Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: U2GdUL+8yezl4I2TLhygyqYkKaEdv2DPT+l/EQ9p7I4=
Subject key identifier: 8A:A0:2C:4D:24:9D:4D:86:3C:04:12:81:69:AE:18:F7:6A:03:38:56
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01A0D0B6822126E34035519CC7D98798DED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 09B2
Signing time: Thu 24 Sep 2026 00:00:16 +0000
Manifest this update: Thu 24 Sep 2026 00:00:16 +0000
Manifest next update: Fri 25 Sep 2026 00:00:16 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: iFjnq1I6Qhdv2FJbsJ6oAFZVJJ0zisXs0azjxVaSFrE=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:82:21:26:e3:40:35:51:9c:c7:d9:87:98:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Sep 24 00:00:16 2026 GMT
Not After : Sep 25 00:00:16 2026 GMT
Subject: CN=8aa02c4d249d4d863c04128169ae18f76a033856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:59:c9:a4:00:94:64:24:c8:52:1a:c0:ee:
14:5a:39:7b:d3:66:24:5a:6d:21:2f:b9:1d:98:fd:
c6:da:cc:08:fe:9e:5c:e8:2e:bb:8f:1a:97:be:a5:
80:6c:98:98:68:43:51:79:59:5a:66:e5:4e:42:98:
91:c9:84:56:e6:04:f1:7e:a8:4c:71:f7:c8:5d:52:
dd:bc:61:fa:9c:bb:b1:e6:08:42:ca:05:f8:f1:9c:
39:57:f0:d0:37:cb:15:4c:bb:9f:c3:c0:e7:75:19:
74:19:1c:c1:c2:db:0f:e4:93:f3:dc:69:3f:c4:6c:
9e:75:72:f6:48:24:f0:d0:b2:db:b8:3d:cd:cd:ac:
91:fb:cf:06:92:45:92:96:4c:fa:5b:2d:7f:a8:f1:
e2:50:eb:f3:b7:bb:cc:6e:17:03:32:48:36:5f:10:
5a:e1:e3:4e:62:71:6b:ac:67:8c:2a:95:b0:30:d7:
ef:5b:e6:ad:e2:ff:28:dd:4c:01:d0:69:29:7c:c6:
39:bb:b2:f4:9e:18:ff:4d:45:70:ed:6c:be:51:3e:
74:35:c1:5a:a9:2d:d3:a2:6c:29:7f:14:6a:d2:5b:
70:8a:36:1a:5f:d9:0b:1e:03:00:b8:b5:3d:19:14:
1b:81:b4:09:4b:d7:af:f1:02:4f:f2:88:ca:44:c1:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A0:2C:4D:24:9D:4D:86:3C:04:12:81:69:AE:18:F7:6A:03:38:56
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8f:96:68:82:30:37:1f:e6:77:bf:53:66:29:1d:61:dd:1e:
cd:c5:52:55:84:09:fc:cf:79:62:c0:0d:5a:1b:61:e5:80:a1:
73:26:4e:e4:17:80:b3:2d:51:00:25:22:56:25:51:88:8a:83:
ec:a9:c6:4c:f8:60:ff:28:f1:a7:89:00:19:25:92:25:63:c5:
a8:43:88:dd:cc:ab:46:15:81:6c:af:86:f5:1c:f9:ed:1a:b2:
26:7e:a9:c4:2c:80:4b:70:c7:c8:ee:d4:ca:f2:56:ef:0a:18:
25:75:f0:e7:4b:43:1f:f2:29:d8:5c:fc:e0:19:9c:e7:99:f6:
1c:72:a9:2c:fe:76:23:33:6a:83:0a:66:12:84:8a:e4:f1:a2:
d4:09:98:93:ae:48:88:c2:68:c3:9f:b9:ed:4d:2b:7d:a6:22:
9d:db:d8:a7:c3:3c:54:87:ad:76:ee:bc:29:42:7b:91:23:77:
fe:76:71:7c:7a:40:8d:87:bf:4a:61:b1:46:6f:71:b1:64:93:
e5:ba:d7:92:d4:2a:84:fe:ab:6b:51:8a:a1:54:0e:f0:80:3a:
14:ee:b2:ca:f8:ec:00:93:d1:de:ec:61:3c:40:28:89:45:61:
60:f1:b2:bf:bb:a6:2c:73:ef:2d:62:a8:cd:e1:c5:3d:72:01:
6c:58:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:43:30 2026 by rpki-client