Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: nCUpvrx9LEHRG6m4sXvT0XgTiQVzWpK8Pve7Qy1jv1w=
Subject key identifier: 39:98:2B:E4:D3:46:F9:41:2E:A6:4C:E4:56:70:85:A0:37:CB:45:E1
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019CABD93F58B7D7EDA77FBC2C111A5213FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0AC8
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: FOw5r42nWNLMV59J7IK2v80vDkc9WxTvvL+QEv5Zo6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3f:58:b7:d7:ed:a7:7f:bc:2c:11:1a:52:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=39982be4d346f9412ea64ce4567085a037cb45e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:db:c9:83:1e:05:af:fc:0e:92:d9:3d:f4:
cc:98:5f:b6:57:a8:e4:b6:0f:31:32:a1:00:ed:e6:
92:82:54:6e:37:f8:6b:8f:0c:94:72:a5:4a:4a:28:
3a:a1:c7:ea:1b:df:b4:f3:74:7b:6f:9e:e9:53:2d:
80:ce:0d:56:62:8d:70:1d:30:90:fd:24:5a:85:7f:
f2:44:8a:7d:10:7f:17:48:8e:3d:a5:93:23:ed:a4:
30:3c:b1:1b:13:98:fd:9a:d7:39:f7:fe:06:7a:e0:
ef:ab:54:df:e7:ff:b6:06:ba:9a:ae:6a:84:8f:86:
3a:14:8d:e9:10:95:44:5e:e4:d2:f5:3c:a0:02:08:
4c:d3:13:6e:56:c6:46:3e:7c:6f:21:d4:85:a2:8f:
41:cd:13:9e:14:32:4a:3c:73:c7:5f:17:ea:0b:1a:
10:4a:a9:c8:fa:96:67:38:9a:d9:30:a2:1b:4f:2f:
ad:2c:37:76:92:69:52:ed:7a:df:fe:b2:98:bb:12:
02:5c:d7:75:78:27:56:b2:fe:1a:f2:89:ed:60:58:
43:d1:6d:f2:bb:f3:74:2b:d6:e6:e7:28:f8:e4:66:
5c:5d:69:15:3a:17:10:d2:4b:63:99:9e:28:30:be:
e0:68:eb:0a:7c:82:cc:a1:3d:cc:97:79:1e:eb:4b:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:98:2B:E4:D3:46:F9:41:2E:A6:4C:E4:56:70:85:A0:37:CB:45:E1
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:72:46:ed:4c:e2:d0:97:a2:5d:48:b6:61:17:a0:3b:83:93:
8b:86:ae:f2:0a:28:d7:f0:11:f5:e6:53:1c:76:00:5a:38:5f:
26:c4:29:ac:04:d6:d2:41:71:e4:4d:6f:42:18:7b:4d:da:30:
4a:0b:3f:bb:b6:b8:9f:74:07:8c:f0:30:e4:52:a2:39:24:fc:
83:81:87:f0:34:15:36:59:90:eb:d7:c6:87:7b:df:e3:b0:5f:
5c:62:78:f7:a6:c4:67:fc:da:d7:76:b0:6b:91:15:1e:87:25:
6f:f5:16:4d:91:da:5f:0f:d0:49:69:d4:4e:cc:29:f9:38:e4:
c6:d7:dc:86:c2:13:48:61:87:6c:18:5a:91:fc:04:c0:95:81:
48:6a:57:ff:9a:23:80:dd:68:f1:d9:8c:0f:c2:ff:3c:24:c7:
7c:95:69:51:05:54:87:9c:8c:83:4f:62:8c:99:5c:d4:b6:04:
99:50:e7:6d:d9:aa:87:80:ed:4c:6e:45:ae:ec:2e:8d:1b:63:
b9:7e:c2:dd:05:82:d0:ba:91:f5:4f:d9:c3:44:d5:4b:87:af:
01:b9:89:ea:16:09:71:cc:c8:b0:64:2f:81:d5:4e:bc:f9:67:
69:02:3d:d0:95:b2:f4:14:97:db:73:be:e9:f2:9f:97:d4:0f:
54:8e:f0:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2T9Yt9ftp3+8LBEaUhP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjYwMzAyMDAwMTA3WhcNMjYwMzAzMDAwMTA3WjAzMTEwLwYDVQQD
EygzOTk4MmJlNGQzNDZmOTQxMmVhNjRjZTQ1NjcwODVhMDM3Y2I0NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJPbyYMeBa/8DpLZPfTMmF+2V6jk
tg8xMqEA7eaSglRuN/hrjwyUcqVKSig6ocfqG9+083R7b57pUy2Azg1WYo1wHTCQ
/SRahX/yRIp9EH8XSI49pZMj7aQwPLEbE5j9mtc59/4GeuDvq1Tf5/+2BrqarmqE
j4Y6FI3pEJVEXuTS9TygAghM0xNuVsZGPnxvIdSFoo9BzROeFDJKPHPHXxfqCxoQ
SqnI+pZnOJrZMKIbTy+tLDd2kmlS7Xrf/rKYuxICXNd1eCdWsv4a8ontYFhD0W3y
u/N0K9bm5yj45GZcXWkVOhcQ0ktjmZ4oML7gaOsKfILMoT3Ml3ke60upeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmYK+TTRvlBLqZM5FZwhaA3y0XhMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3JG7Uzi
0JeiXUi2YRegO4OTi4au8goo1/AR9eZTHHYAWjhfJsQprATW0kFx5E1vQhh7Tdow
Sgs/u7a4n3QHjPAw5FKiOST8g4GH8DQVNlmQ69fGh3vf47BfXGJ496bEZ/za13aw
a5EVHoclb/UWTZHaXw/QSWnUTswp+TjkxtfchsITSGGHbBhakfwEwJWBSGpX/5oj
gN1o8dmMD8L/PCTHfJVpUQVUh5yMg09ijJlc1LYEmVDnbdmqh4DtTG5FruwujRtj
uX7C3QWC0LqR9U/Zw0TVS4evAbmJ6hYJcczIsGQvgdVOvPlnaQI90JWy9BSX23O+
6fKfl9QPVI7wqQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:14 2026 by rpki-client