Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: zEObtORs61T/ip+JP5gRpCyGsMCpSlcHWMxU94oNlK8=
Subject key identifier: EF:0E:0F:25:15:7D:4C:76:74:79:CF:B5:65:C0:AE:3C:E5:87:5A:7D
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019F1868091184D7364B3AB678024CEED27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 08CE
Signing time: Tue 30 Jun 2026 12:01:38 +0000
Manifest this update: Tue 30 Jun 2026 12:01:38 +0000
Manifest next update: Wed 01 Jul 2026 12:01:38 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: cJwWREh/t0udAVUVMSkaec3c1Qgcvi4HFBTPdhR8MU8=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:09:11:84:d7:36:4b:3a:b6:78:02:4c:ee:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jun 30 12:01:38 2026 GMT
Not After : Jul 1 12:01:38 2026 GMT
Subject: CN=ef0e0f25157d4c767479cfb565c0ae3ce5875a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:5e:7c:6c:6f:32:d0:d9:8e:2e:3d:ab:7f:
86:80:36:09:11:cd:11:13:61:16:a7:76:c4:85:3a:
f5:f8:56:c9:60:8a:16:28:45:3b:8e:7b:de:51:e6:
81:ad:94:b6:66:88:3b:d4:a1:d6:7e:99:2c:36:92:
79:a7:c5:bf:b1:3d:85:b6:9f:51:2a:91:c5:5f:f8:
1f:b8:e9:16:cf:c0:55:14:fe:6b:25:48:65:42:b2:
ef:d9:0e:d5:b6:38:7f:46:5f:82:77:91:e3:43:f7:
a4:78:64:03:66:2a:99:df:6d:3f:e1:b7:92:82:3b:
2e:96:3b:35:c3:19:20:53:f0:46:e0:9d:c9:4f:07:
77:af:e6:49:5e:4f:46:5e:c3:22:ff:08:17:eb:43:
2a:dd:46:9b:08:31:b2:cd:18:b0:06:f6:5a:ec:48:
41:5f:7e:be:9f:34:e3:e1:ca:4a:7b:db:9d:cb:3e:
8f:27:4f:e8:c3:a5:bd:35:d9:79:bc:10:42:ad:ef:
48:bb:7c:d6:9c:ba:07:f7:42:20:9e:6d:d4:5b:26:
41:84:82:2e:84:5e:cb:6a:58:3a:5f:8d:01:cc:99:
e9:e5:f7:0c:88:cb:24:35:9d:e2:d2:05:ed:68:d4:
e7:d3:a1:0c:87:47:87:5e:3f:67:62:b5:c0:cf:18:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:0F:25:15:7D:4C:76:74:79:CF:B5:65:C0:AE:3C:E5:87:5A:7D
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:30:e4:84:34:85:63:ee:89:29:db:89:ae:3b:e5:a6:02:
95:ec:ba:9e:97:6e:be:bb:5d:f0:3d:d1:83:6f:1e:a4:6a:31:
ef:3e:e4:2a:21:2f:81:84:ee:a6:3f:fd:a7:64:5f:34:b2:1e:
20:42:a4:63:5c:7b:10:82:c9:05:a4:49:48:90:e9:f0:62:cc:
3f:cb:f7:0b:6d:b3:b7:6a:54:b6:85:49:cf:22:55:37:ca:b7:
b9:15:51:dc:ba:e7:c0:f8:3e:b3:f9:5c:00:c1:bd:98:fd:bb:
9b:0c:8f:52:42:6f:9f:f5:eb:dd:75:27:d6:db:42:b5:5c:2a:
1d:75:5c:d5:f0:6a:c9:d1:9f:42:c7:3d:15:25:0a:53:f2:13:
79:d6:2c:43:40:ef:8e:07:1d:70:5b:de:85:cc:97:b9:fb:b7:
30:39:f2:c4:04:9d:05:5c:e5:6b:d5:99:ce:d3:13:82:79:4b:
1d:41:13:a3:3a:8e:c6:c9:60:7e:61:69:0b:b4:e1:34:c7:4f:
3c:ab:85:47:15:62:4b:14:73:a5:a7:cd:56:bc:fb:8b:ab:b0:
c8:8b:d6:3f:3c:49:8e:aa:d6:fd:5f:65:ea:39:de:40:f9:82:
bb:ce:d2:dc:6a:75:c1:ab:5f:eb:fb:21:bc:66:e0:b9:1a:05:
2d:c8:7f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YaAkRhNc2Szq2eAJM7tJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjZjOGY0NmZjODBkMmY4NzdjMzVmZDI4ZDhhMDY1MWI3
MDgwYWUwHhcNMjYwNjMwMTIwMTM4WhcNMjYwNzAxMTIwMTM4WjAzMTEwLwYDVQQD
EyhlZjBlMGYyNTE1N2Q0Yzc2NzQ3OWNmYjU2NWMwYWUzY2U1ODc1YTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZFefGxvMtDZji49q3+GgDYJEc0R
E2EWp3bEhTr1+FbJYIoWKEU7jnveUeaBrZS2Zog71KHWfpksNpJ5p8W/sT2Ftp9R
KpHFX/gfuOkWz8BVFP5rJUhlQrLv2Q7Vtjh/Rl+Cd5HjQ/ekeGQDZiqZ320/4beS
gjsuljs1wxkgU/BG4J3JTwd3r+ZJXk9GXsMi/wgX60Mq3UabCDGyzRiwBvZa7EhB
X36+nzTj4cpKe9udyz6PJ0/ow6W9Ndl5vBBCre9Iu3zWnLoH90Ignm3UWyZBhIIu
hF7Lalg6X40BzJnp5fcMiMskNZ3i0gXtaNTn06EMh0eHXj9nYrXAzxgSLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8ODyUVfUx2dHnPtWXArjzlh1p9MB8GA1UdIwQY
MBaAFAn2yPRvyA0vh3w1/SjYoGUbcICuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEt
ZWU3M2M4ZTcwNDdkLzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEtZWU3M2M4ZTcwNDdk
LzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAsw5IQ0
hWPuiSnbia475aYCley6npduvrtd8D3Rg28epGox7z7kKiEvgYTupj/9p2RfNLIe
IEKkY1x7EILJBaRJSJDp8GLMP8v3C22zt2pUtoVJzyJVN8q3uRVR3LrnwPg+s/lc
AMG9mP27mwyPUkJvn/Xr3XUn1ttCtVwqHXVc1fBqydGfQsc9FSUKU/ITedYsQ0Dv
jgcdcFvehcyXufu3MDnyxASdBVzla9WZztMTgnlLHUETozqOxslgfmFpC7ThNMdP
PKuFRxViSxRzpafNVrz7i6uwyIvWPzxJjqrW/V9l6jneQPmCu87S3Gp1watf6/sh
vGbguRoFLch/Rw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:59 2026 by rpki-client