Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: zd24tBck9rWwd+/yngRJjJ78VIgksWw6GTRECmrgQ20=
Subject key identifier: 56:27:BF:71:B8:A4:E4:12:A7:3A:AD:AC:78:6C:D5:F8:10:65:58:D1
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 01A0DA969F2DA563816EFB2E5D02E5231C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 22:01:39 +0000
Manifest this update: Fri 25 Sep 2026 22:01:39 +0000
Manifest next update: Sat 26 Sep 2026 22:01:39 +0000
Files and hashes: 1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: UsojlSUd1pJ8tHSHDu1ewulz6RW/1fC9eBps5inQHAI=)
2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:9f:2d:a5:63:81:6e:fb:2e:5d:02:e5:23:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Sep 25 22:01:39 2026 GMT
Not After : Sep 26 22:01:39 2026 GMT
Subject: CN=5627bf71b8a4e412a73aadac786cd5f8106558d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:e1:0c:bf:d2:d2:70:89:78:e0:8d:da:da:
bc:05:ab:4d:4b:cd:5d:37:d0:96:93:5f:7a:3e:f6:
61:ac:b1:35:11:65:18:e1:00:bd:56:7c:09:3f:78:
c3:d5:49:cb:3d:72:3f:33:7d:f8:1f:20:88:49:f2:
90:0f:40:1b:be:4e:e8:83:d1:a8:d3:b3:e3:0e:1c:
ac:2c:32:38:3c:5a:86:19:4b:0f:40:86:8d:c0:39:
40:cf:4b:4e:82:ea:0a:ac:75:b4:d6:9b:77:04:39:
2f:a0:1a:cb:41:ed:04:fd:f9:53:67:20:76:44:98:
13:7c:c4:22:0b:cc:8b:f3:a5:3c:09:25:be:76:6a:
8f:6b:90:5f:67:bf:f4:03:cf:91:51:3b:92:fa:2e:
f4:7d:75:10:9e:b6:17:1a:f5:b5:13:9f:83:b1:9b:
e2:84:c3:43:e0:b4:98:25:38:a2:8e:5b:42:b8:d1:
84:49:d2:f8:99:e6:85:d1:4c:52:57:9b:75:c7:02:
67:54:1a:6b:65:6c:5e:45:4d:2d:f6:2a:63:3d:46:
4c:2e:2c:55:cd:79:86:56:3b:37:27:e1:ba:8f:55:
68:a9:37:4d:3c:91:42:45:77:ce:b1:9f:f5:50:77:
6d:0e:d7:69:63:cf:af:73:c8:ea:e8:51:46:25:96:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:BF:71:B8:A4:E4:12:A7:3A:AD:AC:78:6C:D5:F8:10:65:58:D1
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f2:ee:49:59:89:2d:fd:0e:80:c7:a3:96:aa:59:db:39:c0:
26:e4:80:95:70:5d:cd:ff:b5:7a:78:3e:4a:ff:fc:1d:a1:c9:
f6:70:58:7b:b8:da:87:ce:80:d7:10:65:c7:d7:2f:01:24:db:
8a:95:39:d6:65:11:d0:ab:8f:16:dd:31:4a:8c:df:fd:f9:5a:
df:3a:d1:c3:a8:94:bd:a2:6d:0f:22:d6:61:01:c9:77:6a:36:
83:50:cc:15:ac:ec:f2:78:f9:15:a7:ab:db:97:92:ea:cc:5b:
12:3e:fc:6d:a5:4a:ee:a2:e1:f6:1d:8d:85:90:a2:34:4d:60:
4e:a0:27:22:36:45:af:ef:56:2b:1f:b8:ba:31:4a:01:bb:be:
35:6e:e9:3b:52:0b:c2:11:7d:bc:f9:e0:82:4d:32:d6:e6:16:
ff:6b:ca:8a:b4:e7:a9:68:cf:0d:e9:ab:14:1c:e4:f6:5c:d0:
13:21:b5:8d:04:47:80:85:b0:05:7f:eb:a8:21:66:9b:a9:4d:
3a:3e:f7:99:15:a6:ef:05:95:ff:d5:7d:9f:19:e0:11:91:10:
b3:02:a6:c7:89:d9:4f:97:2a:19:fc:8c:6d:f7:f0:88:11:d7:
89:54:47:cd:a5:ae:e7:41:b7:e9:1f:90:d8:e4:34:bf:b6:21:
89:b3:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:00:24 2026 by rpki-client