Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: 5pbBEYOw9c6ZI8GCz3zwPD9tYS6fc8DJs8u997611F4=
Subject key identifier: 8E:07:48:19:2D:EF:F1:39:09:70:FB:80:4B:D1:67:4B:0C:41:AE:9D
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019D2771B78CEF277ACBB5482AE866169D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0B08
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: Wp0ExumZBN4psQgzyiBEWBaxlPYtI38L8PW+rBnP1OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b7:8c:ef:27:7a:cb:b5:48:2a:e8:66:16:9d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=8e0748192deff1390970fb804bd1674b0c41ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:44:cb:ba:df:db:c0:69:00:13:36:db:e9:
77:49:58:e3:26:7a:ba:68:5a:80:b5:9c:27:20:09:
5e:2f:d0:a0:33:8e:60:c3:93:c0:53:b3:d9:23:11:
a3:1c:fb:3a:8e:3e:e1:78:b2:b8:b7:8b:ff:c4:c0:
88:da:fd:d0:47:c5:57:08:0c:08:e4:8b:d5:42:b1:
02:f5:d1:e3:04:77:aa:9d:ac:1a:c7:d9:ab:90:be:
b5:bb:78:a0:e5:cd:55:88:37:f6:de:b2:06:5d:6b:
75:ab:61:85:e2:18:38:0b:c8:c7:d3:e2:7e:76:65:
bf:c5:86:f2:a0:3a:85:f8:34:cc:82:2d:d3:b6:41:
e1:08:ce:63:be:64:0f:84:b0:ef:3b:9c:60:54:46:
b6:97:6d:0c:09:1d:07:11:9a:1b:16:c2:48:84:a9:
ec:62:07:50:c5:72:b1:9e:39:7b:27:b4:ef:f7:1f:
ba:e4:86:e6:bc:8d:0b:92:7b:d1:72:bd:fc:cd:94:
17:c6:5e:7f:2b:1b:84:68:4c:e1:e9:6f:d3:c9:47:
f6:54:c3:3f:56:42:02:99:5c:5e:70:91:ba:7d:cf:
6d:c3:9c:74:51:70:89:bb:43:73:8d:b5:27:24:04:
14:aa:93:55:ce:b5:59:1b:da:20:0d:48:63:87:a2:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:48:19:2D:EF:F1:39:09:70:FB:80:4B:D1:67:4B:0C:41:AE:9D
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:a0:39:e8:f4:d4:96:0a:f1:38:58:66:da:0a:5c:9d:f9:
c2:aa:e5:bc:74:a1:0b:d1:f2:06:e4:fa:81:6c:53:a7:94:21:
6b:40:c2:75:1b:ca:d4:ea:95:f0:8f:03:67:81:95:a4:8a:4b:
09:f6:ea:0d:d0:1c:f9:5c:db:5f:b7:a3:c4:14:b7:03:f8:f8:
07:10:3d:fc:47:53:da:e1:74:29:9e:65:19:66:29:40:5c:80:
49:5b:54:d0:57:53:7a:0c:f3:e2:f2:08:ec:87:f8:b1:39:18:
f4:74:f9:48:93:14:26:de:58:cf:84:f8:eb:a2:82:a6:5c:7d:
b6:fd:1b:49:31:1a:ea:3e:be:ea:bf:b4:52:fb:2f:ec:ec:40:
f9:95:85:0d:59:92:03:a9:da:5a:62:f2:4e:16:9a:7c:c5:7f:
72:2f:39:2a:b0:c3:d6:cd:db:a0:3d:5b:cb:78:5e:63:a0:3e:
08:a9:1e:b3:1e:3f:ac:05:7c:00:c9:8a:8d:56:4b:48:bd:2b:
03:a7:f4:65:48:44:4c:68:48:1a:41:62:66:60:16:eb:07:d6:
75:27:33:b2:80:70:e2:6f:0e:90:b4:87:67:37:ff:52:a8:75:
e2:d3:2a:87:8c:e4:97:02:d6:06:c7:d4:be:13:b0:66:97:a6:
ed:06:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:37 2026 by rpki-client