
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier: 8dUbm589fG8B0b2sCVP8fbjuU2DXculmurK5FTMxeFs=
Subject key identifier: 1F:3E:DA:AB:AF:3C:16:3E:FC:C2:BB:D0:F6:6F:C5:12:AB:3B:ED:F8
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A0005D0CBC4BDFA3BEBD47939A52BE9C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number: 1A2A
Signing time: Fri 14 Aug 2026 13:01:33 +0000
Manifest this update: Fri 14 Aug 2026 13:01:33 +0000
Manifest next update: Sat 15 Aug 2026 13:01:33 +0000
Files and hashes: 1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=)
2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: zdiwcxcuLpHUWpe4n5gF3Cs6qBHUIm/ejnslb6qqotQ=)
3: H1KxXkqZfOMz2T0T89-BrBE5VBs.roa (hash: 5203tsZCts099zZy2toRHEDTl1Xyfa7Z86N2Mg2UGgg=)
4: NRT4C3Pjv2I_O_e87vpe9r63k4s.roa (hash: D1obKpZVoMMUypxjp2MJaz2giSb4WOep13hUdjC2bqs=)
5: T3bly-tZ9XID-SOloXwH3hTsc_E.roa (hash: aeV/m0RLRp31h+Weu05/IHsjHV2WSBXJFEz0Mww+iyc=)
6: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (hash: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=)
7: X0L_WIFrHSaQewTifeIRhTrccl4.roa (hash: E11xutFhSfE8vZg68noD+8THw3mcAN+GK8jpf/T/4u8=)
8: hVqZbaQ8MeHQybRpaRLjUblswSg.roa (hash: pSX41/t7TR6ni7qxXv88Dsw/Pbc7wwCKoNbXNgfg/qs=)
9: ryrPySlNxpsVkX_ZxM78hhxv-f8.roa (hash: c2RA8jai5Wlkob7UVTv7PAf8GP4M7TVRsl2kLYkwKGQ=)
10: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:0c:bc:4b:df:a3:be:bd:47:93:9a:52:be:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Aug 14 13:01:33 2026 GMT
Not After : Aug 15 13:01:33 2026 GMT
Subject: CN=1f3edaabaf3c163efcc2bbd0f66fc512ab3bedf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:83:3f:df:cb:d7:2b:de:be:6b:68:f8:12:
83:59:75:1f:3c:08:c6:dc:d1:03:a6:04:13:77:4a:
c8:72:59:75:fc:8e:40:c6:7b:97:53:52:61:1f:d4:
64:59:c3:4a:b6:af:1c:5e:70:75:42:c3:44:eb:25:
28:d1:7d:74:90:b5:d5:8e:b2:46:c0:31:44:1f:a2:
f2:d4:d9:c5:01:6d:bc:d0:ae:eb:45:37:75:f1:ba:
73:7a:e8:04:b9:4a:99:73:4e:23:68:37:68:18:0c:
c4:51:c4:ab:89:0b:1a:72:94:67:fe:84:01:d7:7d:
f1:7c:8f:5d:dc:4c:8a:0e:4b:72:44:01:e0:24:93:
68:1d:0a:92:d6:da:31:62:45:43:8b:63:67:86:87:
53:be:15:5e:76:90:29:ba:62:a8:79:1d:17:ae:1d:
4c:d3:da:3a:1c:6c:24:87:d9:35:63:68:0b:d3:61:
af:65:60:2b:0f:d0:1f:18:c9:a4:53:83:4b:dc:14:
67:c0:42:6c:76:1c:78:79:59:1e:f9:3d:65:77:26:
