Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: YLCB/oev1/fCaUAm08SDfdv2sJFu/QUf+m2A+SXNeFo=
Subject key identifier: F9:95:63:63:2B:3D:F7:83:F8:4B:5A:E9:44:E0:8D:41:9E:0B:84:7B
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019D262851384B89A6482244E304BCB0C947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0D04
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: zwrVVYi4UahLMbPo1xXFh+xcSF8u2JtCherTYBiv2og=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:51:38:4b:89:a6:48:22:44:e3:04:bc:b0:c9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=f99563632b3df783f84b5ae944e08d419e0b847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:d8:b4:a7:77:51:4e:8b:bf:35:20:cf:b7:
23:fd:06:a0:ab:46:9b:3a:75:03:a3:af:49:75:72:
58:5c:42:c8:2e:cf:ef:17:f7:01:47:45:95:51:d0:
84:87:77:76:66:cc:95:5e:a0:42:01:b5:c0:c5:5a:
8d:68:f6:43:cd:a7:5d:18:de:83:ad:e0:43:fb:8a:
6d:ad:51:37:42:06:c1:d5:d3:d2:29:a7:8c:3e:7f:
54:7a:02:2b:38:60:e6:e2:b2:16:11:69:01:8e:b2:
c5:62:6f:ea:ad:ff:74:2c:e8:36:83:18:21:b6:e1:
b3:4a:b2:1e:42:ae:f1:3d:47:36:3a:3c:5b:6a:2e:
53:ca:43:08:1e:83:5c:52:6f:c9:3b:09:df:57:ff:
83:31:16:ba:e3:21:0e:79:79:dd:9e:5b:90:83:d9:
11:16:5f:e7:96:d6:d7:a7:25:e1:9a:7a:fd:d6:39:
df:4e:ad:e8:25:cb:f5:ae:d9:59:80:9a:d1:b2:2d:
3e:ee:d6:f8:65:45:a3:72:fc:9c:f5:e7:1b:4d:82:
b9:ac:26:b0:2a:de:7a:81:62:27:2f:50:3d:e6:e6:
85:54:42:81:9d:a4:57:2b:d4:9e:66:c7:f0:d1:ca:
1d:e1:7e:b4:16:53:ab:ef:41:b1:04:10:0a:f8:dd:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:63:63:2B:3D:F7:83:F8:4B:5A:E9:44:E0:8D:41:9E:0B:84:7B
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:10:ad:ea:bb:4c:58:4b:a0:fb:64:b2:53:94:4a:ae:35:1e:
f0:b2:4b:fe:58:60:fa:44:79:5d:5d:f4:a4:22:77:41:1e:68:
b9:67:08:b9:8e:02:07:d3:75:f7:ec:5a:4c:04:03:0e:ba:e7:
cb:c5:c6:a3:e4:60:99:88:59:6e:29:84:24:f4:35:e4:82:d9:
91:bc:1e:71:1a:fc:dc:0e:0e:8c:6e:42:e9:df:43:d6:4d:17:
ab:6e:d5:f7:c8:a9:5a:d9:ec:98:f5:8c:cd:d9:1e:66:1e:c6:
65:aa:92:ba:00:f8:b3:12:a0:83:32:9e:64:80:d9:9d:d1:be:
8f:5c:08:e1:af:17:23:c0:8e:f4:b7:61:7d:a9:b5:e1:23:1d:
0d:f0:d9:3d:4c:9b:82:09:73:25:90:a1:19:f7:d2:07:8e:89:
5d:5d:2a:8d:5d:6a:8e:95:23:4c:f2:52:ec:d8:4d:4b:0e:f1:
60:b3:7e:08:07:fc:e4:0a:b4:33:b9:b8:8f:bd:ed:15:ef:4f:
c5:5a:0f:ad:4d:bb:92:64:09:e8:83:26:05:19:25:0f:e4:ff:
83:0f:e6:c4:af:86:30:57:48:23:99:6c:7d:15:e2:36:69:ad:
2b:e7:33:ac:3f:ac:94:2e:d1:d8:b9:0d:82:bb:a8:68:11:c7:
ab:97:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:41 2026 by rpki-client