Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: dQF7JWcKiGYbmx1GHE/2rGvkmf3nQYzErngGuAJJ+3Q=
Subject key identifier: 69:A6:72:F3:79:74:E5:05:93:F9:5C:A9:CF:B7:DD:5D:F3:64:57:11
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019E1D59898648B62ACDDEB132D0589F7954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0D84
Signing time: Tue 12 May 2026 18:01:07 +0000
Manifest this update: Tue 12 May 2026 18:01:07 +0000
Manifest next update: Wed 13 May 2026 18:01:07 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: gtCbzHeboAfv2PBkvR8i59p1p38XSNQNWDt/3ZzfTOs=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:89:86:48:b6:2a:cd:de:b1:32:d0:58:9f:79:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: May 12 18:01:07 2026 GMT
Not After : May 13 18:01:07 2026 GMT
Subject: CN=69a672f37974e50593f95ca9cfb7dd5df3645711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:f6:26:bb:f9:9f:04:ab:9f:61:68:28:82:
47:19:21:2d:68:d9:4d:d0:17:29:1f:34:33:5c:09:
4f:42:13:3a:2e:78:19:d2:9a:9c:c4:28:c8:a9:14:
bb:78:f3:08:d2:84:93:1f:99:26:75:6d:12:be:00:
e5:ca:d7:a1:25:33:29:08:88:a8:84:9e:82:b1:f5:
d8:87:8d:28:e4:e7:82:ec:de:3b:06:cc:a5:1d:b7:
24:9d:01:d0:58:9b:95:88:ce:20:b7:ad:27:07:5d:
71:70:a8:18:56:bf:65:12:31:fe:2d:ec:b1:3f:34:
b5:5a:8c:79:bb:1c:51:f8:98:05:80:95:7c:04:2a:
65:56:5a:64:2e:6c:e3:5d:72:d3:c7:33:af:ba:83:
d6:85:0d:a6:bb:74:f2:c2:94:4a:67:20:d6:a1:c3:
1a:01:37:29:fa:68:aa:c0:a6:4b:ae:66:5e:8f:af:
d1:95:34:85:4c:dc:5a:c2:2b:91:2b:74:57:f7:91:
af:0a:7a:57:2e:9f:52:b7:13:0f:09:3e:ab:93:e2:
fb:60:40:bd:53:ee:02:03:5a:d9:cc:a6:5e:17:e1:
fc:6c:29:2d:0c:3f:41:f2:70:5a:8f:75:e9:d0:87:
0c:78:73:ad:31:68:a9:c9:00:0a:2d:9d:82:25:1c:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A6:72:F3:79:74:E5:05:93:F9:5C:A9:CF:B7:DD:5D:F3:64:57:11
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f0:5e:a4:bd:75:8d:00:60:8f:2e:6f:19:a5:10:91:d5:39:
3b:6c:18:2d:d8:a6:c1:ff:8a:30:b8:fd:ee:b1:78:9e:f5:c0:
0b:df:17:d0:00:08:50:9b:b7:5c:3f:8f:eb:9e:db:9b:ed:ef:
f8:df:4d:54:b4:8c:71:e1:91:49:91:d6:05:34:d0:97:d8:54:
e8:68:2a:6b:30:4a:cd:f5:ee:a1:5d:6a:61:b7:13:f2:14:ff:
d6:84:41:aa:54:22:eb:8d:65:52:db:d5:ed:2c:96:cf:4f:f1:
60:25:cd:96:64:c8:49:5a:5f:cf:5a:ed:36:28:95:5a:83:fc:
cc:87:5e:5f:c8:c9:c7:bf:79:05:17:b2:3e:5d:5c:27:99:74:
f0:10:ac:27:57:65:43:96:c0:89:52:2e:fe:11:a2:70:dc:60:
50:76:6d:b2:c2:e3:d7:62:12:03:7b:ef:d0:5c:4d:43:de:7d:
e6:53:0c:79:84:da:d4:b6:ec:0f:96:4e:4f:c0:39:c5:f9:9b:
15:76:79:e7:d9:99:13:ce:b8:df:69:99:b0:59:2d:e0:35:0e:
15:a0:40:60:48:05:f9:b0:98:d7:f5:ed:85:ce:c2:25:ae:27:
19:01:66:5c:80:49:5a:9a:97:40:32:c8:bc:e1:99:b9:6c:ee:
87:a4:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:47 2026 by rpki-client