Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: zj3K9q6TDwGeGtHbJuJyzwlUAoW8H8y5uQjrHESLcXg=
Subject key identifier: 03:CE:C3:BB:62:FB:1F:F3:AD:5A:38:14:9A:AC:80:77:A2:4B:4F:2B
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A0EAE52C5E03A702373E3A6CE74C98A751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0CFD
Signing time: Tue 29 Sep 2026 02:01:22 +0000
Manifest this update: Tue 29 Sep 2026 02:01:22 +0000
Manifest next update: Wed 30 Sep 2026 02:01:22 +0000
Files and hashes: 1: 5YzsLbvo1eEM56OytpeUbwdRlg0.roa (hash: 7piLzYpDBaxI4WC+KagvEaQCtvnYZvzdJriEMBRo3+8=)
2: QrGTzKfz15J7oy9-TP-tD_sLbiI.roa (hash: dXc9fZMDCjGnjiBrDjJUsuNwkskV/mjNM3qDIRtY4OQ=)
3: QtncJqkEgM9pkif2DGDuaV87Vhc.roa (hash: kbejMGw8GQAhGvEYV7Lc9g5XklZ9RaG+4r/fnMC1uZk=)
4: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: 7RbiiCZTBvtMj82l0HaVHx0ZCYwdzAJSfTCTB6HuMDY=)
5: kIwxVaszJ0jvZwrY9vQOmrgJJ54.roa (hash: VujkKRSH5a/ek90tKXqBOgg2Ya8vmz2jBWPjuMWSLmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:2c:5e:03:a7:02:37:3e:3a:6c:e7:4c:98:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Sep 29 02:01:22 2026 GMT
Not After : Sep 30 02:01:22 2026 GMT
Subject: CN=03cec3bb62fb1ff3ad5a38149aac8077a24b4f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:e6:c7:51:be:b1:f9:69:5c:1e:3a:df:e0:
f2:dc:15:61:21:ed:22:ce:00:b1:63:ca:26:48:87:
5d:f3:97:40:b5:a4:92:cb:73:47:c9:a2:57:ef:e8:
cb:c8:80:5b:5f:41:86:7b:e3:49:33:4f:aa:81:ae:
31:26:1c:dc:18:90:76:4d:a3:4f:49:48:9a:cc:f9:
de:8c:2b:fd:06:4d:14:38:a7:1a:f2:7a:6f:af:ed:
6b:fc:1a:2e:bc:5e:a5:53:3d:89:22:5d:b5:ed:c7:
2f:8c:5a:45:1f:e3:2f:a6:81:d9:68:16:c4:bb:cd:
35:e2:91:75:94:50:bf:55:c4:61:55:4f:b0:1a:08:
b9:c0:45:28:ab:11:fb:fe:4b:94:f6:49:da:38:ce:
c0:8a:94:49:c1:6b:7c:d7:6e:48:00:83:3d:60:75:
c8:11:61:02:f4:1b:36:4b:ff:d8:59:e6:73:4c:e3:
bc:73:03:35:7c:b3:2b:7b:e7:58:05:27:92:d3:12:
df:90:cf:0a:2f:53:3c:5d:5a:b8:6e:33:c0:b1:b1:
91:96:37:d5:c6:3d:ed:71:c6:01:18:45:62:e7:0a:
df:6c:1a:bc:ee:52:d4:53:44:79:48:e0:6b:a1:1c:
e1:b8:f3:ae:cc:b6:e6:cc:67:5a:24:2f:e7:76:50:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:C3:BB:62:FB:1F:F3:AD:5A:38:14:9A:AC:80:77:A2:4B:4F:2B
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:14:e6:b0:36:07:cf:bb:d9:31:f4:64:66:ab:65:95:eb:62:
72:3e:af:e2:f1:e4:1e:88:aa:3b:0b:0d:98:f8:e6:cf:38:a1:
0c:1e:49:83:d9:d7:36:97:9b:7e:f9:ef:37:aa:89:b2:01:88:
f1:7d:0b:01:d0:6e:5c:3c:10:f7:89:62:06:e6:2b:00:13:90:
ec:1a:7f:86:54:8c:08:9d:63:94:e7:7f:69:28:16:81:45:c5:
64:9e:cc:22:81:45:2b:2f:58:df:00:cb:8a:7e:45:15:9e:ce:
a4:2e:ee:f7:33:f2:09:d1:af:15:b6:ff:18:77:8f:7b:b5:d0:
a0:0a:04:94:7f:cb:f3:88:9d:26:23:a9:48:cc:0e:fc:7c:6e:
90:91:7b:73:d9:0b:06:20:46:bb:74:6f:f1:6a:a7:ce:d0:d3:
70:0f:ea:69:d5:8f:9d:ce:5e:1d:a9:82:b7:0c:95:f5:66:8f:
30:85:c8:c0:62:ab:90:6f:ff:43:4d:90:2f:83:42:63:57:a9:
e7:7d:18:9f:fa:71:2a:97:bd:16:83:98:b5:e0:a3:93:9b:56:
10:f1:ee:9f:0f:5f:b7:33:46:a8:f7:70:90:3c:b7:9d:78:2f:
e1:d4:75:e9:0a:d1:55:a8:61:43:4a:1b:1b:86:3b:56:3a:d0:
ba:4a:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:11:46 2026 by rpki-client