Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: 4EcAguCVPv9IZQ05sVQGIEJcxkguS+JUt5eVMdqQt2M=
Subject key identifier: A6:78:2D:8F:E1:81:AA:57:B5:9C:93:25:E8:1C:40:E6:39:56:02:86
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019D99628D2F8CF9A61EA6EB38FAD3B5E154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0B43
Signing time: Fri 17 Apr 2026 03:01:05 +0000
Manifest this update: Fri 17 Apr 2026 03:01:05 +0000
Manifest next update: Sat 18 Apr 2026 03:01:05 +0000
Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: OhMxXuhnVe/BwlCNbKQCSUeXoIbxf+mERet5GzGtr4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8d:2f:8c:f9:a6:1e:a6:eb:38:fa:d3:b5:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Apr 17 03:01:05 2026 GMT
Not After : Apr 18 03:01:05 2026 GMT
Subject: CN=a6782d8fe181aa57b59c9325e81c40e639560286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:2d:0d:6f:93:d6:1c:b4:79:61:8a:7c:82:
b3:d3:e3:94:cd:75:cf:62:5f:04:9a:17:75:47:70:
2b:77:14:d5:48:af:f0:f3:f3:3b:e6:6d:ab:7f:5d:
8a:71:56:e9:dc:e8:64:13:09:9c:38:05:5a:a2:37:
ff:6f:cf:fe:e9:a9:5e:e2:2f:b2:87:d7:46:32:be:
0f:cd:03:94:2b:fb:e0:cf:0b:cc:bf:25:8a:67:b0:
45:aa:97:15:eb:ad:71:40:a0:26:72:72:b3:7d:66:
89:10:72:71:e0:11:b0:5f:f6:7f:c2:c8:fd:70:09:
6a:b4:79:5d:6e:6c:97:4f:95:09:0d:91:c0:2c:90:
31:32:47:7b:76:a4:35:6c:41:61:6a:2d:80:4c:02:
19:41:5a:9c:2f:4b:4e:22:3c:ae:67:c6:4e:dc:e9:
7e:cd:6a:74:d2:a6:b0:92:7c:ba:ce:fb:2b:74:62:
9a:20:44:f7:b0:40:92:d5:65:9a:b4:9b:2e:de:37:
ce:78:fc:83:6a:77:d2:8b:32:6f:83:e6:2c:76:f9:
b4:e7:43:b8:b7:45:3a:ee:99:99:c0:a7:32:41:4e:
bb:fe:49:84:c2:72:43:97:b3:49:90:c8:55:a6:19:
70:6c:f9:64:fc:c6:4b:b3:8a:6f:71:5b:49:65:f8:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:2D:8F:E1:81:AA:57:B5:9C:93:25:E8:1C:40:E6:39:56:02:86
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b7:2e:20:a7:34:40:bf:e1:11:d1:89:4b:dd:4b:12:dd:c2:
2f:44:85:d7:4d:c4:83:11:e5:3f:d3:58:9d:da:f4:cc:74:26:
bc:ee:1b:2d:5c:2b:cf:46:8a:db:d9:50:07:75:d7:19:e3:4c:
d6:3b:a4:ab:96:91:c8:a5:b4:53:eb:c6:d6:6d:e2:07:f7:35:
04:b3:8b:ba:36:e0:04:b6:05:70:20:8c:f6:bf:e6:19:cd:92:
21:1d:7d:c4:30:7d:99:ea:2b:12:91:a5:50:7c:11:ec:14:94:
b1:04:ba:42:1d:a7:e9:80:8d:c8:17:fd:9c:a8:d3:c4:f2:44:
8e:77:14:55:93:a6:2c:cb:11:56:93:4d:a1:1e:20:77:91:10:
9b:49:4d:ac:0c:9d:73:f5:5d:eb:a9:80:35:77:10:17:40:a7:
e0:53:45:fd:84:ea:8d:dc:6c:33:bc:38:ab:b4:84:26:fd:3a:
5d:18:03:eb:26:cb:cb:2c:ed:5f:04:46:c0:9f:1c:8f:5e:70:
6e:a8:4c:04:48:7c:14:e1:01:e2:22:66:3e:9f:8f:9c:e9:ec:
a2:3f:f3:82:33:0e:d3:5b:cb:ca:a7:92:1b:36:75:81:ca:93:
6d:e9:7c:33:1a:ee:ce:14:7d:18:31:2e:6a:36:ca:d0:ca:6b:
a9:e5:e4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYo0vjPmmHqbrOPrTteFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjYwNDE3MDMwMTA1WhcNMjYwNDE4MDMwMTA1WjAzMTEwLwYDVQQD
EyhhNjc4MmQ4ZmUxODFhYTU3YjU5YzkzMjVlODFjNDBlNjM5NTYwMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOItDW+T1hy0eWGKfIKz0+OUzXXP
Yl8Emhd1R3ArdxTVSK/w8/M75m2rf12KcVbp3OhkEwmcOAVaojf/b8/+6ale4i+y
h9dGMr4PzQOUK/vgzwvMvyWKZ7BFqpcV661xQKAmcnKzfWaJEHJx4BGwX/Z/wsj9
cAlqtHldbmyXT5UJDZHALJAxMkd7dqQ1bEFhai2ATAIZQVqcL0tOIjyuZ8ZO3Ol+
zWp00qawkny6zvsrdGKaIET3sECS1WWatJsu3jfOePyDanfSizJvg+Ysdvm050O4
t0U67pmZwKcyQU67/kmEwnJDl7NJkMhVphlwbPlk/MZLs4pvcVtJZfgznwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ4LY/hgapXtZyTJegcQOY5VgKGMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLcuIKc0
QL/hEdGJS91LEt3CL0SF103EgxHlP9NYndr0zHQmvO4bLVwrz0aK29lQB3XXGeNM
1jukq5aRyKW0U+vG1m3iB/c1BLOLujbgBLYFcCCM9r/mGc2SIR19xDB9meorEpGl
UHwR7BSUsQS6Qh2n6YCNyBf9nKjTxPJEjncUVZOmLMsRVpNNoR4gd5EQm0lNrAyd
c/Vd66mANXcQF0Cn4FNF/YTqjdxsM7w4q7SEJv06XRgD6ybLyyztXwRGwJ8cj15w
bqhMBEh8FOEB4iJmPp+PnOnsoj/zgjMO01vLyqeSGzZ1gcqTbel8MxruzhR9GDEu
ajbK0MprqeXk5w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:39 2026 by rpki-client