Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: K38k+Zya7QOvVSDGMrkelmRxi73laaPzW9r7vb4f7jQ=
Subject key identifier: 02:AF:ED:5C:E9:70:23:AE:61:0F:50:70:0C:A0:93:EA:F2:69:1C:9E
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 019D265F066BBC70F907759C52BFC011EDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:54 +0000
Manifest this update: Wed 25 Mar 2026 19:00:54 +0000
Manifest next update: Thu 26 Mar 2026 19:00:54 +0000
Files and hashes: 1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: sz606BMIQAOsXtdBB1hmCahJfyxHzouOlfsobfbxQBE=)
2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:06:6b:bc:70:f9:07:75:9c:52:bf:c0:11:ed:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Mar 25 19:00:54 2026 GMT
Not After : Mar 26 19:00:54 2026 GMT
Subject: CN=02afed5ce97023ae610f50700ca093eaf2691c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:88:d5:8b:1d:fd:01:f4:37:a2:44:f2:89:
ec:11:c7:da:de:ea:52:38:3d:ab:fe:75:fa:93:d2:
ed:57:44:7c:b3:b5:d0:7b:b7:d0:5a:65:d3:a7:6d:
9e:8f:74:72:f1:a4:61:d5:3a:d0:d9:02:cd:60:31:
e4:a8:a4:9f:2b:63:26:27:46:e5:71:19:74:96:a2:
47:5b:36:4d:02:b6:b2:ff:2e:fd:94:e3:b0:01:1e:
eb:81:32:25:d2:42:40:74:a9:4d:3a:a6:a9:50:59:
6c:56:d5:00:49:b8:c0:f4:6e:16:43:5b:4c:7a:df:
36:54:26:df:40:25:35:41:a8:22:45:7c:2e:f9:88:
ae:eb:9b:49:fe:da:55:46:52:7c:56:c6:57:92:4e:
b4:f6:c3:9d:00:c3:da:0d:1d:de:98:d8:13:fa:12:
97:3e:f9:f5:73:37:5f:40:59:a5:e8:43:ae:d4:17:
29:60:e7:a6:c7:78:13:95:8e:32:f4:9b:bc:e0:0a:
f7:31:72:31:7e:46:90:05:5e:2d:47:e8:08:5c:74:
85:4e:e5:1b:5e:f3:84:ed:cc:09:ef:a0:1c:0d:c9:
ec:d7:05:3d:c6:ec:a0:6f:f2:9f:62:b6:fa:24:79:
ce:e3:b8:be:ba:f7:be:87:d1:ac:00:67:b2:a6:df:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:ED:5C:E9:70:23:AE:61:0F:50:70:0C:A0:93:EA:F2:69:1C:9E
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:28:b3:f4:f0:f5:83:19:af:4c:f9:ce:e4:01:7f:71:6f:36:
b6:45:f3:10:6a:df:62:8b:5a:bd:69:50:be:c8:f9:e4:df:ff:
41:84:74:b6:1d:37:07:ad:86:44:09:77:dc:66:94:9a:ad:5f:
f1:ce:4f:48:69:41:8a:5a:54:ac:b4:96:98:62:68:11:f2:32:
47:1b:66:bc:66:b3:6a:11:1c:93:6d:8a:ca:45:7f:8a:64:19:
d2:1e:42:53:c7:28:ec:c5:76:66:d6:36:5d:cc:50:56:cc:18:
95:34:2a:e7:5d:d4:5b:b0:03:3f:7c:14:ea:fd:86:9b:90:ef:
11:bd:ac:8a:65:07:5f:c5:f6:fe:bd:12:d8:0c:4b:18:80:70:
d3:84:bd:e0:db:24:33:11:9f:32:64:30:35:63:0b:66:4c:8d:
97:61:fa:f7:05:7a:0a:a5:d5:96:13:00:9e:46:7b:6f:2a:c0:
10:30:1d:33:23:b0:cf:5d:7b:01:18:60:67:fa:82:3d:5e:26:
80:96:3f:02:72:09:ca:c0:67:40:ee:33:75:9b:f8:ee:d4:55:
d0:f1:f9:83:93:b0:bb:f7:a7:00:cc:81:e5:5a:b2:b4:6a:48:
fd:b6:23:03:89:3f:83:37:5a:f4:b4:4c:30:92:94:c2:a1:45:
28:c2:22:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXwZrvHD5B3WcUr/AEe20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNGFiZThhOGZhMzc4OTUxYWZhNjg1OTczNWJiZTZiMTgx
NDhiNTcwHhcNMjYwMzI1MTkwMDU0WhcNMjYwMzI2MTkwMDU0WjAzMTEwLwYDVQQD
EygwMmFmZWQ1Y2U5NzAyM2FlNjEwZjUwNzAwY2EwOTNlYWYyNjkxYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaCI1Ysd/QH0N6JE8onsEcfa3upS
OD2r/nX6k9LtV0R8s7XQe7fQWmXTp22ej3Ry8aRh1TrQ2QLNYDHkqKSfK2MmJ0bl
cRl0lqJHWzZNAray/y79lOOwAR7rgTIl0kJAdKlNOqapUFlsVtUASbjA9G4WQ1tM
et82VCbfQCU1QagiRXwu+Yiu65tJ/tpVRlJ8VsZXkk609sOdAMPaDR3emNgT+hKX
Pvn1czdfQFml6EOu1BcpYOemx3gTlY4y9Ju84Ar3MXIxfkaQBV4tR+gIXHSFTuUb
XvOE7cwJ76AcDcns1wU9xuygb/KfYrb6JHnO47i+uve+h9GsAGeypt8ApQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKv7VzpcCOuYQ9QcAygk+ryaRyeMB8GA1UdIwQY
MBaAFGpKvoqPo3iVGvpoWXNbvmsYFItXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTIt
ODdlYjQ0OGU5MmVkLzEvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTItODdlYjQ0OGU5MmVk
LzEvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyiz9PD1
gxmvTPnO5AF/cW82tkXzEGrfYotavWlQvsj55N//QYR0th03B62GRAl33GaUmq1f
8c5PSGlBilpUrLSWmGJoEfIyRxtmvGazahEck22KykV/imQZ0h5CU8co7MV2ZtY2
XcxQVswYlTQq513UW7ADP3wU6v2Gm5DvEb2simUHX8X2/r0S2AxLGIBw04S94Nsk
MxGfMmQwNWMLZkyNl2H69wV6CqXVlhMAnkZ7byrAEDAdMyOwz117ARhgZ/qCPV4m
gJY/AnIJysBnQO4zdZv47tRV0PH5g5Owu/enAMyB5VqytGpI/bYjA4k/gzda9LRM
MJKUwqFFKMIiDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:34 2026 by rpki-client