Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: WbvGrorZKxAIHXCSMGZiJbw5xGq6AvD4p2eseYrLse8=
Subject key identifier: 92:26:4D:CA:3F:AB:0E:CE:FA:4E:B3:DE:84:19:74:0D:C1:97:02:D4
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019FAC75C0C37CCD0EFD8C39DB63C8012819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0C56
Signing time: Wed 29 Jul 2026 06:00:25 +0000
Manifest this update: Wed 29 Jul 2026 06:00:25 +0000
Manifest next update: Thu 30 Jul 2026 06:00:25 +0000
Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: N56eetQGOQ1b4niH9XdhZ2Xy5H5IT5PTZ5hsyPvyNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:c0:c3:7c:cd:0e:fd:8c:39:db:63:c8:01:28:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Jul 29 06:00:25 2026 GMT
Not After : Jul 30 06:00:25 2026 GMT
Subject: CN=92264dca3fab0ecefa4eb3de8419740dc19702d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:32:2e:c6:11:52:73:c5:cb:40:4f:f3:3d:
2f:f6:8c:0d:19:c9:bc:a2:7c:7c:2f:e7:e2:e0:a2:
d0:b8:2c:28:a5:16:51:74:01:ca:2f:d0:70:ec:c6:
fa:88:48:76:13:a1:5c:eb:f7:2a:06:a3:9e:b8:6d:
c2:bb:b2:f5:f2:a4:4b:8d:a8:9e:b7:7e:03:3e:55:
4f:61:cc:b0:87:a0:c1:ef:35:13:10:ea:43:56:3e:
23:01:8a:6a:9e:05:b4:d7:91:14:53:7e:f3:06:7b:
b3:d1:12:49:83:19:5c:5a:ac:c4:1a:95:be:2f:fd:
80:2f:59:bc:cf:18:f0:24:a6:1e:63:b1:a6:bb:f4:
dc:6b:46:c6:f4:d3:49:c6:17:19:53:95:15:9b:0e:
31:c8:8e:09:6c:a1:57:3c:3c:60:bd:12:06:7f:b1:
fe:f8:60:72:ce:38:09:52:0c:36:35:79:a1:77:20:
62:b6:c8:d4:76:62:01:2b:6c:fe:52:63:b1:8b:e5:
cb:28:47:c1:41:b3:96:56:57:15:6a:06:4d:96:bf:
95:cf:b4:a7:a9:7e:e8:e9:96:cf:54:55:b2:f3:9d:
bc:72:04:68:a4:53:89:27:ae:ef:bb:25:8a:69:f4:
24:b2:35:0a:7d:fe:3e:db:5c:ae:10:e8:20:1c:b5:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:4D:CA:3F:AB:0E:CE:FA:4E:B3:DE:84:19:74:0D:C1:97:02:D4
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:aa:14:bb:91:a4:f7:a1:c1:a7:6c:95:c9:00:73:92:69:32:
e5:0d:ad:5b:fa:07:3f:db:a9:a3:40:43:68:2a:2f:4b:7c:34:
1e:56:c9:ef:4f:ca:35:48:1b:fe:6d:64:31:25:2d:57:57:c4:
8a:4a:62:56:43:34:96:b3:b3:d1:06:25:ca:23:63:ab:a4:3f:
17:21:97:5a:5c:37:1a:a9:25:ea:8e:f5:39:26:d9:0a:c9:b6:
80:4e:ce:e8:9f:33:2d:ed:ea:92:c3:5f:9e:53:38:21:6d:e2:
6e:ef:dd:66:d5:4c:9e:ec:8b:05:f3:99:65:cd:95:47:42:4e:
df:f0:40:e9:bd:a0:18:09:e5:ad:84:f4:73:e4:73:42:be:64:
98:78:e2:c0:3d:ec:5b:fa:23:ad:6c:b9:40:78:e4:ac:11:5e:
ae:4f:ee:ad:f0:b5:c7:e3:9b:b1:14:f2:fe:e2:a6:18:7c:21:
46:71:3d:e0:39:23:bb:d8:51:08:a5:e8:4e:45:19:e1:1e:bd:
7c:d9:df:11:af:ee:34:81:ea:a1:b7:ed:05:2c:14:ae:f9:09:
2b:ca:98:a1:87:a6:9e:7e:77:fd:5a:9c:19:0e:f3:e3:aa:b7:
9f:d1:19:f3:22:6e:97:cf:7e:0c:d9:22:ac:d1:cf:bf:74:15:
16:b3:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:16 2026 by rpki-client