Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: NLehVCNDc7Uhlwhw3PokgQOyAkJrib9ucikI/Ek4lUU=
Subject key identifier: 72:F7:07:F1:BB:D0:FC:A3:68:7F:AD:99:36:60:3F:64:A3:F6:6C:BC
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 01A00214220E63DCB54C60A0C49CFC2A6CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0E7F
Signing time: Fri 14 Aug 2026 21:01:08 +0000
Manifest this update: Fri 14 Aug 2026 21:01:08 +0000
Manifest next update: Sat 15 Aug 2026 21:01:08 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: SBxJG8jZELYSDwJWz5T8WNwIb1bsm9vgbRFdIqOKmAk=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:22:0e:63:dc:b5:4c:60:a0:c4:9c:fc:2a:6c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Aug 14 21:01:08 2026 GMT
Not After : Aug 15 21:01:08 2026 GMT
Subject: CN=72f707f1bbd0fca3687fad9936603f64a3f66cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:ad:2b:82:d5:9f:ce:08:02:4c:84:e2:63:
30:d7:38:f3:1b:8e:97:c4:67:44:c6:02:89:b6:18:
13:9f:52:40:7e:84:41:b0:da:af:47:5a:e0:72:7d:
81:90:7e:4d:ac:3b:46:2d:d4:7c:d9:c6:28:cb:f9:
2e:e6:62:3a:1a:36:40:5d:80:8d:c9:5e:84:5b:e6:
56:ab:80:32:af:d4:da:13:c2:97:1d:fa:88:1d:ea:
92:5b:09:8c:e1:e3:b5:ba:b5:b0:e3:c0:44:48:b2:
6e:e6:b9:fe:ca:a3:af:5e:ac:72:c1:19:8a:9b:ab:
13:e3:f5:29:4d:9e:73:7f:e6:d0:39:4d:27:1a:20:
70:b6:c4:de:59:1b:48:c0:59:12:c9:07:ed:85:bf:
c0:c4:b6:05:1c:85:ad:a6:bc:9f:df:33:9e:6f:1d:
5d:bf:e0:15:3e:80:db:83:08:a7:9a:fb:c2:0f:21:
29:90:11:00:6f:ef:9c:9d:0c:e0:ce:7e:cb:51:76:
b1:c5:b9:c3:d0:4d:ee:24:06:51:6b:d3:3d:0c:f9:
3b:07:8b:0f:39:34:12:27:60:f6:10:33:2f:3b:40:
ce:3a:ab:b9:88:7c:e4:8c:bb:7d:aa:6f:5b:6d:86:
a4:a4:03:c8:42:09:03:6d:7a:af:1b:e9:92:99:c6:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:07:F1:BB:D0:FC:A3:68:7F:AD:99:36:60:3F:64:A3:F6:6C:BC
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:30:39:45:b4:41:a1:c4:a8:bd:29:e5:9d:cd:0b:1e:0e:d1:
4e:d3:77:fb:c6:11:90:a4:a3:61:11:8c:74:00:a1:d5:4e:c3:
13:80:10:43:21:8a:c3:42:3b:ca:ff:19:60:85:ce:d2:bb:8a:
f8:e8:73:80:83:36:57:99:f1:05:19:c4:1e:e4:3d:41:91:a6:
c1:69:a2:34:67:b0:de:0b:1a:72:b2:a7:e5:59:bc:5a:52:a8:
a4:3a:a5:f9:ad:93:f2:68:48:4b:b9:89:f2:96:c5:e1:ea:6e:
a7:95:51:9b:c2:2e:c2:fb:7e:0a:88:2d:9b:28:63:3d:75:3d:
7d:4c:37:c2:1a:c7:eb:08:72:b4:69:44:96:88:5d:09:bd:20:
ff:47:13:ba:db:6b:7f:52:59:a1:dc:51:5a:33:65:53:9b:78:
9d:77:d2:6a:15:4e:90:64:25:9b:5d:35:b9:e9:e7:90:85:5a:
07:cc:3a:0d:41:71:c1:ec:b3:44:84:2b:d2:c1:e6:59:28:b1:
bd:c1:7d:d9:fd:9f:4b:b1:9d:67:03:db:a2:69:ce:7b:8b:23:
11:37:9d:e5:52:2c:f3:3f:c1:86:7c:d6:73:9b:14:77:7a:0c:
b5:fa:67:41:5d:fc:fa:d4:8a:9f:ae:e9:ab:2b:0a:1c:b5:a8:
99:ed:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:25 2026 by rpki-client