Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: XInbIF5D5esgF2YEE0UJEIai72lisSTXUwftxN50pec=
Subject key identifier: CC:88:F9:30:3E:D3:EE:1C:B6:0A:03:4A:A1:CD:57:E9:B6:6B:45:5A
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019F954A0BE47A8EFEB203D274DB4F787EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0C4A
Signing time: Fri 24 Jul 2026 18:01:25 +0000
Manifest this update: Fri 24 Jul 2026 18:01:25 +0000
Manifest next update: Sat 25 Jul 2026 18:01:25 +0000
Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: JKFkJPi0oew+ZQnCE4jd+UJWkp8difQedFI+DJBpsLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:0b:e4:7a:8e:fe:b2:03:d2:74:db:4f:78:7e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Jul 24 18:01:25 2026 GMT
Not After : Jul 25 18:01:25 2026 GMT
Subject: CN=cc88f9303ed3ee1cb60a034aa1cd57e9b66b455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:70:0d:40:7b:cf:8d:76:43:18:83:fb:71:
15:dd:d4:8a:34:19:c8:d6:64:16:7e:1d:86:32:8c:
5f:d0:fb:07:7d:33:45:44:16:9d:41:1a:a1:77:23:
59:f6:8a:4b:54:4d:b2:05:df:88:97:60:56:58:10:
12:0a:14:8d:8f:34:6e:be:90:67:9c:14:44:ba:cc:
42:b3:d0:11:ef:7b:d1:cb:f8:15:3b:63:fc:d3:ea:
34:d9:a1:9f:22:82:92:11:21:74:f3:b1:93:79:a0:
18:47:0f:34:73:f1:c9:b1:7d:29:38:88:40:a2:87:
2b:9d:87:27:0a:60:40:89:aa:95:0c:91:cf:84:7e:
4c:97:db:84:c4:df:20:e0:15:cb:68:45:45:3b:00:
9d:75:29:21:31:cf:9d:6c:54:f2:bd:18:81:c1:3c:
6f:ae:00:a9:52:d8:49:7e:48:ba:35:29:f6:52:f8:
cd:d4:30:1a:04:f7:07:93:c1:63:9a:12:82:07:d3:
9d:b6:92:39:da:f1:1a:5e:33:85:ba:a7:73:53:c8:
e5:3c:66:78:21:5d:ab:9a:56:23:57:1b:f1:60:3a:
60:f1:80:65:7c:08:0a:7b:b7:2b:72:78:6a:2f:d2:
74:be:ef:ab:54:f4:8c:dd:a2:9c:f4:ea:3a:5e:ac:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:F9:30:3E:D3:EE:1C:B6:0A:03:4A:A1:CD:57:E9:B6:6B:45:5A
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0c:a6:ca:80:2f:43:68:30:e2:42:f4:93:d9:41:7b:9c:03:
d8:b8:f3:16:cd:f7:f3:0b:ac:f4:16:33:b5:aa:9a:16:6a:53:
f9:f9:4a:16:74:bc:66:0c:9c:2e:d2:e9:17:3b:e4:a2:c4:f8:
5e:49:0e:d9:7a:29:1a:a1:8b:eb:6e:8f:61:2d:9d:e6:fb:23:
f3:9f:49:3c:8a:de:5f:80:d3:72:67:d3:76:c0:c5:0e:15:df:
e8:71:48:21:fa:a3:6f:72:ac:e4:50:25:b7:68:a0:32:fe:4b:
cf:0a:b7:1b:d7:3f:3c:8c:86:5d:74:a8:e4:aa:fd:56:d9:ad:
1e:21:16:d4:d6:4b:5c:08:dc:e7:80:aa:35:6d:fd:a2:b7:c7:
5c:a6:32:87:a3:8c:9f:55:10:99:2b:f7:1f:bf:d9:1c:3b:62:
71:9b:f5:65:87:d7:a4:66:80:29:ad:62:be:6e:97:2c:8c:a9:
9c:7b:0c:9e:a8:12:78:cd:dd:49:78:82:63:47:e5:ca:f9:00:
cc:a9:fa:ae:76:f1:9c:a5:22:a8:4f:a2:11:b9:19:e7:c7:94:
e9:01:0a:1a:35:27:70:3a:a7:f8:82:22:1d:92:ce:a9:e9:8e:
fb:e3:b3:f2:75:1f:15:7b:22:09:19:3c:9c:f3:c7:e5:bb:85:
b6:c2:2b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSgvkeo7+sgPSdNtPeH73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjYwNzI0MTgwMTI1WhcNMjYwNzI1MTgwMTI1WjAzMTEwLwYDVQQD
EyhjYzg4ZjkzMDNlZDNlZTFjYjYwYTAzNGFhMWNkNTdlOWI2NmI0NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzVwDUB7z412QxiD+3EV3dSKNBnI
1mQWfh2GMoxf0PsHfTNFRBadQRqhdyNZ9opLVE2yBd+Il2BWWBASChSNjzRuvpBn
nBREusxCs9AR73vRy/gVO2P80+o02aGfIoKSESF087GTeaAYRw80c/HJsX0pOIhA
oocrnYcnCmBAiaqVDJHPhH5Ml9uExN8g4BXLaEVFOwCddSkhMc+dbFTyvRiBwTxv
rgCpUthJfki6NSn2UvjN1DAaBPcHk8FjmhKCB9OdtpI52vEaXjOFuqdzU8jlPGZ4
IV2rmlYjVxvxYDpg8YBlfAgKe7crcnhqL9J0vu+rVPSM3aKc9Oo6XqwRywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyI+TA+0+4ctgoDSqHNV+m2a0VaMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigymyoAv
Q2gw4kL0k9lBe5wD2LjzFs338wus9BYztaqaFmpT+flKFnS8ZgycLtLpFzvkosT4
XkkO2XopGqGL626PYS2d5vsj859JPIreX4DTcmfTdsDFDhXf6HFIIfqjb3Ks5FAl
t2igMv5Lzwq3G9c/PIyGXXSo5Kr9VtmtHiEW1NZLXAjc54CqNW39orfHXKYyh6OM
n1UQmSv3H7/ZHDticZv1ZYfXpGaAKa1ivm6XLIypnHsMnqgSeM3dSXiCY0flyvkA
zKn6rnbxnKUiqE+iEbkZ58eU6QEKGjUncDqn+IIiHZLOqemO++Oz8nUfFXsiCRk8
nPPH5buFtsIrzw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:15 2026 by rpki-client