Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: RZFU3CLcl77wUkGob/QYlJXydmzpNqJEsPyojZHSL+U=
Subject key identifier: F5:6C:8A:6B:55:6B:14:C4:11:A8:E0:B5:84:2A:2E:F9:E9:A3:FA:03
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 01A178F12A94A7EC209B3B93F0CFEC373540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 16:00:33 +0000
Manifest this update: Mon 26 Oct 2026 16:00:33 +0000
Manifest next update: Tue 27 Oct 2026 16:00:33 +0000
Files and hashes: 1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: tM9ZDDe1ezYaHMcLR2WedHZkrni5nw70Rpp6/b/Bc8A=)
2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:2a:94:a7:ec:20:9b:3b:93:f0:cf:ec:37:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Oct 26 16:00:33 2026 GMT
Not After : Oct 27 16:00:33 2026 GMT
Subject: CN=f56c8a6b556b14c411a8e0b5842a2ef9e9a3fa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:58:4f:e6:0e:91:95:2e:ab:86:15:f5:04:
f9:06:6a:ba:fd:f4:a1:53:de:a6:5c:3b:b7:a7:c9:
fb:35:5d:74:60:cd:b9:0a:b7:93:39:e4:9e:0a:60:
0c:ca:4f:fb:5d:71:d0:f8:84:fb:39:c2:c0:1c:00:
6c:4c:80:dc:8b:bb:35:4d:61:19:7d:ed:b0:89:cb:
93:72:19:b2:3f:7e:f4:33:d9:c6:b0:94:a4:a1:04:
23:0f:21:61:2d:7f:dd:f7:9d:11:da:95:c2:09:79:
c5:1d:c5:94:64:f8:1f:03:28:49:d3:c0:d0:a4:04:
6a:0f:3d:ee:65:68:17:00:0c:83:c7:e6:29:f9:f5:
ef:c6:67:e2:30:37:c6:34:e7:6c:cd:22:22:5c:e3:
55:f1:95:42:28:7e:26:ef:29:1f:6f:32:8d:34:b1:
ad:40:20:d5:41:93:fa:e1:29:60:74:f1:58:40:d5:
33:d2:8e:a5:21:7d:8c:89:d5:74:86:05:f8:94:13:
21:81:74:de:b1:d1:30:13:69:12:d5:41:64:be:aa:
f7:a9:87:a9:22:86:58:62:ed:fa:9a:98:39:d3:ff:
e6:a4:bb:9e:73:85:fa:66:01:19:5c:50:46:b2:fd:
2c:21:76:19:c3:9e:7e:0c:01:2b:3a:c1:f2:35:46:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:8A:6B:55:6B:14:C4:11:A8:E0:B5:84:2A:2E:F9:E9:A3:FA:03
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:69:ea:d2:14:7f:bb:57:49:e7:03:32:d2:c7:9a:1f:13:60:
65:6c:ac:6a:4d:2d:fc:af:03:5f:f7:be:17:e5:a2:15:00:fe:
b2:be:95:3a:0d:07:82:ac:8a:d3:f9:51:15:cc:d4:6b:89:42:
01:94:dd:b2:f0:83:69:df:23:e9:f6:6b:6f:bd:b7:3f:6c:47:
c8:b8:1e:cd:f1:88:da:61:b9:d9:d5:6e:e9:5e:a5:16:b4:1d:
d4:80:b1:2a:c1:2f:19:c9:9d:63:bc:37:a7:19:d2:20:7c:bb:
07:ab:e1:71:be:6d:34:7c:54:c7:2d:1f:32:1b:15:51:4b:88:
c3:45:07:01:69:2f:bb:5d:9a:26:d1:85:e2:22:a2:41:97:5c:
b2:42:42:37:74:ca:de:69:b5:8f:26:78:dd:2a:80:c1:81:1a:
5f:0d:6e:a9:3a:cb:78:65:9f:24:17:f6:cf:05:58:b0:47:25:
3a:53:eb:85:10:ef:50:bb:73:84:73:84:8d:6e:e7:26:97:b4:
9b:b9:aa:e1:58:dc:4b:d9:bf:12:02:30:f5:dd:ee:4e:ed:f8:
0b:51:23:32:1c:74:5e:6a:85:a3:a6:70:3e:ca:41:3b:b2:16:
a9:c8:2b:67:47:ae:bd:b3:a9:77:6f:fc:e1:1a:79:b7:85:70:
b4:87:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:03:33 2026 by rpki-client