Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: M+OX/nGJr68r/xW79ty8UWP2cycf3lWobc5Q58hIbas=
Subject key identifier: CF:86:0C:FB:D8:5F:F2:E3:C3:08:49:C4:71:BB:76:F9:55:94:80:0C
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 01A105125CADAC91DA1628BF8E8AD5855E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 04:00:51 +0000
Manifest this update: Sun 04 Oct 2026 04:00:51 +0000
Manifest next update: Mon 05 Oct 2026 04:00:51 +0000
Files and hashes: 1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: Kb6rONxAyB1T4uRBNJFbSXe/A/OFJmxnk8dSxv7eee4=)
2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:5c:ad:ac:91:da:16:28:bf:8e:8a:d5:85:5e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Oct 4 04:00:51 2026 GMT
Not After : Oct 5 04:00:51 2026 GMT
Subject: CN=cf860cfbd85ff2e3c30849c471bb76f95594800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:27:97:1b:95:e5:45:74:d7:7a:3f:27:9a:
57:28:9d:55:b5:98:fb:97:35:a0:bb:04:be:44:0a:
21:22:42:70:ce:8c:f5:ea:5e:81:9a:1a:ee:e5:db:
cd:71:ab:b1:ba:bf:86:39:12:bf:cc:b9:fa:a2:a5:
70:78:80:16:0b:fa:b6:fe:aa:6a:2b:17:93:23:4c:
d5:32:ca:40:30:24:f8:c1:75:5d:55:db:97:ef:e7:
b9:e5:fc:f5:6c:f9:45:17:ac:28:bc:71:3a:93:7b:
1d:3d:a1:7c:91:08:01:ce:3c:0b:b8:b3:ac:44:b3:
a8:da:ff:2a:4f:b1:4d:1b:e1:99:ef:47:7c:ff:57:
4b:8f:fa:d0:57:b4:6f:c2:05:8b:40:88:7f:fb:dc:
5f:ee:fe:58:1d:c3:48:79:b9:cb:fc:65:6f:9b:d1:
1d:da:d4:57:f3:8a:af:bf:6d:c0:94:fa:45:ce:52:
b3:4c:ed:69:7a:19:e4:05:42:16:6d:24:2f:f6:51:
45:59:0b:c5:ce:03:6f:5a:33:3f:71:d8:a2:8a:e8:
3d:c9:3f:bc:e2:c7:62:c3:13:96:4a:64:06:35:10:
a9:8e:59:b0:33:d5:8e:b2:6d:e4:4f:61:a1:dc:60:
f8:7b:3b:46:20:d5:76:a8:ac:43:b1:fd:4a:e6:be:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:86:0C:FB:D8:5F:F2:E3:C3:08:49:C4:71:BB:76:F9:55:94:80:0C
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:04:3d:b8:f1:21:f5:bf:9b:bb:d5:65:27:8e:64:b6:4a:48:
86:a7:df:23:56:30:98:94:96:c1:8f:35:04:b2:04:0f:aa:40:
de:4d:88:f7:38:72:5d:a1:91:ed:33:84:05:2f:e5:86:23:db:
0e:63:19:b5:dd:81:13:10:c3:f6:14:04:26:a4:19:8b:06:29:
74:10:27:1d:a6:d4:f4:39:be:a5:3e:a6:a4:92:9c:ec:33:3c:
41:5d:57:88:72:8c:84:1c:3a:11:a5:39:bf:05:d1:b5:73:26:
0d:46:0e:eb:65:75:2d:8d:e1:2c:d8:37:06:b7:ba:bc:45:b7:
ce:d2:ae:26:a1:42:ae:b1:49:e4:d0:4a:30:0b:59:78:ca:cc:
d8:0c:3a:69:0e:d3:07:0e:23:b3:e4:02:f7:01:24:ff:a2:1c:
b0:32:a8:84:65:1a:22:43:7f:32:07:31:56:dc:b5:a5:23:bb:
77:4e:de:70:cc:77:21:bb:30:10:07:75:c7:12:38:b6:91:fd:
bb:9e:02:9d:3c:67:4a:d2:e6:25:93:8d:87:27:71:fc:3e:0a:
ea:f0:ac:c6:29:21:ea:e6:5c:3d:11:3f:90:73:ba:16:a3:f1:
0e:1e:e4:7a:9b:0f:4c:15:cf:5d:8c:5f:6c:86:69:a6:53:18:
ec:ff:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:04:31 2026 by rpki-client