Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: gWcDwUeem77DHC7/tldGfpRLr2+RS3QoQTc+xfkQQEg=
Subject key identifier: 94:BF:82:E8:06:59:0F:F9:16:F6:AD:B0:E2:38:57:DF:C1:0E:7E:43
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 019A7293EC68E1EF380328ADCC5CC6BF08B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: ryBTdWdW1dTlqYHk6u1jfAYkG3KBgJqSdGDYxVda908=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ec:68:e1:ef:38:03:28:ad:cc:5c:c6:bf:08:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=94bf82e806590ff916f6adb0e23857dfc10e7e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d2:65:61:0b:d0:52:6c:ab:2c:66:35:ae:83:
9b:b1:75:36:c0:49:0d:52:80:c6:71:4d:dd:38:28:
f9:e9:ab:bf:d4:94:15:5b:7c:a6:f9:24:b5:d9:0e:
2f:6a:0b:25:13:92:62:c1:71:66:12:55:82:9d:34:
8b:39:72:5c:4e:87:0a:55:03:be:46:34:cd:20:e7:
dc:ed:ca:29:f6:9d:e6:56:91:39:01:ea:c0:d0:cc:
54:0d:a9:97:dd:94:3b:c8:ac:38:e9:b3:20:e2:69:
b2:fd:10:f2:89:c0:ae:8f:64:03:3e:52:08:65:28:
cd:b4:aa:24:14:56:15:d1:b1:b3:eb:b6:05:74:a0:
0a:be:14:ce:d8:92:3a:f4:9d:d7:e9:9c:94:03:e1:
39:46:4c:a2:87:47:7c:43:a7:33:2d:2f:46:62:b6:
3d:37:fe:50:0e:7a:c6:9f:74:d9:a0:de:12:d9:7e:
78:15:8e:29:6e:1c:ed:fd:f2:33:ac:6d:c2:04:9b:
9c:a3:8a:db:16:4d:0a:7e:0a:2e:3c:b5:14:5e:52:
a4:7f:29:8d:e7:43:e5:3b:f0:55:6b:db:da:15:79:
7a:38:f9:0d:36:38:58:1d:9f:90:1d:92:71:5a:ee:
aa:76:d0:19:77:63:78:fa:c6:85:2a:89:d1:8e:c5:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BF:82:E8:06:59:0F:F9:16:F6:AD:B0:E2:38:57:DF:C1:0E:7E:43
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:14:f6:88:e3:7a:98:6f:77:0b:42:24:77:94:12:64:4e:44:
e6:4e:a1:87:47:8c:77:fd:42:20:9c:9b:0b:d5:26:d8:47:66:
07:41:64:47:85:39:37:1d:f6:6d:b6:81:1b:51:ee:91:9b:3a:
f3:9c:8f:52:87:64:49:f2:19:51:43:a0:37:76:95:fa:22:86:
83:57:3f:2a:93:1d:1c:2e:a6:5b:c1:04:84:d5:0d:70:aa:38:
f6:74:ce:3a:d7:88:18:61:0b:9f:f1:b8:eb:fa:c4:ab:23:38:
00:04:7c:74:6b:a3:f8:96:f0:7e:b7:99:75:12:05:d0:bb:26:
72:02:28:a7:ba:ae:a5:f1:d1:ac:a2:61:43:b9:30:29:1a:a8:
9b:44:96:02:d4:89:1c:ea:67:12:49:32:be:20:07:9b:5f:6c:
df:3f:50:5b:00:21:05:a2:67:89:0a:aa:40:fd:e3:f4:b6:23:
88:aa:2d:81:5f:2e:9c:e3:35:05:96:02:55:46:ee:3e:a7:6e:
72:6c:f6:38:84:07:c9:7a:53:0c:c9:25:c7:a2:bc:61:5a:83:
8b:17:22:62:64:ca:db:16:62:69:d3:7e:4f:3c:41:cc:f7:ca:
67:b5:0f:6d:35:9b:8d:3c:c6:68:32:87:08:7b:6a:ca:f4:bc:
b0:4f:66:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+xo4e84AyitzFzGvwi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNGFiZThhOGZhMzc4OTUxYWZhNjg1OTczNWJiZTZiMTgx
NDhiNTcwHhcNMjUxMTExMTEwMTI4WhcNMjUxMTEyMTEwMTI4WjAzMTEwLwYDVQQD
Eyg5NGJmODJlODA2NTkwZmY5MTZmNmFkYjBlMjM4NTdkZmMxMGU3ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+tJlYQvQUmyrLGY1roObsXU2wEkN
UoDGcU3dOCj56au/1JQVW3ym+SS12Q4vagslE5JiwXFmElWCnTSLOXJcTocKVQO+
RjTNIOfc7cop9p3mVpE5AerA0MxUDamX3ZQ7yKw46bMg4mmy/RDyicCuj2QDPlII
ZSjNtKokFFYV0bGz67YFdKAKvhTO2JI69J3X6ZyUA+E5Rkyih0d8Q6czLS9GYrY9
N/5QDnrGn3TZoN4S2X54FY4pbhzt/fIzrG3CBJuco4rbFk0KfgouPLUUXlKkfymN
50PlO/BVa9vaFXl6OPkNNjhYHZ+QHZJxWu6qdtAZd2N4+saFKonRjsVoRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS/gugGWQ/5FvatsOI4V9/BDn5DMB8GA1UdIwQY
MBaAFGpKvoqPo3iVGvpoWXNbvmsYFItXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTIt
ODdlYjQ0OGU5MmVkLzEvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTItODdlYjQ0OGU5MmVk
LzEvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORT2iON6
mG93C0Ikd5QSZE5E5k6hh0eMd/1CIJybC9Um2EdmB0FkR4U5Nx32bbaBG1HukZs6
85yPUodkSfIZUUOgN3aV+iKGg1c/KpMdHC6mW8EEhNUNcKo49nTOOteIGGELn/G4
6/rEqyM4AAR8dGuj+JbwfreZdRIF0LsmcgIop7qupfHRrKJhQ7kwKRqom0SWAtSJ
HOpnEkkyviAHm19s3z9QWwAhBaJniQqqQP3j9LYjiKotgV8unOM1BZYCVUbuPqdu
cmz2OIQHyXpTDMklx6K8YVqDixciYmTK2xZiadN+TzxBzPfKZ7UPbTWbjTzGaDKH
CHtqyvS8sE9mjw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:55 2025 by rpki-client