10:d7:4d:f5:eb:5b:17:05:ea:7e:fc:8d:06:da:78:
fc:a0:13:2c:2c:5b:42:5f:96:c9:a5:08:91:b2:93:
37:3a:6f:f6:4b:47:b9:da:48:b8:55:fa:f1:11:86:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3E:DA:AB:AF:3C:16:3E:FC:C2:BB:D0:F6:6F:C5:12:AB:3B:ED:F8
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:78:22:4a:7b:d3:2e:9b:de:10:47:f2:62:0e:a7:a4:cd:a5:
83:b6:7d:e1:c6:38:d9:14:9d:57:b2:eb:ed:95:14:31:c5:61:
87:ad:43:b3:6d:3a:ee:23:65:42:ca:c7:b6:51:78:94:1a:0b:
73:28:05:31:ec:48:56:0d:4c:16:f3:d9:f3:05:9d:5c:c5:be:
8c:56:50:4d:77:23:98:2e:31:b8:e1:7b:38:f0:c9:8e:2d:7a:
91:a4:f9:8e:4c:c6:ae:05:40:90:4c:7c:7f:1a:29:78:82:ba:
e7:42:71:c0:8d:85:d8:59:21:30:1c:75:f1:8a:1c:86:dc:fa:
ee:12:d6:fc:a8:62:fc:aa:dc:87:4f:78:77:b8:95:af:a0:7b:
42:1c:f2:9d:23:5b:42:6d:93:e3:7c:70:3d:e2:b2:4c:bd:87:
21:ba:ac:83:d7:e5:6d:3d:27:df:4b:53:02:9f:31:71:76:d7:
27:a7:c9:b3:3b:9d:c1:ef:a0:63:39:7e:a1:df:bf:ea:0c:a1:
9e:31:55:41:28:c0:ca:c9:89:c1:91:ae:4b:f1:ed:d7:eb:43:
67:1a:de:61:80:78:cf:f0:48:7b:b8:fc:d2:96:a3:45:ba:fd:
63:d5:b0:63:40:41:bc:87:e7:87:b0:ac:b2:9d:d4:d9:88:bc:
6c:da:4c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXQy8S9+jvr1Hk5pSvpxpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjYwODE0MTMwMTMzWhcNMjYwODE1MTMwMTMzWjAzMTEwLwYDVQQD
EygxZjNlZGFhYmFmM2MxNjNlZmNjMmJiZDBmNjZmYzUxMmFiM2JlZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYiDP9/L1yvevmto+BKDWXUfPAjG
3NEDpgQTd0rIcll1/I5AxnuXU1JhH9RkWcNKtq8cXnB1QsNE6yUo0X10kLXVjrJG
wDFEH6Ly1NnFAW280K7rRTd18bpzeugEuUqZc04jaDdoGAzEUcSriQsacpRn/oQB
133xfI9d3EyKDktyRAHgJJNoHQqS1toxYkVDi2NnhodTvhVedpApumKoeR0Xrh1M
09o6HGwkh9k1Y2gL02GvZWArD9AfGMmkU4NL3BRnwEJsdhx4eVke+T1ldyYQ1031
61sXBep+/I0G2nj8oBMsLFtCX5bJpQiRspM3Om/2S0e52ki4VfrxEYamnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8+2quvPBY+/MK70PZvxRKrO+34MB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3giSnvT
LpveEEfyYg6npM2lg7Z94cY42RSdV7Lr7ZUUMcVhh61Ds2067iNlQsrHtlF4lBoL
cygFMexIVg1MFvPZ8wWdXMW+jFZQTXcjmC4xuOF7OPDJji16kaT5jkzGrgVAkEx8
fxopeIK650JxwI2F2FkhMBx18Yochtz67hLW/Khi/Krch094d7iVr6B7QhzynSNb
Qm2T43xwPeKyTL2HIbqsg9flbT0n30tTAp8xcXbXJ6fJszudwe+gYzl+od+/6gyh
njFVQSjAysmJwZGuS/Ht1+tDZxreYYB4z/BIe7j80pajRbr9Y9WwY0BBvIfnh7Cs
sp3U2Yi8bNpM7w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:22 2026 by rpki-client