
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: Sx1JwBPSHwTxWkCmSsAX8XGh7pnUdlWNz7ry1kBRQEk=
Subject key identifier: ED:80:11:ED:23:82:27:DF:CE:5B:C1:9B:F6:FE:E1:6E:43:01:18:95
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019E1D59D6D76335FB3E5B28DC88F25BE349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 084C
Signing time: Tue 12 May 2026 18:01:27 +0000
Manifest this update: Tue 12 May 2026 18:01:27 +0000
Manifest next update: Wed 13 May 2026 18:01:27 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: BeBV9yacsJww76cMNPgVaowuUocGVLBLM5pOoGqyb3Q=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d6:d7:63:35:fb:3e:5b:28:dc:88:f2:5b:e3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: May 12 18:01:27 2026 GMT
Not After : May 13 18:01:27 2026 GMT
Subject: CN=ed8011ed238227dfce5bc19bf6fee16e43011895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:ff:b8:25:99:66:3e:1e:20:a0:dd:38:45:
a5:5d:4b:76:6c:1b:09:ed:15:c4:9e:d1:a6:55:1d:
f7:e8:50:61:2e:59:81:c3:39:53:b4:44:83:7b:e4:
29:ab:48:60:cc:5a:93:21:7f:ab:df:6b:02:16:5b:
56:1d:73:65:f9:ce:c9:c9:18:c1:59:37:2b:e4:f1:
34:52:e8:20:0b:b5:6d:5e:56:40:15:85:a8:03:8b:
c8:be:7f:87:fb:ec:1e:8f:2e:c3:ea:a9:f2:6f:bd:
9f:40:8f:44:b0:db:d3:4b:38:29:3d:0d:16:2f:4d:
1e:89:00:c4:c2:47:b8:0d:77:dd:3e:3c:93:36:83:
3b:e1:da:f7:d4:83:7c:10:93:42:44:d8:4c:45:8f:
8f:4b:54:af:3d:f4:fc:10:be:fc:0b:ee:6f:12:99:
72:eb:ac:02:93:a7:8f:88:1c:98:02:7d:41:8a:ac:
99:ef:d0:ff:f5:b5:53:76:5a:a2:2e:61:de:01:8e:
f6:d9:a5:c8:e3:2e:ab:02:05:dc:6e:3d:19:e0:da:
30:7e:f3:c9:2f:53:ee:de:6e:f7:23:54:bb:82:19:
d5:a8:8e:b3:6a:37:b4:4b:7c:75:49:31:07:d7:c1:
86:5a:3a:fc:09:c1:64:07:f6:52:7b:39:5e:d8:0d:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:11:ED:23:82:27:DF:CE:5B:C1:9B:F6:FE:E1:6E:43:01:18:95
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:69:dc:dc:f6:eb:b0:9d:6c:13:ee:ff:c9:d9:a0:d5:73:
4e:1d:4a:dc:3e:c9:13:eb:9f:28:c3:e5:c7:46:bf:f9:3a:38:
64:2a:ba:9c:81:7c:0d:dc:6d:9c:eb:16:b2:07:a6:6c:b3:fc:
a8:3a:50:36:af:83:1b:32:d8:24:e5:a5:c0:c7:42:ae:75:7d:
be:02:33:af:26:87:c9:8c:81:b9:cc:5e:a9:c7:c5:83:fc:ff:
34:54:31:bd:e7:0f:b3:15:22:86:85:80:57:12:1a:4d:29:ba:
1a:f3:0c:4c:42:c8:0a:88:49:c0:ce:ec:37:60:c0:c2:10:ce:
f6:ed:73:65:92:eb:9f:1c:e5:94:cd:c5:2e:43:19:14:62:92:
1f:65:36:f7:cd:4f:b9:67:53:e1:fb:bb:56:86:eb:fd:34:21:
74:b3:ff:04:29:88:48:30:11:8b:2e:0c:8c:74:a0:c6:3a:7b:
3f:da:cb:d8:2e:61:66:7d:5f:fc:8e:83:f4:b8:da:4a:af:93:
35:1f:12:13:2a:9f:f6:6d:96:5f:fa:6b:0c:0e:24:50:de:2b:
8d:16:18:3d:ab:39:74:0c:cb:cc:7e:93:d2:7f:7f:74:b4:32:
ea:3b:cd:92:74:90:1f:2c:21:94:49:15:81:90:c9:ad:4e:b8:
7d:2b:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:02:29 2026 by rpki-client