Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: bNY1xDuLKDpqKVAUagWXPOauWCVjCmXaxL1QNlAcu58=
Subject key identifier: 5D:E6:F6:E7:FD:68:7E:B2:AA:BD:1E:D1:79:9B:4F:9C:E9:BA:25:D2
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 01A13CDC9D82275975BA658791E9691ACD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0F22
Signing time: Thu 15 Oct 2026 00:00:53 +0000
Manifest this update: Thu 15 Oct 2026 00:00:53 +0000
Manifest next update: Fri 16 Oct 2026 00:00:53 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: jGPyF4l8+HxJo1G60Mh9sLpsY3rsQ49icEzrDL35MVc=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:9d:82:27:59:75:ba:65:87:91:e9:69:1a:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Oct 15 00:00:53 2026 GMT
Not After : Oct 16 00:00:53 2026 GMT
Subject: CN=5de6f6e7fd687eb2aabd1ed1799b4f9ce9ba25d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:bc:a8:3a:11:a4:ba:e7:11:ba:6d:c8:f0:
78:bf:52:3f:ce:48:ef:42:6d:24:6f:3b:6c:e7:08:
7e:f9:6b:4f:d5:c1:52:cd:f2:d5:fb:cf:ed:4b:15:
a9:7c:3e:23:c7:1a:59:a6:87:fb:43:30:d5:63:e0:
49:1f:09:62:a5:85:aa:45:12:66:d7:ab:54:81:cf:
9b:ff:4e:eb:f4:99:6d:bb:dc:ef:e3:a7:66:01:91:
02:8d:dd:b6:17:33:30:d3:c5:fc:46:85:11:33:05:
65:d1:77:8b:6a:15:0a:4a:79:4e:6e:21:79:5b:03:
ca:05:77:67:3e:2b:2d:2b:02:bd:06:7d:c5:81:4a:
11:55:c9:08:77:34:d3:bc:1d:09:30:2d:ab:99:c8:
4d:96:19:02:d9:30:1a:16:d7:3e:7e:aa:df:1f:70:
e8:74:ef:9e:a4:58:4d:cd:95:88:8c:7f:f7:e0:fc:
88:a9:37:40:5e:b4:90:95:0d:b2:ec:bb:a0:2e:4e:
31:39:7e:cd:75:ba:07:8e:af:89:26:f3:a6:4d:88:
dc:9c:e4:cc:03:6c:df:46:1e:2b:f4:20:cb:5f:75:
86:fb:2a:4f:45:cd:77:b0:a7:d4:fa:b2:df:cb:44:
0a:15:bf:ee:0a:d3:8f:16:6f:e4:b4:74:0c:80:6c:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:F6:E7:FD:68:7E:B2:AA:BD:1E:D1:79:9B:4F:9C:E9:BA:25:D2
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c4:ec:ad:02:a6:29:ba:81:97:f1:38:4a:3f:1e:eb:31:b3:
ab:a0:2d:d8:11:1d:d2:7e:40:0a:02:63:b0:90:66:c2:ad:b1:
a0:06:c7:f6:88:6b:0b:f2:33:77:52:02:30:0d:bc:3b:20:9a:
ef:4d:70:ce:07:65:b3:25:71:8e:a6:bb:3c:12:7a:70:e6:eb:
aa:1a:38:3b:eb:a2:20:45:26:69:ad:b1:09:e2:fd:9e:32:23:
63:9f:e7:2b:47:4d:04:47:b3:73:57:78:51:f9:3c:0c:04:53:
6e:50:09:32:21:66:ba:d7:eb:89:ed:8d:8e:ea:ae:bd:21:aa:
da:e5:97:07:47:c9:4f:8e:14:5d:43:e4:50:a3:21:02:59:8e:
53:92:2d:8f:fb:b3:a4:ce:0d:66:5f:81:2c:a9:a0:47:50:d0:
3a:4e:cd:e8:33:ce:ba:a5:e2:93:78:0b:bb:ee:18:99:f7:71:
b5:7a:bc:87:fa:47:52:86:03:27:d5:4e:f7:4e:00:4b:f0:52:
4c:be:21:ec:70:c2:25:e4:1b:a0:5d:1b:44:b0:2e:bb:99:fb:
7a:69:2e:9f:93:6a:98:ab:6b:5e:18:af:26:7f:04:97:39:53:
26:41:ab:ff:0c:71:b5:21:60:07:98:cd:18:01:3f:bf:dc:16:
8c:da:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:46 2026 by rpki-client