Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: JOGhJ24ko7Yakfn5Adlhm612Cw4XGcO/LknNe7yfwmo=
Subject key identifier: B4:04:49:13:1E:D3:EE:0F:3A:10:0D:45:F8:62:34:80:7A:AD:BF:1C
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019E30A97E64CA75D06D2911C90F61D1F7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0856
Signing time: Sat 16 May 2026 12:01:14 +0000
Manifest this update: Sat 16 May 2026 12:01:14 +0000
Manifest next update: Sun 17 May 2026 12:01:14 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: gB171QlF34mmE/PSXM065rJbnUbmg5/beRopFmXJ3Zs=)
2: tlubz_uTOm80ijju_zQ-qZU5G58.roa (hash: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:7e:64:ca:75:d0:6d:29:11:c9:0f:61:d1:f7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: May 16 12:01:14 2026 GMT
Not After : May 17 12:01:14 2026 GMT
Subject: CN=b40449131ed3ee0f3a100d45f86234807aadbf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:8b:fd:bc:17:33:12:dd:7c:51:ed:19:11:
0c:be:e6:36:59:36:5f:78:1f:2c:22:c6:09:b6:ac:
00:2f:d2:44:ab:19:e6:b3:a5:81:5b:4b:52:20:a3:
ec:3b:0e:aa:8c:63:44:b1:9a:a6:b8:09:6e:01:ba:
f5:a1:69:a1:9a:50:42:d0:4e:52:7b:00:2c:d4:76:
38:96:a3:47:31:f8:2e:fc:0a:36:fb:fa:f0:0c:d5:
a2:b2:04:6d:77:37:7c:de:02:30:e5:3c:c9:38:f7:
3a:48:8f:17:54:15:fd:be:4c:21:25:13:d0:0a:e6:
11:15:47:63:d4:1e:b7:b2:d2:e6:0f:d7:6b:7f:05:
ec:4c:f9:95:55:e3:41:73:1c:88:ee:93:d0:5c:a0:
b9:41:18:04:9f:f5:93:aa:88:d5:ff:a4:d8:e8:80:
5a:bc:79:9b:95:18:a1:c2:26:d1:ff:a9:a1:99:ba:
f0:d3:57:cb:6c:0f:1e:1b:19:40:27:f3:9f:ef:62:
15:46:3e:73:bc:9b:6a:14:93:2c:23:52:04:a8:18:
e8:e5:1d:14:95:59:05:7a:3c:4d:bf:ac:bb:5e:ec:
45:67:76:2f:67:c5:ad:b5:5c:48:51:78:21:eb:32:
45:cd:83:36:a4:fa:44:67:90:ea:fe:ad:f8:a0:3d:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:49:13:1E:D3:EE:0F:3A:10:0D:45:F8:62:34:80:7A:AD:BF:1C
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:68:59:7c:73:04:a4:d6:f3:50:0d:dd:a4:f0:fc:00:e0:22:
b3:1b:e1:d2:15:11:7c:87:a6:f7:7f:1d:53:2a:4b:a3:56:0c:
b8:bf:03:73:2b:98:88:c9:3a:3a:8e:e1:74:07:c9:21:ff:87:
81:de:5c:c2:78:f4:99:ba:cf:e9:6f:19:68:0a:e5:2d:08:97:
de:66:87:17:e4:0e:90:9d:d2:ed:87:9e:ed:af:02:9a:ea:9c:
9a:85:9b:08:c8:1f:9a:48:64:a4:9f:25:ba:2b:de:bf:ce:d0:
0d:9d:ee:78:25:ee:1c:91:2e:9c:6c:76:e0:9a:46:e3:9d:a6:
f5:6a:14:61:68:01:b8:dc:e5:02:3c:a9:6e:a7:09:2a:18:07:
eb:e6:57:d3:f9:7a:88:0f:7e:46:83:a0:06:fd:80:b3:fe:a9:
73:df:99:87:70:af:60:bf:d0:b9:a0:a5:f8:a9:d2:a9:7e:05:
1b:b4:ff:9e:94:66:41:d3:d1:7c:32:18:14:d7:c4:1f:3e:48:
2b:52:44:29:89:00:b1:95:f7:5f:cb:fb:9b:f1:9a:89:95:55:
5b:3d:34:00:76:09:06:88:2d:6b:94:a7:c1:02:43:61:ea:f0:
70:a4:38:b6:c3:af:b1:74:c6:fc:6a:42:59:01:14:26:15:ed:
2c:e6:dc:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqX5kynXQbSkRyQ9h0ffTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjZjOGY0NmZjODBkMmY4NzdjMzVmZDI4ZDhhMDY1MWI3
MDgwYWUwHhcNMjYwNTE2MTIwMTE0WhcNMjYwNTE3MTIwMTE0WjAzMTEwLwYDVQQD
EyhiNDA0NDkxMzFlZDNlZTBmM2ExMDBkNDVmODYyMzQ4MDdhYWRiZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN6L/bwXMxLdfFHtGREMvuY2WTZf
eB8sIsYJtqwAL9JEqxnms6WBW0tSIKPsOw6qjGNEsZqmuAluAbr1oWmhmlBC0E5S
ewAs1HY4lqNHMfgu/Ao2+/rwDNWisgRtdzd83gIw5TzJOPc6SI8XVBX9vkwhJRPQ
CuYRFUdj1B63stLmD9drfwXsTPmVVeNBcxyI7pPQXKC5QRgEn/WTqojV/6TY6IBa
vHmblRihwibR/6mhmbrw01fLbA8eGxlAJ/Of72IVRj5zvJtqFJMsI1IEqBjo5R0U
lVkFejxNv6y7XuxFZ3YvZ8WttVxIUXgh6zJFzYM2pPpEZ5Dq/q34oD2XgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQESRMe0+4POhANRfhiNIB6rb8cMB8GA1UdIwQY
MBaAFAn2yPRvyA0vh3w1/SjYoGUbcICuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEt
ZWU3M2M4ZTcwNDdkLzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEtZWU3M2M4ZTcwNDdk
LzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmhZfHME
pNbzUA3dpPD8AOAisxvh0hURfIem938dUypLo1YMuL8DcyuYiMk6Oo7hdAfJIf+H
gd5cwnj0mbrP6W8ZaArlLQiX3maHF+QOkJ3S7Yee7a8CmuqcmoWbCMgfmkhkpJ8l
uivev87QDZ3ueCXuHJEunGx24JpG452m9WoUYWgBuNzlAjypbqcJKhgH6+ZX0/l6
iA9+RoOgBv2As/6pc9+Zh3CvYL/QuaCl+KnSqX4FG7T/npRmQdPRfDIYFNfEHz5I
K1JEKYkAsZX3X8v7m/GaiZVVWz00AHYJBogta5SnwQJDYerwcKQ4tsOvsXTG/GpC
WQEUJhXtLObcEQ==
-----END CERTIFICATE-----
Generated at Sat May 16 16:23:54 2026 by rpki-client