Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: zDypwC3F6EirCz6tl7+wG0stnB56GSGpTMSrZEvzveE=
Subject key identifier: 4E:6F:A5:E8:50:8B:9C:5A:A7:DC:73:3D:3B:E5:6C:76:85:6E:E6:9D
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019D38D3DF86147FBD782A466A215C000A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0B11
Signing time: Sun 29 Mar 2026 09:01:42 +0000
Manifest this update: Sun 29 Mar 2026 09:01:42 +0000
Manifest next update: Mon 30 Mar 2026 09:01:42 +0000
Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: 4vaW5wperdMpxo/otTFhRMPCKSTyuCTjWwvTqTmg7j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:df:86:14:7f:bd:78:2a:46:6a:21:5c:00:0a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Mar 29 09:01:42 2026 GMT
Not After : Mar 30 09:01:42 2026 GMT
Subject: CN=4e6fa5e8508b9c5aa7dc733d3be56c76856ee69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:0a:4f:65:7d:7a:05:28:44:b9:f2:fd:40:
25:21:91:dc:2b:9e:b5:d7:fc:05:f2:c2:9b:19:d2:
76:c8:ef:0f:4f:f6:18:e0:a9:05:73:1f:a6:c7:cd:
88:0f:ce:e7:e6:46:aa:9b:a2:4e:a0:39:96:e4:63:
90:de:d9:df:18:33:db:59:76:f5:be:83:0d:55:73:
49:fe:7e:6a:52:92:3f:e3:0a:85:5c:b1:bc:3f:bd:
72:c5:22:08:87:d9:14:87:a2:27:e8:37:73:e4:93:
81:8c:2e:28:c8:1a:13:07:8f:f8:1e:19:de:ad:71:
e0:4b:4a:7b:77:49:8d:c9:d9:82:20:c8:f9:e0:77:
78:0b:f9:0e:42:67:9b:40:2f:60:f4:57:da:fa:d0:
66:1b:d6:7d:d8:9c:d4:22:50:0d:66:05:9a:5c:ce:
c2:cd:85:a0:98:00:5e:8c:64:b8:9b:ce:2f:64:78:
3a:7e:38:64:9a:5c:c8:aa:f0:bb:8b:e8:38:7d:c4:
20:75:de:f9:b9:18:35:89:35:53:4a:db:4d:89:19:
87:90:74:d9:9e:65:d5:f7:5c:74:16:b9:08:59:1f:
11:e0:0d:51:74:51:0a:bc:76:2e:5b:9a:fb:58:59:
c7:9a:e4:7d:66:56:d1:1a:28:17:33:81:b7:04:36:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:A5:E8:50:8B:9C:5A:A7:DC:73:3D:3B:E5:6C:76:85:6E:E6:9D
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:c8:58:a2:9c:0f:11:66:96:29:58:a9:0e:49:bc:1d:20:
27:8f:d9:99:d1:b4:fa:e8:4f:6d:b9:d6:58:22:f1:b9:d4:9a:
86:26:32:b5:c2:1f:b5:05:95:4a:32:c3:c2:6b:cf:e3:a0:c6:
7f:1f:56:40:27:2d:ee:be:22:e2:fd:9b:3c:3b:4d:4f:d7:fb:
b5:18:af:47:77:e3:d4:3c:68:26:1e:6a:48:c6:0b:52:3c:ef:
50:8e:b8:50:3e:35:13:4f:75:30:04:3d:3d:f4:42:b1:6c:db:
a6:c0:4b:e8:03:b9:09:92:eb:a4:4a:59:d3:d5:ac:04:f5:3d:
f4:f3:2b:fe:0e:91:46:12:19:71:de:3a:5b:ea:38:48:24:f5:
58:43:c5:d1:af:58:27:13:b8:71:2e:01:9b:47:12:9a:37:97:
0f:05:13:7f:da:8d:0d:e0:09:5e:97:d3:95:7f:57:7d:da:3b:
a1:fa:3d:8b:08:17:10:59:41:3b:67:10:56:4c:78:18:6e:21:
0e:6b:7a:7a:15:78:37:28:64:5a:b9:18:ec:04:3b:2f:e7:96:
21:5b:58:cd:f8:cb:b1:63:e3:4d:48:4f:bb:bc:31:92:2c:37:
85:69:a7:2f:9d:d6:2b:6f:d9:9d:d5:21:67:c1:86:c0:eb:bd:
2b:82:03:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409+GFH+9eCpGaiFcAAoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjYwMzI5MDkwMTQyWhcNMjYwMzMwMDkwMTQyWjAzMTEwLwYDVQQD
Eyg0ZTZmYTVlODUwOGI5YzVhYTdkYzczM2QzYmU1NmM3Njg1NmVlNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaEKT2V9egUoRLny/UAlIZHcK561
1/wF8sKbGdJ2yO8PT/YY4KkFcx+mx82ID87n5kaqm6JOoDmW5GOQ3tnfGDPbWXb1
voMNVXNJ/n5qUpI/4wqFXLG8P71yxSIIh9kUh6In6Ddz5JOBjC4oyBoTB4/4Hhne
rXHgS0p7d0mNydmCIMj54Hd4C/kOQmebQC9g9Ffa+tBmG9Z92JzUIlANZgWaXM7C
zYWgmABejGS4m84vZHg6fjhkmlzIqvC7i+g4fcQgdd75uRg1iTVTSttNiRmHkHTZ
nmXV91x0FrkIWR8R4A1RdFEKvHYuW5r7WFnHmuR9ZlbRGigXM4G3BDZrIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5vpehQi5xap9xzPTvlbHaFbuadMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOzIWKKc
DxFmlilYqQ5JvB0gJ4/ZmdG0+uhPbbnWWCLxudSahiYytcIftQWVSjLDwmvP46DG
fx9WQCct7r4i4v2bPDtNT9f7tRivR3fj1DxoJh5qSMYLUjzvUI64UD41E091MAQ9
PfRCsWzbpsBL6AO5CZLrpEpZ09WsBPU99PMr/g6RRhIZcd46W+o4SCT1WEPF0a9Y
JxO4cS4Bm0cSmjeXDwUTf9qNDeAJXpfTlX9Xfdo7ofo9iwgXEFlBO2cQVkx4GG4h
Dmt6ehV4NyhkWrkY7AQ7L+eWIVtYzfjLsWPjTUhPu7wxkiw3hWmnL53WK2/ZndUh
Z8GGwOu9K4IDLw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:57 2026 by rpki-client