Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: hKllZYCBth0bGq0B9ZapQ2tRySll9gjmV0/oDDk7SV4=
Subject key identifier: EE:41:DB:62:F2:F8:5A:18:68:75:A1:05:EC:90:73:D4:06:24:F3:37
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019F92114EB3D841461F8C8F1F1713C30265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 090D
Signing time: Fri 24 Jul 2026 03:00:35 +0000
Manifest this update: Fri 24 Jul 2026 03:00:35 +0000
Manifest next update: Sat 25 Jul 2026 03:00:35 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: RYSxJSw5FBmyzAMbprZnXJd+nC6qO8f1aYCg4VpHeTI=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:4e:b3:d8:41:46:1f:8c:8f:1f:17:13:c3:02:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jul 24 03:00:35 2026 GMT
Not After : Jul 25 03:00:35 2026 GMT
Subject: CN=ee41db62f2f85a186875a105ec9073d40624f337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:fd:00:1d:c3:e6:a7:3c:ee:dd:55:e7:a3:
f6:e2:ec:76:c0:16:3a:58:82:d5:fb:91:f9:21:cf:
ee:57:f5:5f:af:0a:bb:88:6c:f0:d2:aa:47:dc:9f:
24:13:46:f1:a2:b9:fd:6e:ae:51:c9:e9:b4:ef:60:
02:d8:fa:5f:a3:70:c4:ff:a1:42:73:c6:fd:8f:f5:
4c:25:0b:dc:d3:58:3c:5b:b9:bc:26:73:d0:95:bc:
2f:f1:2a:dc:77:44:3d:07:37:6a:5f:cd:0a:8b:86:
1d:67:54:ec:18:b3:2d:39:b7:c6:da:85:c6:fd:17:
9d:74:59:a5:b2:10:7f:dc:21:32:e1:68:2d:78:28:
ee:b1:c3:cd:76:bb:0e:0e:04:da:52:a5:c3:eb:ff:
7b:06:32:2b:d3:99:35:1d:40:6d:c2:99:a8:6a:2c:
16:e2:b9:86:1a:16:2f:c3:55:41:25:14:09:2f:98:
4b:6c:94:5a:c9:85:30:bf:73:1b:a4:5f:0a:38:eb:
58:c0:43:ae:af:11:cc:d9:be:ef:5f:db:34:c1:c6:
ce:b0:7d:fe:5a:63:33:be:4b:cc:31:ec:8e:e1:66:
3d:31:e3:ab:e4:ca:51:9b:a6:db:6b:fb:b0:e6:7c:
90:b3:ad:df:58:36:ef:03:75:5c:7a:94:aa:ef:e6:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:DB:62:F2:F8:5A:18:68:75:A1:05:EC:90:73:D4:06:24:F3:37
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3c:d3:c0:bf:bb:9e:76:5e:87:8d:e4:f8:b7:10:df:fe:88:
49:0a:76:31:f5:77:13:cb:a1:57:ca:c1:12:07:f5:b6:97:57:
08:ab:90:16:99:e8:a4:1b:1f:a2:d7:a1:71:e6:b1:3a:16:29:
2a:eb:d4:6d:10:82:ce:83:10:5b:e8:b8:23:79:a9:86:36:4f:
05:fc:64:50:f0:57:ab:ed:ab:b2:bd:bd:0c:3c:53:f1:9f:92:
1b:a6:35:50:57:dd:ed:b9:06:15:f8:f6:cc:ab:c2:61:9d:21:
73:f8:7f:63:63:e1:fa:e5:bc:40:3e:88:7b:7d:f9:b5:b0:53:
a1:04:c3:a5:db:b6:f4:a3:3a:83:04:30:13:56:3b:a1:5d:5b:
31:9b:bf:1e:ad:67:0e:55:0d:3f:41:d1:2e:92:f8:b8:ef:d5:
f6:a2:5b:ee:74:51:68:61:78:0d:a2:96:57:f0:ff:a9:59:96:
e2:20:44:09:db:e5:cb:08:5a:c7:cc:b3:eb:66:ca:38:0c:82:
e8:21:6f:ff:7e:d7:31:74:db:c2:48:c9:67:f0:23:96:09:32:
97:48:1b:59:5a:57:08:8d:8f:ce:95:07:ab:f6:69:e6:07:40:
64:b8:f9:8c:60:d7:3d:d6:9e:7b:f5:ad:74:81:11:c6:dc:1f:
05:c4:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:03 2026 by rpki-client