
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier: 9EemINPVIPz7JxyUuaLS+poW778Rp7h7E4kBQ+gwJXA=
Subject key identifier: 86:02:33:20:3F:81:E2:68:98:26:FC:0A:9C:C1:A7:10:58:41:9C:D1
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A0CA476D625C4437BF5864D3E523650718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number: 1A9B
Signing time: Tue 22 Sep 2026 18:01:13 +0000
Manifest this update: Tue 22 Sep 2026 18:01:13 +0000
Manifest next update: Wed 23 Sep 2026 18:01:13 +0000
Files and hashes: 1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=)
2: 5F_6MYJ3Tjsft0v2m--XYj9QajM.roa (hash: ptSYdcQn4vRSLxP94ghZiixDk850vlzn8oi5PdxtV2k=)
3: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: P2bbvim74Mvz7ITtsREHUhXyS7RD8w8e0U33B0EU5Yk=)
4: HiS0kZkH7nLEUXjDWu9S5wYFAWo.roa (hash: dQ7ZhvwA3P8FoUNbgD8WD+l4uyObPXiywcp7g1zCAOA=)
5: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (hash: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=)
6: YPfuRkTgnJf0mW0FpNkvVPNS8RQ.roa (hash: paVGX+E91uT2+A9iHUixNqfj4PoBmhTXUi+0RH12uAA=)
7: _mXNiEyzoLTdlZS540O0pnwDOW8.roa (hash: j1fVCxk0bP7hRI+j87ih0al1KJnzWkx9KyZJo2+Hlm4=)
8: az65XDjo2ppJEAUDxgONjCii4JM.roa (hash: KKW2/9btopQsCSi6Q0T0i2j+xys3nWakyAcxPszdD+E=)
9: es3spOIawUyIvWJULYnuVd5QiYA.roa (hash: bnj1HUQLd6UyOiRwZwWc9Ab/jXrxjH+WENuDNP86ym0=)
10: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:6d:62:5c:44:37:bf:58:64:d3:e5:23:65:07:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Sep 22 18:01:13 2026 GMT
Not After : Sep 23 18:01:13 2026 GMT
Subject: CN=860233203f81e2689826fc0a9cc1a71058419cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:af:6d:bd:36:97:9e:18:57:e8:9c:d7:34:
77:de:59:28:4b:10:e9:2c:43:18:3d:a8:98:22:62:
f5:2a:d6:b9:68:a1:8b:dc:37:f6:70:c2:66:a7:9b:
e6:13:e2:7a:c6:00:f3:12:2c:10:1d:5c:f9:f8:72:
d4:ab:57:f6:79:72:9f:ed:5a:7e:f6:56:69:90:78:
5e:89:e5:6f:e6:85:02:7a:5f:35:3e:b4:42:01:39:
92:f1:e1:dc:6d:29:48:d3:49:2c:79:07:c5:2e:a9:
7a:99:c8:2b:d5:75:10:fb:48:56:53:26:bc:49:38:
99:99:d5:58:55:e6:62:dc:32:06:f2:71:29:7a:ba:
23:b2:fc:c2:32:7f:b7:60:05:d9:98:81:06:ca:c2:
63:10:5f:59:2e:b1:1f:d5:51:7d:89:29:42:47:06:
86:f1:bd:90:2d:cf:7b:f4:6b:07:fc:86:09:c8:97:
87:4d:a4:c3:90:d1:a9:c6:c3:a8:39:91:d3:30:e0:
2b:91:a9:5d:d7:21:b5:d3:79:81:ad:50:4a:28:22:
95:6b:a2:ef:32:76:0d:3a:fc:da:9c:9d:f9:7b:dc:
b4:3f:dc:be:ab:16:80:8b:53:f2:0c:d5:27:46:c3:
97:ff:db:d4:d0:bc:67:28:e3:a6:e8:75:6c:b1:07:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:33:20:3F:81:E2:68:98:26:FC:0A:9C:C1:A7:10:58:41:9C:D1
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:53:c8:0d:25:99:63:75:2f:62:b4:54:7c:ec:7d:92:f7:
81:d1:b6:49:20:f0:5d:01:67:6f:8b:42:38:09:7a:b3:d3:8b:
8e:30:69:c6:a3:99:27:94:06:4a:82:e6:12:7e:e0:71:87:00:
2d:9a:cb:71:cb:b0:48:f5:31:04:1a:92:6c:04:2f:f7:23:63:
95:1e:dc:2c:5b:8e:dd:cf:16:3f:5a:ab:b7:ed:37:b9:a1:e9:
37:57:3f:c7:77:ee:25:fd:d7:ed:16:01:9e:5c:6a:03:90:5b:
74:a7:d2:94:33:6d:a7:5b:ab:c2:7e:f0:78:e0:04:d5:25:53:
8d:e8:4c:69:eb:a4:dc:e0:55:23:17:4c:0e:0a:fd:af:2a:a4:
05:72:ee:f0:57:f7:fc:2d:13:ad:1c:ee:a6:4d:dc:8f:61:f8:
db:d2:34:cc:cb:ff:97:80:29:9a:f1:20:16:f1:58:db:2e:a2:
c2:27:91:15:36:e6:51:53:32:00:c7:81:72:d7:95:1f:07:8e:
ce:7c:11:06:0a:3d:67:b1:b7:ad:9e:e7:f3:9c:84:3d:8f:6f:
7a:25:0a:49:8f:c0:4e:a2:ce:04:d4:d3:0e:d9:27:db:57:a2:
ad:aa:e0:97:25:d4:3a:f9:61:2e:52:9c:1d:77:48:c7:f6:29:
42:9f:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:32 2026 by rpki-client