Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: Y2kbUn6dH8F6w2ke2Y9VPqulzkJEA0dzdqvO4r5MySo=
Subject key identifier: D2:4D:1D:9F:90:09:78:DE:C2:56:27:CB:84:19:0C:BA:F7:79:52:06
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019DA3AF1729FE3E80957EC5AAE774B15689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 080D
Signing time: Sun 19 Apr 2026 03:00:54 +0000
Manifest this update: Sun 19 Apr 2026 03:00:54 +0000
Manifest next update: Mon 20 Apr 2026 03:00:54 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: ykcvc8zUCqO10SP9MJJs+MaAyI0ZQ/Yy5xQGZ2x6nac=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:17:29:fe:3e:80:95:7e:c5:aa:e7:74:b1:56:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Apr 19 03:00:54 2026 GMT
Not After : Apr 20 03:00:54 2026 GMT
Subject: CN=d24d1d9f900978dec25627cb84190cbaf7795206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:4d:ed:8c:83:87:6e:f8:0c:70:76:e7:ce:
59:20:b1:2c:fe:b1:1b:06:11:10:75:fc:1d:87:82:
3a:43:4a:8a:77:87:d4:45:51:c0:86:4a:e6:cd:38:
ff:1e:51:b8:d3:9f:ab:32:c4:d7:07:be:34:e1:42:
7a:b8:be:88:70:30:56:80:ae:1d:e9:88:b0:b8:6d:
8c:6f:d5:9e:e2:32:e0:e4:26:e3:5a:ba:55:6e:ab:
7d:05:ab:8c:a4:9b:22:3e:9d:33:6b:34:85:f7:a5:
cc:c6:ca:cf:e5:84:06:a8:c0:bb:dc:13:6f:44:18:
f2:81:87:0b:46:b3:35:1f:1a:bd:b7:32:d2:37:ea:
fe:65:bf:c1:ee:26:79:0b:79:71:81:96:ea:76:71:
b8:36:af:5e:97:1b:dd:66:1e:47:7f:2c:c8:f7:c9:
55:ed:9c:b0:38:f7:26:5d:ca:58:03:9b:8d:fc:f9:
d4:f7:00:7c:5e:2d:bf:65:44:02:19:35:ed:13:59:
a5:fd:71:3b:46:89:9e:43:f9:0e:53:3d:43:04:ae:
93:42:44:21:a9:1d:07:25:32:a1:9f:82:91:08:2e:
08:60:ee:ad:8c:ca:17:5c:49:7e:d7:45:9a:69:4b:
62:ed:42:fb:5a:76:6c:c7:2a:32:b7:a2:7b:52:16:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4D:1D:9F:90:09:78:DE:C2:56:27:CB:84:19:0C:BA:F7:79:52:06
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8e:90:41:be:b0:f7:b6:7f:31:bf:b7:ee:d3:c4:1b:b0:36:
9b:cd:54:23:56:a6:f3:11:87:b6:db:9e:80:7b:c1:43:50:91:
f1:07:38:9b:c9:0f:3f:fe:48:06:cb:d3:30:8d:6b:68:27:d6:
cb:41:30:9c:90:d7:15:2f:ad:5f:64:a1:9c:ae:f0:56:fc:a8:
aa:c3:c2:e1:2c:54:55:f2:cb:44:c3:fd:52:80:d1:94:03:7c:
36:68:5a:4e:b2:70:4f:86:8c:33:ce:d3:79:79:74:47:67:da:
b9:46:de:66:3a:91:31:ff:6f:f1:8e:1b:2f:c6:cb:f4:35:9d:
48:ad:08:58:77:3e:2d:e4:30:8d:48:97:5d:4e:9c:38:14:d9:
22:87:cc:7c:aa:19:55:6b:b0:a3:39:ab:3c:27:9e:77:e6:fc:
cf:7e:4e:ec:4c:e7:77:76:eb:4a:57:f6:1b:82:f1:25:0d:33:
b7:21:5d:6a:0e:8e:84:fa:71:9c:bf:26:f8:8a:e8:56:dd:2c:
6a:41:9e:bd:0a:61:14:1a:f9:74:37:1c:33:e2:8f:27:1f:17:
73:b3:16:41:f5:0a:92:b0:58:93:1f:28:7a:c9:8d:02:4f:ec:
2b:d8:21:6a:b5:c1:a5:31:95:bf:66:2e:e3:36:71:15:cb:33:
64:0f:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:00:25 2026 by rpki-client