf:79:f7:47:4d:70:64: 05:2f:f7:85:f8:36:fe:df:74:62:59:d3:7f:ca:90:af:29:9d: 37:83:65:bc:46:e9:9f:90:56:4f:25:67:61:33:ee:25:61:27: 09:02:ac:3c:02:68:a9:08:90:c3:78:a7:78:e3:e5:0e:97:12: 22:b4:52:37:10:16:f7:ab:59:96:06:cd:da:d3:e4:72:ef:08: 18:ef:9d:6b:9d:86:ba:57:36:b3:cf:8f:31:cb:3f:22:d4:19: c1:18:78:ef:4d:fc:9d:d7:ec:1a:00:21:c2:be:c6:46:5b:c4: 24:ee:d1:12:18:47:3a:f3:20:9c:af:9c:c2:a0:78:75:5a:44: a8:72:28:fe:7e:68:3d:d8:3b:a5:17:92:67:b0:fa:f9:dd:3a: 59:09:32:1c:7b:0e:dd:fb:89:7a:e1:38:34:8b:fa:dd:48:50: b8:10:23:f9:68:cb:b1:9c:30:c2:f1:ec:0b:a8:dc:6a:28:bd: f3:08:cd:df:38:0e:64:3a:6b:e6:a2:51:5a:39:30:4c:a1:e1: 15:c6:62:a9:be:19:5b:e0:72:c0:87:b7:a0:c9:08:ae:68:a9: 77:cd:a2:d9:1d:9c:63:2c:b5:53:1b:fc:62:b1:58:d8:fd:8a: 84:61:09:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0xvsycnIvPF2mLMLnZxoZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5 ZDJmYjQwHhcNMjYwMzI4MDAwMTIwWhcNMjYwMzI5MDAwMTIwWjAzMTEwLwYDVQQD Eyg4MWVmMzI4ZTljNzRiOTc3N2ZhNzA1OWQ1YTBhMzUwMWY1YWZkNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroYx7vTqnNTaqRsyb9rvhUBnjoRW eaGqvkEzWxfCFsGiVuJHjpytbIRbdLhy/ClHBOSyTv92h2RErPgAfxUChkAhr18H PrKpXn2joHUm78KJxLQYFkx+XGjDO+EKOpq7mYr0LDtmR0CgfPNxs/WmCPHYqwcx Y8W5Kqt3jOq4MEYclJbJmKWjf53cCmHtTHL6wrPVXR40iIbiLVPHjl/VnhzfhD2V bmf+7UCnep60DQ5TVUP0VByCpUvrgZF6Haalom9JJTj10wQEVMlvDUYFpOV741kF OG+sUUlxoFN37PGrznwJvBTOOwyqDOzX01bHyFraZ1qmCS2InKO69kTIywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHvMo6cdLl3f6cFnVoKNQH1r9cUMB8GA1UdIwQY MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt MTkwM2VkYWZhOGJmLzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxl3swg6 N5EKV36/efdHTXBkBS/3hfg2/t90YlnTf8qQrymdN4NlvEbpn5BWTyVnYTPuJWEn CQKsPAJoqQiQw3ineOPlDpcSIrRSNxAW96tZlgbN2tPkcu8IGO+da52Gulc2s8+P Mcs/ItQZwRh47038ndfsGgAhwr7GRlvEJO7REhhHOvMgnK+cwqB4dVpEqHIo/n5o Pdg7pReSZ7D6+d06WQkyHHsO3fuJeuE4NIv63UhQuBAj+WjLsZwwwvHsC6jcaii9 8wjN3zgOZDpr5qJRWjkwTKHhFcZiqb4ZW+BywIe3oMkIrmipd82i2R2cYyy1Uxv8 YrFY2P2KhGEJvQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:19 2026 by rpki-client