Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: uPwV8pGhYt/NUfmOnmWDVuESkTx8xkkw7O1XcSxAufc=
Subject key identifier: B6:1D:7E:28:EC:B2:EF:F0:1F:56:5E:05:C9:D4:6B:7D:CD:8E:29:5D
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019CAC7E3BE54F9285C85FEAA15C80E3E63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 078D
Signing time: Mon 02 Mar 2026 03:01:19 +0000
Manifest this update: Mon 02 Mar 2026 03:01:19 +0000
Manifest next update: Tue 03 Mar 2026 03:01:19 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: 1m0szAMFDMicVsbbLhBee/VZ74UXoJs1EaymWypqJ7I=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3b:e5:4f:92:85:c8:5f:ea:a1:5c:80:e3:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Mar 2 03:01:19 2026 GMT
Not After : Mar 3 03:01:19 2026 GMT
Subject: CN=b61d7e28ecb2eff01f565e05c9d46b7dcd8e295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:87:80:48:8d:1e:b3:b4:58:56:d0:d9:10:
61:bd:31:78:ee:43:d4:1c:00:a4:08:dc:93:0d:e0:
04:5d:ae:d9:4d:30:09:cd:df:97:96:c5:41:ab:36:
19:50:5f:65:57:46:1a:71:88:de:14:e8:01:25:22:
0a:82:83:47:5e:43:3c:94:18:18:e8:ea:fd:ee:96:
cd:04:bd:5a:69:0c:5e:15:03:96:d7:d9:78:33:a3:
90:78:56:f7:5e:a1:9c:76:37:a9:37:11:7f:b7:fa:
08:20:f7:7c:dd:f4:33:4e:8e:52:83:37:6c:9a:3d:
f6:4c:a9:2b:3c:f1:8c:2f:b5:56:bc:bc:83:da:22:
51:9d:35:9b:c3:08:fe:33:75:a0:4b:1c:f9:70:c9:
a9:3f:73:be:fb:6d:00:73:55:ca:63:40:7d:ee:f0:
d3:cd:94:c8:73:63:82:f4:e4:3d:a4:e3:7e:a7:c1:
d9:8e:d2:dc:65:30:65:63:a1:46:58:08:e0:00:96:
ab:a8:1d:c0:99:df:05:31:4d:7d:23:8c:79:a6:64:
41:dd:01:04:f0:c6:3d:dc:b5:7f:94:95:df:1f:97:
83:da:bc:60:56:65:6f:e3:4e:90:ad:bb:4c:d9:9c:
a3:a9:d0:30:1a:45:d4:1b:a6:06:32:c3:cf:7d:c9:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:7E:28:EC:B2:EF:F0:1F:56:5E:05:C9:D4:6B:7D:CD:8E:29:5D
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:45:15:37:76:d4:02:0f:8b:cf:38:0d:18:bf:49:8a:b6:
38:df:a4:e6:f2:a0:a8:63:f5:f1:30:4c:dd:8e:5a:d7:34:21:
8c:2b:e8:b4:43:50:57:27:e5:90:0d:58:68:35:f6:55:b9:81:
0c:81:75:1c:6c:54:5e:94:49:2e:ce:11:90:21:88:b4:62:b4:
42:80:e7:dc:c1:d2:c0:c0:8e:ff:03:c3:17:1b:0b:b2:8f:1f:
5b:79:05:da:a6:44:cb:15:7a:bf:73:6f:2f:e7:2c:27:26:21:
87:1e:9a:a5:87:83:eb:65:f1:e8:ae:e1:fd:aa:45:21:c6:75:
fa:f8:0c:da:18:34:ce:3b:3d:be:d1:63:6a:fe:dc:22:27:ca:
4f:84:35:05:8d:b6:00:24:f3:ae:a4:0e:14:d6:17:7f:de:0b:
e7:aa:36:0d:85:2f:a3:1e:3f:1a:39:1e:64:24:67:64:13:16:
24:6e:46:5e:8d:bf:c8:dc:4f:0a:77:bf:07:a8:7d:4c:60:2d:
4a:62:f4:ce:98:72:b3:79:ed:4f:9d:4f:34:ed:17:f3:b4:48:
85:1f:0a:20:bd:3b:aa:a8:25:4a:1b:c5:be:e2:94:e7:8f:d1:
8f:78:e4:df:64:5c:ae:aa:d6:05:20:e7:02:70:97:42:38:9d:
89:52:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:22 2026 by rpki-client