Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: DY3Vnt/QOBRN0BF8e+PORhuJ9viupcWrxID58lTbTJc=
Subject key identifier: 4F:A4:4F:45:F4:C5:AF:33:9A:29:0B:30:EE:5D:D0:20:71:28:B9:DA
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01A13CDC78EBBD58952FB2775A00781A213B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 09EA
Signing time: Thu 15 Oct 2026 00:00:44 +0000
Manifest this update: Thu 15 Oct 2026 00:00:44 +0000
Manifest next update: Fri 16 Oct 2026 00:00:44 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: cQUTRr0g4aNsbjM80Cjlz2T5vCeklRb45UHWI7K4GII=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:78:eb:bd:58:95:2f:b2:77:5a:00:78:1a:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Oct 15 00:00:44 2026 GMT
Not After : Oct 16 00:00:44 2026 GMT
Subject: CN=4fa44f45f4c5af339a290b30ee5dd0207128b9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:0d:81:6c:4d:75:3e:ee:65:22:b3:bd:ad:
88:13:c3:ea:96:f3:c2:67:4f:04:58:38:f1:0e:d8:
7a:e8:3f:d2:fb:1f:d0:74:e4:e0:d7:ae:92:70:b8:
b1:30:66:b2:c8:83:97:62:f9:48:05:fd:ad:c8:db:
cd:db:53:7b:3d:6a:39:dc:3e:c1:14:2b:f3:dc:0a:
dd:ed:8c:49:39:29:fd:20:0c:fe:49:62:59:47:5c:
99:2f:a3:ab:0b:f5:fa:96:56:03:95:ae:92:03:3e:
69:b8:ea:4c:78:40:dc:36:5d:c1:88:41:f1:56:9d:
e0:80:fd:5e:38:a6:dd:ab:3c:d8:13:75:56:8e:43:
02:b4:5d:7d:60:75:77:a0:5a:74:51:a9:22:14:c4:
8c:19:c0:20:a7:0a:db:5a:d8:79:2d:70:d8:22:72:
06:57:5e:a7:54:b8:39:97:78:6b:9b:0d:1c:7a:2d:
67:94:03:0f:01:41:41:f3:2e:fe:1f:63:bf:20:c8:
15:09:ed:f8:db:11:f9:ac:c3:cc:e2:4f:c0:b1:53:
31:a7:04:52:e1:7d:60:bb:f4:64:e8:52:dc:89:31:
aa:ab:b0:f8:01:bb:a5:fb:7d:1f:fc:29:57:6e:44:
a1:00:2b:84:4a:ce:d1:a4:b8:dc:98:b2:a9:fd:81:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A4:4F:45:F4:C5:AF:33:9A:29:0B:30:EE:5D:D0:20:71:28:B9:DA
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:d5:84:eb:57:ad:80:f3:09:00:f4:45:6f:c7:43:88:b5:
31:cd:b9:2b:b0:db:c0:e6:7b:b4:38:2a:25:7a:a5:d7:b2:e2:
79:2e:84:73:b1:32:62:18:94:00:5f:b3:88:62:84:a1:71:16:
c4:58:c3:4b:b5:84:95:99:7e:ba:b1:c7:90:66:fa:d8:f1:81:
4e:26:3f:f2:a8:41:ca:90:4d:91:29:23:35:ef:fa:44:90:db:
20:fb:b2:62:0d:36:e7:fd:a0:0c:1c:60:25:f7:9d:6a:f7:79:
ae:fc:db:9f:2a:48:f8:15:87:80:c3:b9:c9:a1:0c:9f:18:85:
a6:9f:22:00:97:62:b2:56:14:04:e8:84:8e:6e:70:e1:de:d9:
db:2b:d2:b7:28:9d:24:75:57:5c:4e:37:c5:ea:b8:19:90:df:
66:71:13:21:b2:67:eb:bf:a4:a4:ba:05:ab:f0:ae:0b:ca:af:
ce:06:6f:47:6b:2b:a3:da:59:70:80:73:15:c0:d9:cb:c8:51:
37:5b:07:69:2d:8f:be:9b:de:2f:69:9c:f8:17:08:0e:67:53:
c1:48:ad:e5:c8:92:46:1e:b2:f3:61:d9:80:78:b9:e5:f0:a3:
06:2e:4d:f5:7c:58:33:ac:3e:96:8e:cc:ed:b5:08:ee:28:b4:
54:6b:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:39 2026 by rpki-client