Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: f/HJpwffPZKCZ+nFW5yyfvlK74KXHTX88rk3IJ9VJ9g=
Subject key identifier: B8:D3:16:56:CD:1A:6B:6E:C5:0E:EA:D4:51:DA:16:47:EF:FF:17:E0
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A12A317E35DC61D640C2F0FC779B0EF480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0D1E
Signing time: Sun 11 Oct 2026 09:00:48 +0000
Manifest this update: Sun 11 Oct 2026 09:00:48 +0000
Manifest next update: Mon 12 Oct 2026 09:00:48 +0000
Files and hashes: 1: 5YzsLbvo1eEM56OytpeUbwdRlg0.roa (hash: 7piLzYpDBaxI4WC+KagvEaQCtvnYZvzdJriEMBRo3+8=)
2: GXWpqeluVXhrQ1FX4ylENT4ybls.roa (hash: 4f8MGObJtbVZToU9RBfxBl+OUpzPDgB4HsZrgY6RHMs=)
3: QrGTzKfz15J7oy9-TP-tD_sLbiI.roa (hash: dXc9fZMDCjGnjiBrDjJUsuNwkskV/mjNM3qDIRtY4OQ=)
4: QtncJqkEgM9pkif2DGDuaV87Vhc.roa (hash: kbejMGw8GQAhGvEYV7Lc9g5XklZ9RaG+4r/fnMC1uZk=)
5: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: FAkG8cAAxuPA5mctKuVuPW2ScIZkV12CyLYGKOkodAA=)
6: kIwxVaszJ0jvZwrY9vQOmrgJJ54.roa (hash: VujkKRSH5a/ek90tKXqBOgg2Ya8vmz2jBWPjuMWSLmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:7e:35:dc:61:d6:40:c2:f0:fc:77:9b:0e:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Oct 11 09:00:48 2026 GMT
Not After : Oct 12 09:00:48 2026 GMT
Subject: CN=b8d31656cd1a6b6ec50eead451da1647efff17e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:6f:19:d9:09:43:46:16:da:f3:3c:b3:8a:
f2:b2:d9:08:37:c5:01:67:89:0f:d1:53:c0:93:34:
26:e6:c7:be:34:d6:8c:47:a3:e9:37:80:e1:e5:61:
5e:47:41:a8:b0:49:9a:95:3f:7a:1e:e1:cc:eb:9c:
ea:9b:ce:e7:40:55:8b:00:2e:83:1e:b7:a0:ca:58:
6a:59:a1:d7:a7:59:93:14:c0:e1:6d:7f:0b:c2:5a:
b0:5e:3b:e9:7f:13:03:93:21:6c:78:40:ef:f8:88:
cb:12:d2:d3:2c:fd:51:e9:7c:02:bc:09:34:4c:cc:
0d:2c:9f:a2:ed:fb:f5:dc:0e:ce:99:c3:27:bb:35:
af:08:32:da:d0:1c:cd:ec:7e:4c:2f:a6:6c:d8:8f:
24:8e:9e:08:9d:5d:1b:6b:1d:62:fb:e5:eb:ff:7a:
a7:3c:9e:fc:e4:dc:e1:1a:42:00:5f:da:0e:29:c1:
7c:48:bd:97:6c:5d:c5:ac:5e:3c:90:13:ba:a3:50:
cc:d4:41:96:57:5a:56:4f:e3:70:65:f4:d8:57:20:
20:ea:37:96:f9:0e:34:27:31:e3:e7:b0:5f:38:da:
96:d6:e1:bf:06:bc:e3:fb:82:13:04:af:48:17:50:
7b:4d:07:8c:98:ab:c2:8c:67:28:b3:87:74:53:ea:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D3:16:56:CD:1A:6B:6E:C5:0E:EA:D4:51:DA:16:47:EF:FF:17:E0
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:71:dc:92:80:b6:c4:40:bd:7c:0f:d3:f2:2a:63:fb:81:
4a:94:ee:28:d0:db:aa:7d:10:96:c0:0e:15:88:3f:02:5a:f5:
99:ee:2f:ec:8d:6c:87:30:bb:9b:01:9e:ac:3a:43:c2:8f:53:
af:eb:47:b0:8c:fd:3e:54:f9:ce:73:a4:df:ce:82:63:90:35:
0f:10:06:ca:c3:47:df:39:6c:47:3b:c2:5b:4c:c4:49:ba:50:
47:cc:8f:2c:a8:78:fa:ff:98:65:31:76:b2:dc:b7:f4:69:25:
ca:f9:13:86:a9:84:d2:73:58:cb:87:ee:b1:a2:74:f8:80:7c:
d3:51:a3:0f:2a:af:da:c1:28:4c:5d:e6:2d:a0:f4:d1:cd:4e:
01:6b:1f:5e:29:ad:36:3e:56:31:6f:b3:9e:f6:e4:16:2d:f0:
c7:fa:7f:26:17:0f:34:40:21:65:71:e9:22:a8:0c:c4:b6:4b:
6c:e1:e1:2d:86:a9:be:59:e1:f7:8d:2c:00:c6:be:70:c2:60:
9b:51:90:5e:e4:d8:56:0f:5a:07:17:b3:70:6f:58:c0:bf:59:
14:b2:af:54:59:a2:e6:14:41:a4:3c:1b:6c:0c:f3:0f:66:f2:
da:65:f5:c2:ce:e0:ea:f2:d0:db:fe:28:f3:3e:3e:d6:27:3f:
60:1d:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:19:53 2026 by rpki-client