Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: grAkM2qBzCyOZEgEaKHjpLBG2SelXQ+2SKtu279ng7M=
Subject key identifier: 62:3B:9E:F2:C1:23:94:5C:42:45:43:14:56:FD:A4:1E:D7:4A:9D:3D
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019F90231C5BD1F349FF566A72DEFFA71F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0E44
Signing time: Thu 23 Jul 2026 18:00:47 +0000
Manifest this update: Thu 23 Jul 2026 18:00:47 +0000
Manifest next update: Fri 24 Jul 2026 18:00:47 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: xP1+HIwygSsGofX/T87zSB1UU0nwl69wZpu+1t5aWrs=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:1c:5b:d1:f3:49:ff:56:6a:72:de:ff:a7:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Jul 23 18:00:47 2026 GMT
Not After : Jul 24 18:00:47 2026 GMT
Subject: CN=623b9ef2c123945c4245431456fda41ed74a9d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:2f:2b:ca:f1:3c:17:95:4f:14:fb:c0:82:
88:03:26:92:fe:43:bb:44:8f:bf:73:c0:2b:a1:cc:
07:83:88:ba:1f:a7:a9:53:a2:89:fc:04:1f:05:83:
06:84:53:ea:93:68:da:4f:b5:26:3c:3d:42:c1:1f:
ee:73:f9:1e:30:2c:5e:d8:73:4c:fa:d3:62:d0:c7:
da:9d:47:b6:dc:2b:61:02:31:f8:e3:ba:c2:2a:21:
83:02:72:97:04:5f:ea:eb:18:60:d9:73:dd:67:f2:
92:8b:cb:19:19:1a:07:ed:38:68:25:98:3e:78:37:
5d:1a:50:c9:10:40:33:30:23:d5:b1:ca:a3:6f:78:
49:c5:07:0e:35:47:e3:6e:c2:28:12:dc:87:7e:88:
6b:7b:e9:1c:71:02:99:87:f4:c1:15:89:ae:ab:99:
a2:11:7d:a9:33:a2:31:ce:55:dd:a5:9b:4d:d1:84:
d5:a9:42:4e:32:b0:43:85:ca:33:70:4a:50:8c:c5:
c9:e5:d9:d6:02:aa:23:bb:59:66:7f:c3:44:ba:e5:
82:72:01:00:fe:50:fd:8f:30:c8:71:f7:bf:05:8e:
06:8d:c9:94:cf:6e:96:c8:06:60:43:78:d9:da:4c:
33:a5:f7:7e:bd:71:4b:7e:67:d3:4a:86:88:47:6b:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3B:9E:F2:C1:23:94:5C:42:45:43:14:56:FD:A4:1E:D7:4A:9D:3D
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:89:55:b5:e1:ac:74:fb:ac:e1:74:df:ac:9b:cb:06:0d:25:
55:b9:82:6b:8a:bc:9d:f3:7c:b4:06:23:c9:92:a8:80:d2:96:
06:4a:93:97:f9:9c:97:3e:da:d9:38:ce:4d:90:2c:6e:a2:a3:
2c:89:6d:73:c9:94:1e:41:a4:ea:7b:f2:ec:a6:a1:49:ed:45:
02:b6:7e:f9:94:0d:02:42:ae:4e:16:2e:89:16:27:6e:f3:36:
9c:c3:c1:27:4e:b1:8b:16:1f:59:84:e2:3b:ad:df:b1:06:a2:
93:3a:ea:a5:ef:fb:6d:d4:ab:3b:46:9b:7a:f2:a6:ae:89:c1:
b6:dc:6d:53:92:09:46:b9:f8:ed:6b:65:ed:e4:5b:76:fb:e5:
ad:33:9c:9e:05:48:e3:aa:1b:5d:c7:4e:be:ad:d0:44:2e:e9:
fc:14:eb:7a:fd:9e:05:d5:28:05:59:9e:82:4f:e1:3e:14:51:
e4:4b:80:61:81:66:cb:a7:ad:b0:69:ed:cb:66:45:e2:f1:6f:
e7:88:1d:bd:62:05:07:bb:c8:d9:a5:61:a6:88:fd:14:a4:ce:
50:42:2f:7c:4a:74:73:22:2c:57:16:5a:31:69:c6:3d:6b:ff:
28:dc:02:66:59:49:29:0f:8b:f1:22:41:4c:ad:3e:37:7f:e0:
4e:2e:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:42 2026 by rpki-client