
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
File: 6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json)
Hash identifier: CsFR/ZUybws2elO6FqKpXO0pKWgFGh1zDuuAYVaSIfU=
Subject key identifier: 42:16:65:80:A5:88:19:4E:9D:DE:BC:C5:FD:7B:25:18:D2:C2:BF:2C
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019F905A8C4FDB9CBC8B0A1EAA707417185B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
Manifest number: 19D3
Signing time: Thu 23 Jul 2026 19:01:20 +0000
Manifest this update: Thu 23 Jul 2026 19:01:20 +0000
Manifest next update: Fri 24 Jul 2026 19:01:20 +0000
Files and hashes: 1: 0Ye5HHze8dzUbpvLjixp3-56g_U.roa (hash: wK7TbUMWJW3ECyWcK0fL4e8lwI/UC44Xvd2fp7FGDgE=)
2: 1uxoPrGsC0LrxUeYaeqskNeASnQ.roa (hash: Iwcqi0yhx4WtJQPc5R6JQIJI+aBnQzr21lIt4VGrzyA=)
3: 2C3deW4KUFYWsCudtLk1fi-2CXo.roa (hash: BWFS5Z0+c+KKg6rdLDGOkOT2Tw/Z8zwQ4KtVqJ44yO8=)
4: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: fOCpp4XpwMzRJgPcSxEOtcWe9Imo2gXbJqtluJ1DIgQ=)
5: IUmwlrvtv1GK99FSlVy4jAmb8QQ.roa (hash: Tat5zh+atoVuNHAQLSt1TkQzUZPUfwfNC6BJJ0u/Fyg=)
6: KprTAgOh_qv2SRFhrmcnoFGhmmM.roa (hash: YKRSZ/hE0WibgdWInFuhQPbRWNeGseHq8osjIasXg9k=)
7: Z4JBrC-fsX0bgk07Q9-z54LqkcA.roa (hash: c7eegSfugYgMf3revksMCFAPVWCx264HDReDmZR8jv8=)
8: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (hash: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U=)
9: _GZsTaYtf6eqAppmdh6ZDxD7Hkk.roa (hash: DIdXsDDv58Wrc/uyJjH4ZMd/VEHNxyJG9yJsNZC5inA=)
10: _sV74R82Ncl5_WE0qbxzZCnWFdc.roa (hash: pDC9XhOe3mk2ggLx8oijdGkGJXnNFDMWmbvP1g1nu1c=)
11: jC2tVL1HmyuEA9c55RhhiHpVZuE.roa (hash: JJ5O8yZRoDt+4yNF3ampjIlKJaP78yClPdQTTmI3pmE=)
12: mcaRa_cHBncNU0Ne5Iuy9g8UpcQ.roa (hash: 9I828IojKDfLZVSrPpaZWTFp5U9rXc1r4/KjNmJd8kg=)
13: wbgHSq1P1hT1c4Z9yPLSRLsBMLY.roa (hash: M1CVH/hZaoiDk+r9nDNnbsek6x6GBh3SGNDKUroXUZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:8c:4f:db:9c:bc:8b:0a:1e:aa:70:74:17:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jul 23 19:01:20 2026 GMT
Not After : Jul 24 19:01:20 2026 GMT
Subject: CN=42166580a588194e9ddebcc5fd7b2518d2c2bf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:84:b4:5e:44:16:71:f6:8a:fc:cf:b7:9c:
c6:26:bf:25:73:c2:c7:d7:d2:e5:70:1c:fc:6d:52:
36:a7:52:8a:14:5e:b7:85:6e:90:2d:d9:1c:c5:d3:
dc:a5:0b:1b:1b:9b:bb:28:e6:b2:ad:fa:20:b9:d1:
10:44:3f:fe:c6:67:6d:8d:41:69:55:12:5f:c4:08:
88:bd:36:6f:be:5f:0e:2e:d0:8b:e5:2b:4e:54:81:
3a:48:ab:cf:ce:91:e7:76:13:3a:a2:ca:44:36:1b:
74:ac:b0:2f:e4:8f:9c:52:ac:7a:81:c3:b4:44:a6:
70:e4:ff:12:a4:a7:c4:b1:46:f5:2d:13:85:00:52:
28:3a:ae:f3:5c:6e:ea:a0:28:a6:85:96:0d:2b:cb:
ec:07:5f:9e:c2:75:03:33:b6:81:6b:57:e2:dc:df:
2d:fb:89:be:fa:12:af:3c:f4:a0:b3:3c:a4:9f:0e:
35:2d:76:bf:46:51:2e:09:6b:e5:60:51:60:75:0a:
65:0d:d9:8d:4c:a0:b0:88:98:2c:f9:0b:e9:1d:d3:
77:89:7d:1e:49:96:2a:70:0f:61:c4:9b:24:af:6c:
7b:43:47:c1:4b:f9:74:e5:b0:0e:2d:8a:6d:ff:66:
84:f0:7f:2a:52:04:9a:90:9e:f2:ee:2e:53:f5:1a:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:65:80:A5:88:19:4E:9D:DE:BC:C5:FD:7B:25:18:D2:C2:BF:2C
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2e:7b:78:1f:a3:66:0e:f9:bd:a2:2b:48:1c:f5:18:42:61:
51:08:04:cf:a2:5f:bf:65:66:a9:04:68:59:e0:94:a1:41:bf:
36:a3:03:d3:03:3f:95:03:58:42:29:b2:3a:45:ee:c1:4f:55:
5a:5d:5d:ee:c9:10:59:2b:bf:4f:94:6d:dd:0a:80:97:f8:34:
a3:fc:e8:ab:66:cc:06:05:ec:77:38:a1:54:63:10:2f:de:bf:
de:3d:8d:78:08:d6:13:99:da:05:cc:b5:3f:80:a2:3c:b9:0a:
17:e5:78:79:8e:7a:29:5b:7d:af:89:e7:a7:45:3d:dc:3d:0c:
d6:3d:b2:86:86:77:f3:60:fe:a5:a5:15:77:7c:6b:a9:3a:e9:
f9:29:4f:1a:33:22:08:ea:62:e7:c3:45:98:2c:27:f6:ec:3f:
5f:47:31:93:9b:88:79:56:69:b9:30:85:49:1d:79:9a:6d:3c:
05:1b:b8:1c:c3:9d:ee:31:54:a9:de:e9:5b:b3:6d:77:a3:56:
0d:39:d1:a2:31:59:f2:2a:6f:9f:a1:01:9c:ca:dc:41:b9:2a:
5f:04:fd:a4:f8:72:4f:c7:b0:7f:ed:d3:33:31:8f:71:ea:8f:
81:6a:e6:d7:62:57:ba:22:06:d1:15:4f:0c:4a:db:08:d9:86:
84:00:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:37 2026 by rpki-client