Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: 60LBKfD5MF/whcV8Dxkmmt3W1dTFobiicRf58LPa6go=
Subject key identifier: EB:F4:AC:50:ED:FE:E0:73:BD:8D:7A:93:38:95:2E:83:5F:AF:25:43
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019FA93DF783D2A81D324E2D0561ECD43AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0919
Signing time: Tue 28 Jul 2026 15:00:38 +0000
Manifest this update: Tue 28 Jul 2026 15:00:38 +0000
Manifest next update: Wed 29 Jul 2026 15:00:38 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: Ti6HwGryWNzNnCyAgmvKvz4OgbQVaddmxRuGj9p20LU=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:f7:83:d2:a8:1d:32:4e:2d:05:61:ec:d4:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jul 28 15:00:38 2026 GMT
Not After : Jul 29 15:00:38 2026 GMT
Subject: CN=ebf4ac50edfee073bd8d7a9338952e835faf2543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:f9:1c:e6:e4:14:7a:7e:c8:71:5d:71:2a:
da:a5:be:11:03:be:d5:52:af:c9:38:d4:27:ed:b1:
fe:24:33:bc:e7:89:cb:c3:59:ed:79:39:13:83:4d:
3d:1a:05:7d:3f:09:b1:b9:d8:67:45:34:cb:0b:4f:
62:f9:19:8c:46:72:d1:62:8f:e6:a0:c3:81:4c:e3:
fd:e4:17:f1:a3:6e:51:4f:a6:56:e6:c1:3a:87:58:
19:55:af:bc:dc:e0:8d:d2:f9:77:74:51:7c:5d:9d:
8a:88:6b:e1:2e:4f:f3:40:a1:8d:07:00:39:54:2b:
d1:90:b1:41:57:70:93:95:4e:59:48:c2:80:9b:ac:
b4:db:a6:b7:5d:0f:d3:0f:2a:af:c9:ad:47:8c:d2:
10:c0:f2:33:50:b2:9a:2c:99:d0:e7:01:af:97:05:
0f:f6:55:be:f5:61:b4:23:a5:db:42:64:67:d8:23:
08:d4:29:b7:a7:42:b8:df:d6:6e:90:ff:6d:a8:8b:
3d:23:70:5c:ad:43:87:cc:59:c0:f6:7e:2e:2d:88:
93:21:0c:77:9a:ae:0b:65:3c:2d:dd:fb:2d:e3:a5:
c1:23:cf:f2:41:81:ff:f1:46:99:e6:62:6c:9a:b5:
e8:5c:27:08:88:cb:57:69:b0:64:6e:29:5d:9b:96:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:AC:50:ED:FE:E0:73:BD:8D:7A:93:38:95:2E:83:5F:AF:25:43
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8a:3a:9c:94:59:59:64:64:c6:44:c2:b4:e5:5e:d7:fa:3e:
74:34:41:e0:14:78:c1:61:eb:b7:51:9d:38:d9:92:53:0f:77:
2d:7f:49:9a:7c:a0:7e:99:94:57:bd:8b:f4:13:f9:01:46:b1:
01:40:8c:9e:2d:d4:43:a7:30:7b:93:72:68:8f:24:21:0b:df:
a8:18:f6:e8:6e:d6:9f:0e:d7:1f:4c:df:d3:64:60:b0:5a:65:
57:f0:2e:5a:64:e8:0c:d0:be:20:b0:53:51:4b:7d:58:08:a1:
df:07:12:68:7d:9a:2c:3f:87:2a:dd:c3:61:a0:fc:20:5a:97:
0a:ba:95:78:91:48:9b:c8:f2:15:dc:7d:76:16:9f:c8:85:36:
38:2d:a2:ed:61:f7:17:79:2c:18:68:47:85:11:3c:a6:d3:15:
46:37:d4:d7:9b:10:a6:d5:c9:d9:86:5f:df:82:d0:5c:8e:89:
e5:73:74:6c:22:c7:3a:aa:e1:8f:f0:89:89:48:6f:3c:b6:c4:
97:55:6d:3d:ca:1c:e6:57:39:0a:b3:4e:6f:91:0d:ed:e1:aa:
02:77:79:a9:90:a8:f5:b6:7b:bc:e9:e4:2a:21:e3:2e:ca:87:
93:7d:ab:15:30:d1:51:0a:80:5b:6e:41:70:cb:18:98:8b:8f:
58:2e:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:23:52 2026 by rpki-client