Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: GtBoTJwzrdFA+dvZK0AnHYDpprf6b3ke8xDo4xm1oSE=
Subject key identifier: 1E:9D:85:A1:1B:C9:AD:5A:31:20:4E:3A:8A:50:B1:6E:60:6F:EA:6D
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A089B0DD8AABD60DB48F1796D456154639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0CC9
Signing time: Thu 10 Sep 2026 05:01:04 +0000
Manifest this update: Thu 10 Sep 2026 05:01:04 +0000
Manifest next update: Fri 11 Sep 2026 05:01:04 +0000
Files and hashes: 1: QtncJqkEgM9pkif2DGDuaV87Vhc.roa (hash: kbejMGw8GQAhGvEYV7Lc9g5XklZ9RaG+4r/fnMC1uZk=)
2: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=)
3: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: oMMQtuF6jjhj/+SwUTuRqlpiTE3zPMtwdmEV9zCKXic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:dd:8a:ab:d6:0d:b4:8f:17:96:d4:56:15:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Sep 10 05:01:04 2026 GMT
Not After : Sep 11 05:01:04 2026 GMT
Subject: CN=1e9d85a11bc9ad5a31204e3a8a50b16e606fea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:0a:eb:98:b5:ff:b2:fa:1b:b9:bf:28:cc:
c4:00:39:e7:cd:d4:8d:a0:11:71:23:55:bd:d9:ac:
b5:ef:9a:0e:f3:a7:f9:6e:df:dd:df:a4:3e:89:5d:
2e:7f:b3:bc:8f:d6:e4:54:09:db:78:d9:90:c4:94:
18:a0:f4:6c:23:78:31:ed:a8:32:01:f3:46:cb:a7:
e1:87:7a:ec:9a:b7:69:1c:b1:2f:fc:98:39:e3:a3:
ee:85:23:33:0e:4e:43:b1:86:09:e0:5c:d1:b4:ff:
c0:29:00:77:ea:95:8f:a5:db:d0:8c:fb:28:1e:52:
55:64:99:6b:35:57:7f:0f:91:b8:9d:78:bc:4e:94:
09:aa:a5:55:4b:21:ed:92:32:ca:3e:a8:99:8a:d1:
cf:6d:59:8c:e5:6f:82:c5:a3:b9:3d:f5:9e:d1:a3:
6d:16:db:81:f4:d0:20:e7:a4:f9:11:be:b6:65:67:
3e:6b:b0:06:16:e1:35:7c:66:c4:80:a2:6a:3c:1b:
74:92:e7:ab:93:64:f7:86:c6:f5:89:5d:54:0f:b1:
56:04:df:12:aa:c7:ff:3c:02:1e:3c:9f:97:61:78:
eb:0c:3d:84:6b:9f:83:f3:c3:0b:9e:61:ca:a5:b7:
64:41:2c:3a:7b:3b:c0:1e:98:1a:d8:9a:91:bc:21:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:85:A1:1B:C9:AD:5A:31:20:4E:3A:8A:50:B1:6E:60:6F:EA:6D
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:b3:64:b8:1c:7a:c4:c0:3e:02:8f:be:2e:bd:39:35:50:
1c:2a:a0:fa:e8:b6:8c:e9:dc:07:f8:d6:5b:30:78:a9:e4:18:
58:b6:93:41:5f:39:63:11:fa:6d:3a:36:47:e4:5c:ea:b4:c2:
f2:4f:29:3b:3b:c2:78:e2:a7:fb:8a:98:43:91:d5:49:3d:8b:
12:89:27:fd:b8:5c:78:ea:20:59:88:db:f7:c6:bb:ac:f1:d4:
05:9b:8a:bc:c3:fa:a1:21:3e:40:4c:64:d2:b3:38:04:60:a4:
2a:21:aa:d2:ef:16:82:1f:15:57:61:20:5f:19:41:75:10:b1:
df:d2:90:23:48:c1:17:ed:1c:a4:04:4b:72:10:db:68:56:11:
d3:0a:99:1f:1d:49:92:b1:e9:a2:0b:58:29:35:cd:07:60:e1:
af:cd:3b:fd:c4:cf:9a:7a:7b:62:6c:ad:b0:52:f2:de:7e:fe:
e5:d6:ba:c2:1b:ff:3c:3a:6d:53:fa:21:71:57:68:a8:4f:08:
20:2d:73:23:b7:a2:07:4f:26:25:c0:d6:27:4d:8b:3a:15:23:
8c:3c:91:60:35:53:72:39:b9:f5:6f:93:07:de:4d:48:58:a3:
f7:5f:e4:d8:03:8c:b1:2e:c7:65:08:7b:4a:43:57:6a:ae:88:
07:21:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:51 2026 by rpki-client