Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: DBH85K9TTpgBGfS1txf0/Z/k+YgUtBDmBpamrbpP4Ic=
Subject key identifier: 4C:C6:91:EE:52:4D:9B:4B:99:0B:61:F7:52:9F:C2:80:B9:A6:2E:5A
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 019FAB63CB7834FF64A43960D064FE47FE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:01:11 +0000
Manifest this update: Wed 29 Jul 2026 01:01:11 +0000
Manifest next update: Thu 30 Jul 2026 01:01:11 +0000
Files and hashes: 1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: 7Els7YUMwDrWKe5c1GFxZDVMbfHOEKtwQcGAz7BgA0U=)
2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:cb:78:34:ff:64:a4:39:60:d0:64:fe:47:fe:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Jul 29 01:01:11 2026 GMT
Not After : Jul 30 01:01:11 2026 GMT
Subject: CN=4cc691ee524d9b4b990b61f7529fc280b9a62e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:eb:2d:2d:08:10:c7:4f:d4:d2:19:09:62:
28:d7:3f:c8:08:d7:e2:35:05:34:af:82:ce:43:f1:
38:df:13:51:78:86:8b:79:41:66:d1:83:10:cd:3c:
24:02:42:33:e5:cb:85:ec:84:df:5b:e3:85:01:d2:
2a:26:cc:ad:30:79:6a:ba:2e:53:63:7a:19:33:b7:
0d:20:6b:7d:93:88:ee:17:ad:e7:63:f4:97:85:df:
51:9d:72:35:f0:6a:2e:08:34:04:b5:af:79:4f:bd:
15:9a:65:cc:25:27:d2:51:c2:d0:1d:1c:90:7d:26:
48:9a:3b:aa:30:1e:52:c2:57:5f:20:5c:b8:3f:01:
e7:25:32:3a:68:e0:95:5d:54:6b:de:11:9d:91:39:
7a:d5:85:1c:b2:92:d6:3d:c8:05:7c:98:da:c6:53:
a7:1f:d3:b5:e0:62:da:25:e7:5b:3a:87:d8:05:14:
e1:ea:3f:42:ea:31:b3:3a:38:52:70:f2:bc:e2:2d:
ec:d1:f7:5a:37:bc:3f:bc:7d:38:55:18:47:7e:4c:
32:96:3a:29:7f:bb:17:82:63:2e:64:58:71:14:39:
db:6b:ac:92:92:a4:a1:3c:31:53:8d:a4:df:47:19:
fb:ca:85:79:e2:28:6f:b8:c0:96:46:e9:bc:8c:b6:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:91:EE:52:4D:9B:4B:99:0B:61:F7:52:9F:C2:80:B9:A6:2E:5A
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:81:9c:9d:2a:e8:40:47:49:06:90:d0:fa:84:31:16:31:
dc:d3:0a:de:c3:5f:60:2d:2c:ae:70:70:8d:74:23:1e:70:2b:
25:5d:34:a3:d1:e6:f4:c6:de:ba:f3:58:e0:89:38:5a:02:c6:
42:7d:2c:aa:e8:01:d6:b6:2a:07:4b:ed:e7:a4:5f:b6:ff:7b:
7b:c2:88:fe:d3:1e:5b:31:6f:1c:bf:d8:7f:ab:18:9b:50:53:
a4:ce:ac:d3:99:3e:df:ff:1e:b5:23:db:5b:04:7c:44:db:e1:
cf:f7:91:1a:37:fb:bf:95:f5:32:6c:10:4f:4b:3a:5b:29:d7:
c4:b4:56:aa:6a:1f:39:51:85:3a:37:aa:ee:53:38:15:a6:ed:
22:2a:d9:06:42:dc:5c:37:db:51:8a:b8:d6:ec:90:a4:d8:a1:
a3:e5:92:c5:08:44:e4:16:dd:83:0f:55:34:02:79:68:f4:af:
1e:d9:41:5d:60:87:01:b6:c3:08:b6:58:80:68:d6:2e:d9:d1:
c3:f3:1a:df:40:7b:71:a8:12:1f:7c:f3:df:7a:50:16:5b:7f:
bf:f2:dc:f6:74:6b:3b:90:21:e1:0d:c3:1c:3c:76:fe:25:f0:
5c:15:26:e2:0f:9a:0c:db:c6:cf:ff:78:cf:51:7d:0d:63:24:
40:b7:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:44:39 2026 by rpki-client