Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: +8l/BdjLLxzDpKGwZBVj/ivVFK1/cCNUSQRMjoxn0zQ=
Subject key identifier: 97:92:87:85:2F:26:E6:75:65:AC:92:4B:EC:8B:B7:4D:E2:16:65:1E
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01A00214268D0C22DE0BBCC08572504E0E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0947
Signing time: Fri 14 Aug 2026 21:01:10 +0000
Manifest this update: Fri 14 Aug 2026 21:01:10 +0000
Manifest next update: Sat 15 Aug 2026 21:01:10 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: 6acKVumd3c14BN+CTGt+rdKz82L3QYdH/eSVRyJ/fUg=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:26:8d:0c:22:de:0b:bc:c0:85:72:50:4e:0e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Aug 14 21:01:10 2026 GMT
Not After : Aug 15 21:01:10 2026 GMT
Subject: CN=979287852f26e67565ac924bec8bb74de216651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:ec:52:61:3a:ca:cc:cc:de:f0:c0:3b:d2:
34:6a:ad:20:68:2f:50:fa:8b:4a:d6:ac:8e:ce:1e:
c8:f5:d9:36:5c:51:e1:dd:39:2d:90:55:bf:f8:4e:
e1:6f:6a:54:5b:0c:95:38:41:b1:06:ef:91:39:de:
df:80:a2:49:71:93:50:1e:8f:7e:82:3f:56:a9:f1:
78:87:70:40:a8:6e:54:83:47:64:e5:56:6d:62:10:
3d:06:b8:55:a8:fc:df:fe:b3:9d:a8:69:2a:b3:97:
df:f2:4f:4b:14:da:19:ca:74:02:03:b0:a5:f8:18:
32:d5:4c:f6:cb:fb:b2:09:5b:b7:4b:f1:51:e0:d2:
4f:14:09:b2:fe:cb:34:8b:58:7c:7c:9a:09:e6:ba:
2b:2b:41:44:fa:3a:a4:cf:a0:f3:3c:38:17:6e:4a:
54:ab:3e:1a:85:59:2a:2b:18:31:2b:90:8e:3e:44:
72:2b:cb:75:7c:1f:6d:f6:81:02:a9:9d:be:37:00:
74:9d:0a:91:2a:7c:23:ed:df:30:a4:c6:f2:be:c0:
3a:b8:ad:9d:b4:7d:4e:95:c2:12:c0:a1:cd:8c:9b:
c1:45:b8:e6:c4:6e:a2:8a:0f:e7:94:7c:02:dc:f4:
07:9a:32:41:66:da:3a:8a:af:71:53:ee:15:72:2f:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:87:85:2F:26:E6:75:65:AC:92:4B:EC:8B:B7:4D:E2:16:65:1E
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:56:33:cc:06:76:ff:e5:70:b1:eb:e9:b3:3a:64:9d:30:e4:
bd:de:44:f2:5c:4e:2d:a4:57:b7:1b:22:ea:1c:5b:4c:f5:05:
6b:c0:ec:1a:53:d8:a2:ae:12:c1:80:65:dd:8e:fb:3e:a6:56:
87:30:c5:92:53:0b:5c:94:27:99:5a:81:23:53:ec:51:61:62:
3f:b8:13:5b:8c:74:a6:7a:3a:17:b9:13:98:15:7d:09:85:f8:
e7:71:5e:59:72:76:f3:a3:95:32:2d:90:28:23:a4:ce:84:dd:
1a:41:79:06:7e:5e:c7:ac:25:bb:b2:50:cf:64:ab:4a:65:bf:
8d:63:85:43:54:44:58:5f:9f:c6:96:82:66:68:92:a3:de:b5:
1b:c5:84:e7:9e:4e:64:ae:0f:75:9e:9d:0b:79:2c:d5:00:40:
ea:8e:56:be:61:ca:95:c1:65:51:26:d0:bc:1f:62:01:02:29:
93:ba:46:ab:5a:36:3f:f6:7a:41:31:f1:da:64:ee:99:24:73:
1b:c6:d2:ec:61:c3:d9:0b:c3:23:e5:ae:b0:6e:ef:d4:70:a1:
70:80:15:40:32:09:4b:4f:6f:56:ac:20:c7:2f:ac:3e:c4:2a:
04:f2:9d:a5:6b:62:72:d8:94:ed:4b:6d:6f:61:65:aa:e5:c5:
ca:30:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:54 2026 by rpki-client