Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: x9HGKD4gUIVMnG2MVL/govNC37XjMapzXAO1vMsiN8E=
Subject key identifier: 8F:6B:E3:F5:44:FD:92:12:35:D7:3A:79:70:60:A4:46:27:D5:FC:FE
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019E2091C1848FE4A24BFAB13CF54AA2D355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0B89
Signing time: Wed 13 May 2026 09:01:23 +0000
Manifest this update: Wed 13 May 2026 09:01:23 +0000
Manifest next update: Thu 14 May 2026 09:01:23 +0000
Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: zaIp1zw/89wsO+nWrmElKW8A8B7G5+8gzK4y568eAy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:c1:84:8f:e4:a2:4b:fa:b1:3c:f5:4a:a2:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: May 13 09:01:23 2026 GMT
Not After : May 14 09:01:23 2026 GMT
Subject: CN=8f6be3f544fd921235d73a797060a44627d5fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:52:d8:b3:55:85:94:60:fe:39:72:9b:2c:
30:78:5f:d6:d1:de:45:1a:66:4b:9b:21:a8:f3:92:
fe:b5:8c:27:c8:ce:2b:06:30:b8:f3:87:ac:21:e9:
c9:80:4b:0b:f6:6a:ef:4a:8b:56:ed:d6:8d:8f:a2:
40:1f:a7:88:4e:0b:6e:aa:f2:67:8d:8d:6a:76:ef:
d4:d0:a7:81:8b:6c:07:43:4d:2e:af:2f:c9:a4:48:
cb:4a:eb:2b:27:b9:47:0b:6a:5c:53:9f:c2:92:13:
45:85:fe:1c:e2:b5:b5:3b:82:1b:bd:58:f8:df:67:
06:cb:4b:2b:07:0a:55:b6:e5:6a:9b:30:1e:77:54:
35:4e:f8:42:cd:77:67:0f:63:0d:dc:f1:1c:85:2f:
95:6b:3c:0c:ab:7e:cd:8d:37:73:67:1a:a7:4a:73:
53:c5:e2:f6:33:eb:c2:8a:79:56:44:b4:e5:bb:e6:
67:0e:2d:0d:f9:54:f2:b9:a8:9d:3d:bf:19:f4:c4:
61:35:61:13:fb:72:9f:e4:f1:52:84:ab:88:78:11:
6e:2f:37:db:4a:09:37:4e:a0:9e:39:6a:bc:6d:16:
ac:63:d9:69:51:0a:70:bc:7f:70:c8:bf:d2:71:b7:
92:f8:d0:d0:28:2c:38:80:0a:fa:7e:94:55:52:c8:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6B:E3:F5:44:FD:92:12:35:D7:3A:79:70:60:A4:46:27:D5:FC:FE
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:97:70:a5:4e:c8:7c:c6:0b:23:fb:a5:3b:26:fc:a2:dc:18:
df:cd:3a:9a:83:eb:c5:a1:94:32:f2:f5:c9:c8:94:11:7e:2d:
4d:18:bb:42:ad:53:b3:05:8e:33:d4:5c:82:2c:40:2c:38:04:
79:c5:2a:7f:aa:76:f1:89:a3:fd:90:35:9f:d4:4d:c5:09:fc:
fc:f6:99:66:be:24:6e:c5:3c:a0:5d:7a:38:95:1d:fb:de:ca:
14:2d:56:45:91:5a:d4:61:03:f5:88:59:6b:61:fc:62:a6:f1:
e5:71:d7:bd:13:b9:39:6f:5f:9a:eb:30:9e:06:52:0b:fe:27:
f4:be:b6:1a:3b:b6:c2:b6:b1:b9:94:8f:a8:7b:de:13:41:76:
12:d0:10:a6:0b:3f:84:ab:33:d5:79:09:1d:26:1a:b7:ff:d3:
37:0a:35:2d:25:e9:c9:b2:f0:13:db:4a:cb:cf:a5:18:b0:51:
52:29:63:53:25:c9:19:a0:64:32:66:5b:df:b4:98:25:39:c6:
3e:11:d1:2e:39:07:a1:78:e5:e4:21:17:79:a6:9d:cb:b8:94:
87:e1:57:fb:d0:2a:01:b6:8e:30:ef:20:06:97:f4:29:19:35:
5f:13:7c:51:6b:8d:fb:a8:77:b2:c0:60:05:03:db:90:95:05:
a5:90:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:07 2026 by rpki-client