
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier: E4HPc4BAn1UvwYUqe+d92cBdERv3/7T3ts/uPujBMcU=
Subject key identifier: C2:40:56:34:47:CB:73:A8:E8:0F:A4:74:28:9C:48:BC:BE:D4:87:5F
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019FAB6376A7EEDF75D5FECC5A0467FA1465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number: 19FE
Signing time: Wed 29 Jul 2026 01:00:50 +0000
Manifest this update: Wed 29 Jul 2026 01:00:50 +0000
Manifest next update: Thu 30 Jul 2026 01:00:50 +0000
Files and hashes: 1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=)
2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: kxzl/GXaZWH3AtsCkj+RwqT/TklwoFrjJQwfGFtR/0k=)
3: H1KxXkqZfOMz2T0T89-BrBE5VBs.roa (hash: 5203tsZCts099zZy2toRHEDTl1Xyfa7Z86N2Mg2UGgg=)
4: NRT4C3Pjv2I_O_e87vpe9r63k4s.roa (hash: D1obKpZVoMMUypxjp2MJaz2giSb4WOep13hUdjC2bqs=)
5: T3bly-tZ9XID-SOloXwH3hTsc_E.roa (hash: aeV/m0RLRp31h+Weu05/IHsjHV2WSBXJFEz0Mww+iyc=)
6: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (hash: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=)
7: X0L_WIFrHSaQewTifeIRhTrccl4.roa (hash: E11xutFhSfE8vZg68noD+8THw3mcAN+GK8jpf/T/4u8=)
8: hVqZbaQ8MeHQybRpaRLjUblswSg.roa (hash: pSX41/t7TR6ni7qxXv88Dsw/Pbc7wwCKoNbXNgfg/qs=)
9: ryrPySlNxpsVkX_ZxM78hhxv-f8.roa (hash: c2RA8jai5Wlkob7UVTv7PAf8GP4M7TVRsl2kLYkwKGQ=)
10: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:76:a7:ee:df:75:d5:fe:cc:5a:04:67:fa:14:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Jul 29 01:00:50 2026 GMT
Not After : Jul 30 01:00:50 2026 GMT
Subject: CN=c240563447cb73a8e80fa474289c48bcbed4875f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:5f:8a:38:31:b7:84:9c:9c:5b:4d:65:70:
35:59:98:5e:94:12:fd:55:80:1a:50:18:df:83:51:
f5:9f:d2:de:6a:ad:6a:8f:cd:e5:64:1c:77:05:9d:
b5:04:01:12:6d:6d:53:94:a7:00:54:9e:1f:81:52:
bc:bd:64:f6:3c:6d:4b:28:70:36:68:02:b1:f4:6d:
4f:8b:2d:64:5f:54:de:a1:e0:91:d0:d6:5c:03:3f:
89:f1:f1:e6:15:66:44:da:60:d9:f6:a2:b4:0c:9e:
4a:5d:f8:4c:3f:2f:85:89:84:43:c7:51:b8:68:83:
23:29:cc:8b:2d:97:04:8e:f1:5a:9f:18:21:34:49:
62:2d:f7:33:4c:03:16:37:4d:f4:19:eb:32:31:9a:
0f:30:17:ad:59:69:c7:04:34:39:87:95:e7:9b:c3:
c7:1b:5b:42:a6:e5:16:ca:29:bf:a1:54:a8:ae:35:
f3:43:98:5e:65:c0:c2:99:16:4a:d8:db:a8:6f:60:
73:a0:39:e4:42:5d:6b:7d:4c:2e:25:a4:cb:64:00:
51:3e:c3:d9:ad:fe:b7:3d:7f:2a:5a:1f:fe:58:66:
5a:50:70:69:21:f8:04:54:ff:69:cd:c4:d6:3c:1a:
67:a0:d5:0e:d2:3b:ed:05:31:bd:c6:4e:ae:c4:e5:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:56:34:47:CB:73:A8:E8:0F:A4:74:28:9C:48:BC:BE:D4:87:5F
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:90:43:d6:3c:45:cd:22:71:dc:e2:bf:f8:68:23:7d:72:
22:71:5a:30:af:95:f6:3d:9e:e5:48:d2:7d:69:cb:81:72:6c:
3b:4d:e6:e4:7b:29:2c:f4:df:dd:ed:06:9a:29:58:0a:fb:42:
97:6e:7f:4c:ae:68:79:1e:18:e5:cf:f0:a6:4d:e8:27:83:c0:
6b:cd:bb:3c:e1:68:a7:0f:98:83:82:4c:8a:f1:7d:e5:57:15:
66:ca:c8:ad:f3:30:24:a5:76:e1:6a:0f:b8:6f:10:44:bf:df:
3d:0a:e1:26:0d:2b:85:06:6c:f1:ac:17:13:f0:6a:25:05:4e:
9c:cc:3c:34:c2:2d:cc:f1:41:28:b5:82:b1:66:db:9d:43:45:
d4:67:20:a3:90:2e:f3:45:29:5c:56:da:8b:d6:12:b1:54:1b:
ab:58:80:cd:25:4a:bb:90:ea:f7:76:b2:6d:a6:b5:5d:12:a3:
89:23:ad:96:aa:1e:0e:ba:21:ff:4a:c3:e1:aa:7f:45:ab:e0:
5f:ef:de:99:6a:c5:11:92:fe:85:da:06:9e:01:53:ce:70:d6:
78:3a:80:1b:41:be:68:c5:17:71:c0:6e:81:df:41:4a:b9:89:
be:f1:aa:44:20:86:99:77:f9:c7:72:67:aa:1f:32:a1:42:50:
71:57:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:47 2026 by rpki-client