Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: heoTUUbNtoKNXnpekVTz0wzpQoNKMM5gpFmdeRYnYpg=
Subject key identifier: 16:06:86:2D:CB:44:0E:88:9C:53:FE:33:E9:B1:73:4B:CD:F4:5F:73
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 019CACB4868D97EB0478712139B0B9712C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: /aXXfC6CiOXhz6pMPh3Ow79eed+uZFMPnFgc9/GAr5M=)
2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:86:8d:97:eb:04:78:71:21:39:b0:b9:71:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=1606862dcb440e889c53fe33e9b1734bcdf45f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a2:c1:1a:e1:76:42:f4:aa:82:71:67:7a:15:
d5:84:6e:23:37:f9:9b:af:b1:4c:c4:c2:83:d4:c5:
af:b0:d1:5b:d9:1a:ca:cf:0a:14:eb:fb:22:d0:29:
e7:cd:ff:4e:95:fa:85:08:63:b6:19:2d:c3:44:93:
44:ef:9b:6f:db:13:55:c8:4f:56:04:5a:cb:17:93:
53:26:5a:fb:2c:96:9c:d2:89:cc:ec:bb:56:df:0e:
96:48:da:ce:9c:0f:58:02:50:56:3d:f0:aa:d0:bc:
73:31:75:7c:75:f6:5c:19:cf:d7:d0:3e:32:49:0c:
32:45:0e:a7:51:ee:b0:f8:26:16:d8:32:3f:2e:ec:
56:ae:33:ee:76:3d:65:01:fc:78:09:71:23:46:05:
43:f8:ed:08:31:a1:27:e2:f9:e9:05:52:8b:02:65:
e5:85:6a:70:1b:4e:01:8f:a3:6f:bb:3a:63:70:5e:
81:7a:b3:9f:22:74:ca:14:0c:d4:4b:8c:9a:31:ae:
17:3d:59:0a:dc:9e:a3:3f:a2:e6:08:06:11:5d:be:
c2:25:81:98:de:16:1e:62:be:3c:c9:5d:07:23:9b:
92:0f:d0:4f:d7:49:cc:5f:a1:3e:32:8f:da:ae:3a:
f6:36:a6:e0:ca:96:f3:34:15:8b:cc:82:09:0d:49:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:06:86:2D:CB:44:0E:88:9C:53:FE:33:E9:B1:73:4B:CD:F4:5F:73
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2c:93:58:73:a4:24:14:e5:06:e8:7a:0f:9b:7b:73:3e:d1:
a0:01:1a:0d:7a:a0:ec:04:3c:bd:bf:36:e1:6a:e5:01:14:84:
9b:1c:aa:b8:64:79:23:3a:38:22:ef:f4:5d:d5:c3:eb:57:b7:
68:fa:b0:ae:e5:06:a9:4e:99:63:00:e7:eb:66:e4:a6:2c:44:
77:d4:90:d0:aa:0f:96:10:25:da:57:fc:88:9a:e2:33:8a:21:
9c:77:4b:93:85:1f:cc:fb:d6:84:ea:d9:15:59:ab:78:32:b1:
a5:35:9b:e2:83:19:c9:fe:9e:5d:51:61:85:99:d1:9c:6a:d8:
f9:d3:d2:95:ef:bb:9c:1e:f3:64:5d:1b:88:57:ca:5c:da:a9:
88:6b:71:82:1f:d5:f5:14:26:6d:d0:d4:1b:0a:68:4f:3f:9e:
d7:11:34:16:d7:e7:70:74:d9:4a:ef:db:31:0d:72:8b:e2:20:
20:26:0b:de:e6:d5:01:f9:bf:63:30:2b:9f:62:b1:f9:a3:78:
cb:92:09:62:42:2b:cf:53:1d:4a:89:54:10:10:8c:7e:03:4a:
ea:6d:65:e9:d9:b5:d3:5b:65:18:fa:3d:d4:5c:1f:79:c9:63:
13:a3:dd:32:f0:fe:7f:9c:b7:77:7e:c9:7a:81:35:ad:63:f4:
3d:b2:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:30 2026 by rpki-client