Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: urFM/gXM6Q5wYPsYlW6IfQo9u6g2iMdgXLSIhOeQpNo=
Subject key identifier: A1:30:86:A1:78:65:5D:89:5D:FA:86:FD:FA:82:37:6E:EC:06:5C:44
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01A1C5FA9B400ACA0E86AB1DDBDAE615C211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0A31
Signing time: Tue 10 Nov 2026 15:01:37 +0000
Manifest this update: Tue 10 Nov 2026 15:01:37 +0000
Manifest next update: Wed 11 Nov 2026 15:01:37 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: 7STTc5/peR236DZs0/oHzVpEk4Hhgu67ukHH9WddnSU=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:fa:9b:40:0a:ca:0e:86:ab:1d:db:da:e6:15:c2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Nov 10 15:01:37 2026 GMT
Not After : Nov 11 15:01:37 2026 GMT
Subject: CN=a13086a178655d895dfa86fdfa82376eec065c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:bb:ac:c8:8d:b5:b3:8f:c2:f6:60:06:d4:
66:01:b4:ac:6c:d0:44:b3:0a:ee:55:3a:95:d5:59:
05:87:52:4c:3d:68:91:84:03:f0:b7:d6:82:c7:87:
ff:79:0a:ed:16:5d:3a:e3:69:75:64:37:69:79:a4:
4f:35:e4:4e:74:bc:84:6d:07:80:f0:e5:c3:aa:fe:
3d:3c:8a:42:3e:77:37:72:e0:8c:64:da:1f:d9:e0:
1f:16:66:05:a6:3d:e3:57:63:ed:a1:31:b7:8a:00:
d9:f7:30:35:c7:86:29:bf:3b:18:27:29:4b:7f:dd:
89:3f:47:ec:65:05:7b:ff:01:dc:48:8b:d7:19:3e:
67:44:22:5e:4b:c9:4c:f8:7d:9a:50:c1:65:b3:85:
12:97:bc:5e:4a:d1:98:20:2a:1e:8e:7f:8c:4a:80:
25:0e:fa:2b:f9:3b:49:4d:c8:3a:de:bb:a2:3e:69:
8f:f1:ad:1a:6d:b3:3e:d2:33:70:f2:4d:b9:d9:09:
79:4e:eb:7b:a8:1a:d4:bd:82:5a:71:66:e5:82:7e:
52:d7:4b:aa:67:78:a5:c8:81:9e:10:d6:f4:49:49:
0b:f5:90:f9:46:ee:af:dc:62:d9:eb:41:23:2d:bd:
1a:c3:ca:f3:58:9b:a8:ae:3e:3e:46:3e:21:73:10:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:30:86:A1:78:65:5D:89:5D:FA:86:FD:FA:82:37:6E:EC:06:5C:44
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e8:1e:89:42:3d:8b:ec:a3:35:0c:e3:91:2f:24:2d:83:39:
b2:e4:90:27:8e:32:fd:bf:18:9b:47:76:fc:25:c8:11:b3:3b:
bc:eb:57:a9:69:91:f9:0f:01:ab:06:79:30:30:6d:13:a1:1b:
f9:8f:4c:f0:bd:6b:1f:68:8e:41:bd:f2:e8:1f:1e:85:08:f4:
a1:87:15:40:20:7f:e4:50:2b:c4:b5:b9:22:1a:0d:64:6c:22:
d4:69:02:9e:7b:4c:c1:33:50:2a:9d:e2:00:8b:f4:56:e6:1d:
47:dc:21:d7:b2:29:77:c2:f5:e6:2a:29:70:e4:a6:aa:52:d2:
2a:ad:ff:ec:e0:cc:e0:1d:70:bc:60:c9:70:bf:48:35:48:c3:
1f:2e:69:db:fa:fd:81:6c:11:f8:92:34:6a:af:6b:58:a5:75:
0b:69:ad:17:8e:55:c8:7d:8d:6e:47:98:54:d5:3b:ff:7b:67:
7a:f4:5e:1e:31:f4:35:72:07:5a:d8:d6:62:b4:f4:a0:17:d7:
ac:23:96:ae:36:af:3d:66:43:2c:c0:73:e1:db:2a:ae:af:3c:
f0:03:4c:ee:41:2e:51:cf:da:e8:1e:44:23:e5:c0:1c:d6:be:
19:f7:b7:71:2f:62:c5:0c:67:ef:3d:25:1e:71:f2:d7:c3:bb:
42:fb:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:20:38 2026 by rpki-client