Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: fAxYLa/5Q+kndTwjgKqpsYZY4+ZaL2p3vqbudZYXcug=
Subject key identifier: 81:10:8D:E7:C6:8E:85:E2:EE:76:50:19:C2:E2:1A:2C:6A:28:C4:61
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019EBDA33410E7177DCE3FCED0B264A903B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 089F
Signing time: Fri 12 Jun 2026 21:00:49 +0000
Manifest this update: Fri 12 Jun 2026 21:00:49 +0000
Manifest next update: Sat 13 Jun 2026 21:00:49 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: b9QE61+KiNROP2rgm+f2tCDiH2Qz3rZiZN3/6CyJDOY=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:34:10:e7:17:7d:ce:3f:ce:d0:b2:64:a9:03:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jun 12 21:00:49 2026 GMT
Not After : Jun 13 21:00:49 2026 GMT
Subject: CN=81108de7c68e85e2ee765019c2e21a2c6a28c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:95:c1:e9:92:83:36:12:a9:d7:d1:95:87:
4f:5c:b8:80:ed:76:39:55:5c:8e:99:dc:72:3c:ba:
ee:cb:0c:bf:44:08:96:98:8b:91:d4:c9:e7:9a:b6:
b1:da:47:6d:e4:59:a0:31:50:2a:1c:37:c0:72:8a:
0c:1e:23:60:32:e3:df:38:29:ab:0f:91:4c:2d:05:
24:36:c8:84:72:6f:ae:f0:a1:3c:00:28:06:7b:0d:
eb:db:5f:cb:d0:79:4d:d7:d7:b2:19:c4:9e:5c:ee:
15:76:ce:ac:ab:e5:1d:c6:57:5f:23:61:1b:56:f9:
21:d4:b7:2e:f2:dd:81:cc:6e:27:25:e0:d9:e0:1a:
f0:19:06:28:f1:9e:9d:66:c0:61:79:2f:82:c7:63:
83:94:44:60:84:cd:2e:34:4f:a0:6e:d7:64:86:fe:
53:83:9b:07:6e:51:68:a1:08:fb:43:a3:67:f4:12:
5c:e1:87:81:01:6e:bf:ba:c2:1a:9a:93:51:5e:de:
70:5d:88:0c:24:4c:b9:c8:a2:e4:8c:e2:8c:b6:b5:
3d:af:18:08:98:28:68:3c:0b:8e:31:70:ef:fd:eb:
d0:1d:40:83:b1:e1:d5:44:11:b8:d8:48:d3:97:17:
5f:a1:bd:48:d8:c1:61:54:38:e0:42:b2:ec:1b:50:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:8D:E7:C6:8E:85:E2:EE:76:50:19:C2:E2:1A:2C:6A:28:C4:61
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:56:13:b8:14:be:d3:1b:0a:46:07:3a:71:1e:10:b0:2a:
03:a1:c1:8f:90:ff:7e:2f:ba:c5:17:d7:64:2e:87:06:54:a9:
40:8d:c9:d4:9d:a9:84:94:2d:93:84:88:50:8f:b9:7f:96:e6:
ed:f9:c5:0f:e5:29:3b:0b:e2:79:8d:85:af:8b:77:67:68:af:
2b:4f:77:04:14:1e:52:da:be:08:41:2e:47:94:20:90:c7:7c:
60:c6:49:ea:87:f9:39:43:ce:d2:1f:a2:b9:11:18:01:44:3c:
04:66:ba:9f:ab:8b:1b:b4:74:f3:f2:fe:f9:f7:01:c5:65:4b:
7e:e2:6c:3c:27:ae:8b:06:98:ad:e1:eb:58:14:f7:ac:18:e5:
1c:d1:8d:0a:8b:57:3b:a1:11:1b:a3:c2:b3:f2:ee:69:f5:15:
49:75:76:52:4d:82:73:21:d1:26:2b:70:8f:24:90:84:15:e2:
60:b2:4e:13:e7:f4:3c:bc:d1:45:45:87:c0:bc:9e:a4:09:a4:
72:55:6c:d9:5f:f5:0a:c6:df:8d:db:43:5f:c6:c4:5a:51:1f:
cb:32:56:56:19:85:81:3d:ab:f9:ac:09:61:d1:3f:a7:52:89:
03:67:a0:95:85:17:34:fe:00:37:58:19:35:4c:94:3c:60:0b:
b2:f9:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:36 2026 by rpki-client