Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: Rcb/h2zQfZ0c6ChhuZdZscuS8t52bjQYXErXc1CzMTI=
Subject key identifier: AD:44:38:A7:C2:0A:A8:B1:8F:E9:BA:63:2E:0D:65:7B:9D:5A:8A:66
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A183078EECEE88AB3FD42C1A576D28492D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0D4D
Signing time: Wed 28 Oct 2026 15:01:12 +0000
Manifest this update: Wed 28 Oct 2026 15:01:12 +0000
Manifest next update: Thu 29 Oct 2026 15:01:12 +0000
Files and hashes: 1: 5YzsLbvo1eEM56OytpeUbwdRlg0.roa (hash: 7piLzYpDBaxI4WC+KagvEaQCtvnYZvzdJriEMBRo3+8=)
2: GXWpqeluVXhrQ1FX4ylENT4ybls.roa (hash: 4f8MGObJtbVZToU9RBfxBl+OUpzPDgB4HsZrgY6RHMs=)
3: QrGTzKfz15J7oy9-TP-tD_sLbiI.roa (hash: dXc9fZMDCjGnjiBrDjJUsuNwkskV/mjNM3qDIRtY4OQ=)
4: QtncJqkEgM9pkif2DGDuaV87Vhc.roa (hash: kbejMGw8GQAhGvEYV7Lc9g5XklZ9RaG+4r/fnMC1uZk=)
5: Tn2k3KmRzT3j_R91Tc7WnsufchU.roa (hash: 5MNnwB7qQZMacN77y3f6DNN0HfjgWzAZ+Oye8YnorEg=)
6: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: HymR8NJ1UAG7isian5/+IS6ozx0zJnRW+rVKlVosZrA=)
7: hU0buaKpB22yX_EoGkJuyCIRcQ4.roa (hash: 7Y+tVijp3ajnkM/X/Omx5ht0/uGZLPAzZwARPB5Sb6E=)
8: kIwxVaszJ0jvZwrY9vQOmrgJJ54.roa (hash: VujkKRSH5a/ek90tKXqBOgg2Ya8vmz2jBWPjuMWSLmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:8e:ec:ee:88:ab:3f:d4:2c:1a:57:6d:28:49:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Oct 28 15:01:12 2026 GMT
Not After : Oct 29 15:01:12 2026 GMT
Subject: CN=ad4438a7c20aa8b18fe9ba632e0d657b9d5a8a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:a0:4c:2f:0a:30:38:29:b3:e9:8f:e2:36:
db:14:09:f6:a2:9e:9b:4f:07:13:e8:85:4f:ab:72:
7f:c1:53:2c:4f:1f:74:00:d9:4b:e8:63:c4:e8:9e:
e7:69:b7:ed:c3:4b:0e:7a:e5:06:0a:ec:21:d5:ba:
f4:19:ac:76:61:02:7a:56:ea:26:dc:73:03:96:47:
f0:a5:ba:ab:c5:ed:c5:2a:e3:d1:37:8c:02:5e:52:
9e:7b:78:9f:06:ae:01:47:41:82:1b:fd:d3:08:28:
88:c5:10:9f:f1:49:86:53:14:40:32:06:22:02:a2:
5a:db:7b:d0:a3:69:70:43:dd:25:93:0a:04:20:a5:
07:0e:0e:ea:bb:0f:68:9c:7b:02:10:b4:52:dc:ec:
0d:d2:4f:f7:00:a3:a3:35:89:b2:8c:f4:62:fd:e6:
90:ab:c3:61:f3:af:7e:24:5e:a6:ff:14:52:83:64:
9a:b6:f5:a1:bb:e5:9a:b1:6e:a4:dc:d7:1b:55:46:
c9:4c:ca:48:5f:b2:87:78:fc:b2:2c:ef:9f:13:e8:
e7:8f:01:bd:cb:ad:1f:c2:2c:7b:6b:a0:f5:b9:c0:
2e:0e:7b:ac:23:62:4d:4f:d1:bf:25:b9:40:c9:41:
09:a6:b9:ef:49:07:ac:1b:19:ad:8c:7d:42:c7:cc:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:38:A7:C2:0A:A8:B1:8F:E9:BA:63:2E:0D:65:7B:9D:5A:8A:66
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0c:da:4c:ca:00:43:33:e7:e4:b5:15:8b:09:a9:3c:28:e9:
86:14:5d:53:75:57:8c:3a:d2:5e:29:76:88:f0:f5:e7:00:cd:
98:17:05:b5:e5:99:77:8c:c8:92:f2:91:10:80:e2:65:82:b3:
05:5f:58:67:c0:e2:c0:e1:ad:6f:72:b7:15:26:13:62:07:fa:
9f:92:62:d3:74:99:2a:53:dc:b2:49:01:4b:23:3a:7f:fa:a9:
c7:d8:74:67:f1:fc:0f:d5:3c:97:b3:01:ee:1c:fb:c9:fa:f2:
99:85:f3:ef:29:ce:5a:55:7b:83:5a:a2:24:f5:8a:ab:d1:c1:
fe:97:d1:59:10:4e:35:b8:8a:b1:29:9a:9e:c2:38:b7:b4:65:
e4:23:7a:6e:33:0b:c6:40:03:f6:fa:c7:bd:64:90:3a:ab:b6:
ac:44:1d:c3:fc:f8:de:c7:e0:6f:c8:bb:b1:d4:c8:c5:a6:ca:
ba:9b:1d:ac:53:53:48:84:fb:87:4a:e5:cf:50:bb:21:55:8d:
95:ca:50:fd:e1:58:99:62:76:78:6e:26:6f:f2:65:07:d7:90:
eb:dc:1c:6b:34:4f:ea:ee:bb:c7:91:42:60:73:4f:62:d5:eb:
55:ef:2f:ec:3f:0b:ee:bf:90:87:b6:8d:1f:76:aa:32:31:81:
d5:18:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:18:13 2026 by rpki-client