Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: 9SmywGA7JKkGpmCyxfFdya/Swhl6dK5bii4IEE1sMvQ=
Subject key identifier: D6:ED:E5:6F:17:BE:02:2C:BD:23:E3:4B:E1:D9:43:91:01:25:B0:BF
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 019B7C8163264076B037BB1ABCB4A2B90658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 17AC
Signing time: Fri 02 Jan 2026 02:20:12 +0000
Manifest this update: Fri 02 Jan 2026 02:20:12 +0000
Manifest next update: Sat 03 Jan 2026 02:20:12 +0000
Files and hashes: 1: AZ5qxXs3sBthXMKoqjSO3VbhNNw.roa (hash: T4J6Jno9APZmLEqazrpUp0SKEpBM9Bo/2KK7p0DkqHU=)
2: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: SWDr/xguP7Ht/gI3yLewGRv9AENdhLGk5qEuvHm6Txs=)
3: WiFpUCuqcY3DootaSsey9OEUf5o.roa (hash: 1TYBSyaxf5CUWNeyL/URlNsQQAt5vkv93TOU8HfOMng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:81:63:26:40:76:b0:37:bb:1a:bc:b4:a2:b9:06:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jan 2 02:20:12 2026 GMT
Not After : Jan 3 02:20:12 2026 GMT
Subject: CN=d6ede56f17be022cbd23e34be1d943910125b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:3e:01:ae:50:24:bf:f1:21:d6:31:99:a6:
6d:ff:24:3b:4f:43:50:d1:b4:da:4b:a1:60:23:a4:
69:d9:56:1e:0c:be:38:34:d6:cc:2e:15:de:5b:53:
e7:5a:79:b7:4e:9d:96:f4:2a:10:71:09:27:9e:33:
04:96:c0:0b:88:55:ca:f6:db:11:d5:c9:17:16:54:
51:49:08:82:af:99:37:64:93:e2:75:8a:a6:c5:5c:
07:16:d2:7f:4f:9a:6f:b5:47:bd:0d:5b:32:17:76:
61:58:71:5b:96:1d:3a:b3:3f:b6:10:45:5c:f8:8e:
d5:52:f8:f0:47:ed:48:96:45:0c:67:0a:61:ce:a7:
09:66:5d:ac:3a:55:87:83:d1:d6:ac:74:de:6f:4a:
19:ed:33:92:78:89:10:ff:44:4e:51:6a:5b:f3:6d:
52:16:83:f4:a3:44:d0:f2:fd:ea:2b:eb:df:cc:81:
5b:68:0e:8e:e9:21:5e:6b:08:01:66:28:c6:fc:fe:
bb:76:dc:be:37:56:f9:f2:64:24:c0:b0:fb:9a:2c:
32:83:30:0c:29:89:a2:01:74:1a:eb:a1:e5:ea:3a:
dd:eb:51:24:e1:8a:05:e7:b5:55:58:28:f7:8e:a1:
db:dd:c7:38:ad:aa:02:ec:57:ae:c8:7b:d2:16:04:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:ED:E5:6F:17:BE:02:2C:BD:23:E3:4B:E1:D9:43:91:01:25:B0:BF
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ad:d1:6e:36:7d:12:30:9e:6e:f6:04:c0:9d:1a:70:00:fa:
85:e7:57:64:85:ea:a9:a5:00:b6:ac:51:b4:4b:e8:e5:0f:97:
50:8e:cc:7a:08:52:68:9f:e1:68:77:00:16:24:75:8b:1a:f9:
4c:d2:bd:04:8e:35:67:72:86:85:86:8b:af:e5:d6:f1:f0:c7:
4e:83:3c:ba:cb:b0:28:ee:ea:24:84:de:68:06:66:05:f7:76:
27:55:f6:bf:4f:9d:7a:3a:a8:55:d3:36:02:57:ec:9a:0d:58:
69:57:78:3a:8c:49:37:a8:d3:b5:25:bd:cb:3e:6c:ba:8e:82:
44:f2:d9:65:aa:ce:b5:23:48:85:82:bd:23:d2:06:6e:aa:b5:
9f:48:b3:ea:fe:63:3b:c7:28:c4:ca:07:8c:4f:14:c3:de:65:
85:ba:81:82:25:d0:74:4d:ec:f6:b3:eb:7c:1d:68:a8:c7:20:
4e:c7:7f:39:26:0a:eb:a2:d5:26:09:f1:2d:a3:e6:99:ed:70:
c6:ee:18:18:c0:32:ce:f2:9b:1e:c2:3a:e7:ba:35:98:bc:2b:
70:36:be:91:12:5e:9f:ab:8e:b0:a8:02:4d:fa:3b:62:92:2f:
81:c3:3e:e9:71:94:ea:97:3b:62:53:b5:8d:01:f6:38:be:b5:
e9:b9:59:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt8gWMmQHawN7savLSiuQZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDM2OWEzNTg5NjFmNzI4NGZiZDU5MWU5Mjc3MzdjZGIw
NWMzNWQwHhcNMjYwMTAyMDIyMDEyWhcNMjYwMTAzMDIyMDEyWjAzMTEwLwYDVQQD
EyhkNmVkZTU2ZjE3YmUwMjJjYmQyM2UzNGJlMWQ5NDM5MTAxMjViMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhI+Aa5QJL/xIdYxmaZt/yQ7T0NQ
0bTaS6FgI6Rp2VYeDL44NNbMLhXeW1PnWnm3Tp2W9CoQcQknnjMElsALiFXK9tsR
1ckXFlRRSQiCr5k3ZJPidYqmxVwHFtJ/T5pvtUe9DVsyF3ZhWHFblh06sz+2EEVc
+I7VUvjwR+1IlkUMZwphzqcJZl2sOlWHg9HWrHTeb0oZ7TOSeIkQ/0ROUWpb821S
FoP0o0TQ8v3qK+vfzIFbaA6O6SFeawgBZijG/P67dty+N1b58mQkwLD7miwygzAM
KYmiAXQa66Hl6jrd61Ek4YoF57VVWCj3jqHb3cc4raoC7FeuyHvSFgTG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbt5W8XvgIsvSPjS+HZQ5EBJbC/MB8GA1UdIwQY
MBaAFAgDaaNYlh9yhPvVkeknc3zbBcNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMt
M2YxYjE2YzZjZDYzLzEvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMtM2YxYjE2YzZjZDYz
LzEvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUa3RbjZ9
EjCebvYEwJ0acAD6hedXZIXqqaUAtqxRtEvo5Q+XUI7MeghSaJ/haHcAFiR1ixr5
TNK9BI41Z3KGhYaLr+XW8fDHToM8usuwKO7qJITeaAZmBfd2J1X2v0+dejqoVdM2
Alfsmg1YaVd4OoxJN6jTtSW9yz5suo6CRPLZZarOtSNIhYK9I9IGbqq1n0iz6v5j
O8coxMoHjE8Uw95lhbqBgiXQdE3s9rPrfB1oqMcgTsd/OSYK66LVJgnxLaPmme1w
xu4YGMAyzvKbHsI657o1mLwrcDa+kRJen6uOsKgCTfo7YpIvgcM+6XGU6pc7YlO1
jQH2OL616blZuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:42 2026 by rpki-client