Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: ghCAgbeZsiP4wswwtmilCM1pxm1+XlVCFcl+Iu5swAs=
Subject key identifier: 23:C1:A3:08:C0:6F:85:25:05:92:FF:E2:09:BE:AB:46:88:B5:81:66
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01A0C332620AF247696E2893DE09C65619A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 09AB
Signing time: Mon 21 Sep 2026 09:00:53 +0000
Manifest this update: Mon 21 Sep 2026 09:00:53 +0000
Manifest next update: Tue 22 Sep 2026 09:00:53 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: lF4x8zanzg6gzSDWfoYfwHN1Ahs51yWXxWupkBRXe4E=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:62:0a:f2:47:69:6e:28:93:de:09:c6:56:19:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Sep 21 09:00:53 2026 GMT
Not After : Sep 22 09:00:53 2026 GMT
Subject: CN=23c1a308c06f85250592ffe209beab4688b58166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:49:40:08:27:4d:ef:ab:88:00:5d:b4:de:
2f:a4:56:8d:41:e1:94:79:72:8c:71:33:f9:d3:f2:
32:8b:d0:05:83:68:2b:67:c9:39:b8:b6:d3:81:87:
0f:be:6d:65:6b:0a:a3:c3:9e:c6:f8:71:5d:3c:8a:
7b:6b:35:e5:b8:42:b2:dc:f9:03:03:b6:f7:3b:5c:
55:0f:68:a0:58:71:97:c0:81:15:0f:24:16:84:b7:
cb:69:1a:d5:e5:e8:55:15:73:71:2a:cd:af:b9:75:
e4:3f:57:73:ff:85:d8:11:b9:72:c5:a8:37:b2:7c:
b4:d5:45:0e:ed:8c:4f:3a:f7:77:7e:fe:c8:6a:dc:
d3:f6:29:71:7e:26:56:fc:27:7e:62:d1:54:00:30:
80:1f:14:f1:f4:1b:4a:26:9e:b7:2b:87:fa:14:80:
9c:ab:c0:99:cb:1d:66:b6:87:af:f9:79:c1:f8:fb:
08:d9:55:73:c7:c3:89:28:1f:d3:30:2f:1b:8f:c8:
66:d4:fc:76:84:9f:db:0e:82:22:c9:cf:c4:5b:7f:
0d:91:2b:83:2b:5c:49:f3:eb:9f:53:06:57:c4:93:
41:33:9d:05:e9:11:b2:96:1d:ec:ba:26:97:c4:fb:
d0:08:60:47:09:9d:b2:5a:fe:5a:f3:06:89:15:17:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:A3:08:C0:6F:85:25:05:92:FF:E2:09:BE:AB:46:88:B5:81:66
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ea:c2:5c:72:38:2a:65:a7:e5:a6:41:49:bc:43:36:e5:3f:
f1:d4:5e:9a:75:a1:d2:ce:c6:96:da:a7:63:6d:67:7c:12:b5:
82:55:e7:f1:f5:20:45:b4:b7:62:e2:7c:16:b7:ae:61:52:e4:
d8:b7:43:b7:03:76:6e:be:38:ca:1e:17:5b:2d:1b:6f:ca:72:
fb:74:82:71:6e:ac:60:82:0a:1b:6e:22:9a:b6:5b:58:98:0d:
5c:f3:22:88:f4:2a:c4:74:c9:eb:38:b4:ef:40:fb:95:a2:a0:
99:ff:f6:69:cf:b5:33:ab:60:1a:0c:50:ad:76:f0:1f:f2:06:
a8:f0:5f:8e:f4:33:3c:2b:75:c9:f9:f9:2c:f8:1c:e0:42:6d:
ce:11:e8:0b:a5:32:44:ef:cf:65:c0:4d:b4:d9:72:ae:98:48:
d8:5c:13:69:9a:59:58:36:c2:d3:6f:94:6d:e0:ac:7f:8a:b2:
a2:12:b4:4b:92:d3:36:69:9b:39:31:61:4a:bf:7d:2b:e4:49:
4c:10:6a:87:ce:22:24:2e:37:e2:97:b8:90:04:e3:87:1c:6f:
a7:8b:8f:61:5b:5a:49:f7:51:59:a8:03:1a:40:9f:fe:18:1b:
86:04:44:5c:38:72:b4:2c:20:18:48:68:da:30:b9:9c:dc:e2:
ea:62:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:28:58 2026 by rpki-client