Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: BcNobIr5jrNOY+zn+NmGRh2RXacg51BeC8xmzgbRGdM=
Subject key identifier: 82:AC:62:CD:64:E7:5E:94:A0:80:9F:FA:CA:24:D3:CD:4B:8A:F3:86
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 019D37C0257D3277F233CC4584152FBC9F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: /E8ty1BE7m65eL9S7cpzTYA4YT5L4Rxpa9YOXlj9ZjY=)
2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:25:7d:32:77:f2:33:cc:45:84:15:2f:bc:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=82ac62cd64e75e94a0809ffaca24d3cd4b8af386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:f2:26:50:5a:79:9c:7f:e3:7d:8e:fd:dd:
cb:17:cb:47:38:9d:52:63:77:f7:68:5f:11:dd:53:
39:14:24:1d:b3:99:41:59:95:a7:d0:1c:1f:22:06:
be:91:a3:69:25:b2:01:28:09:4c:75:ee:d0:dd:4a:
e9:b4:1d:15:87:65:d5:b3:4f:9b:fe:b6:fb:b3:57:
fc:ff:2b:1f:e7:4e:24:2a:66:04:ad:30:65:f1:95:
80:8c:f6:91:6a:09:ae:96:20:0c:46:32:cc:29:68:
69:3b:f8:1e:68:c3:d1:00:c4:5f:dd:54:44:1d:82:
9f:db:01:07:00:c1:44:10:d3:f3:08:94:88:d1:cb:
55:a3:60:0f:ed:4c:99:80:c4:64:9d:a4:44:67:e1:
4c:58:f6:5d:35:f8:27:31:cd:0a:46:d9:35:2a:3f:
11:9c:a2:e9:52:b7:fc:c6:60:5f:c1:ca:f7:0e:1d:
9f:58:b4:8c:af:45:81:da:94:30:63:52:a1:a8:35:
83:11:14:7b:e8:f2:08:5f:76:96:f4:4d:da:50:fe:
95:71:5c:1c:d8:93:b0:bb:03:b8:81:97:db:7f:b5:
8b:0e:0f:c7:c9:bd:4b:ff:52:8a:97:ed:7d:22:0a:
32:2a:ad:c8:ff:d7:42:24:e6:b8:62:5d:5a:69:3c:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:62:CD:64:E7:5E:94:A0:80:9F:FA:CA:24:D3:CD:4B:8A:F3:86
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4b:c1:19:ef:c1:56:d0:e2:52:6b:b3:39:92:e5:c5:29:04:
66:82:3c:da:a0:80:bc:25:fa:45:21:f4:aa:64:da:32:95:2e:
23:23:35:bb:70:d8:0b:3d:3b:d4:1e:b1:53:dd:c9:ff:e9:d5:
a5:79:4b:4c:1b:d9:09:9e:ed:5b:35:c1:01:7e:97:08:05:24:
a1:cf:1a:88:4f:58:36:45:21:35:e2:c4:04:c3:6b:1b:13:81:
a0:e6:23:da:76:93:f9:9b:63:9d:fc:f4:09:21:0f:4f:ed:cd:
96:ef:48:8c:18:b5:82:d0:53:25:d4:1a:f2:13:b7:18:76:96:
a4:53:5f:aa:7d:fd:7c:c1:e8:86:5a:57:5a:4e:c3:b7:96:7a:
db:a0:99:8f:28:dc:0e:d2:4c:a0:bb:7b:25:e5:25:67:34:b3:
de:34:e1:6e:49:90:b4:1b:82:5a:f5:86:d4:2d:e4:ac:b8:f8:
73:90:21:3a:bc:76:fc:f5:3e:32:66:24:82:03:6f:7a:96:d9:
20:b3:fd:54:ec:05:a9:42:15:8b:db:68:39:51:94:f7:c1:ca:
da:8c:c1:b1:3f:2b:76:7b:41:95:2d:c8:57:e4:52:cb:45:c0:
20:b0:9d:9b:07:8a:ce:41:30:0b:2a:0c:da:22:80:a2:34:30:
5f:a3:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:34 2026 by rpki-client