Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier: k3ZPMfOKbYxrUNKYjlbjYIY738i1r6lWBMOSJHz80K8=
Subject key identifier: 5E:CC:DF:CE:2C:68:F2:1E:4F:39:BD:CE:B8:7F:B8:39:33:67:02:CD
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 019E1ED9C81F62C305025C07DCDDF89CE488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number: 090E
Signing time: Wed 13 May 2026 01:00:49 +0000
Manifest this update: Wed 13 May 2026 01:00:49 +0000
Manifest next update: Thu 14 May 2026 01:00:49 +0000
Files and hashes: 1: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (hash: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8=)
2: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: kQnvARLv0aJPaiKIfzrMFsmfCdjq+c6fjLcy+iX/9d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:c8:1f:62:c3:05:02:5c:07:dc:dd:f8:9c:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: May 13 01:00:49 2026 GMT
Not After : May 14 01:00:49 2026 GMT
Subject: CN=5eccdfce2c68f21e4f39bdceb87fb839336702cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:04:33:23:5b:7d:7d:ba:84:b7:cc:86:26:
fd:d9:fa:04:2b:b5:3c:31:ab:eb:5c:f7:41:1a:40:
98:05:a8:b8:e3:fd:fb:3d:42:c8:7a:bf:82:65:a0:
50:82:cf:7d:e2:1c:31:3b:fb:46:7b:a1:33:dd:7a:
d8:4a:fc:7f:e6:c8:42:b1:4d:6d:2e:9e:31:c1:5c:
f2:85:57:2c:44:0c:db:9b:86:b4:ee:3b:f0:4f:8e:
80:3d:85:c6:99:64:47:03:03:48:3a:40:0c:9f:08:
2f:c8:62:ab:85:fc:b6:48:69:54:68:da:d5:58:f5:
08:b0:0e:28:af:9f:ef:99:b9:ab:6c:d2:a7:56:dc:
fd:bf:37:8c:d3:b7:99:3e:4a:9d:1c:e2:51:29:96:
38:ae:7a:39:ea:6a:50:b7:69:e7:a8:db:4f:71:5a:
28:cf:10:28:74:99:8c:34:05:af:88:9e:06:fb:1c:
08:c4:5a:12:9b:42:a0:37:8f:be:7a:19:43:3b:c7:
61:7a:e8:14:84:ca:ef:db:2f:ab:92:a2:7a:85:26:
7f:ff:64:f4:8f:0d:bb:07:19:0b:79:81:48:48:ef:
05:56:c1:1e:7b:22:76:82:03:55:a7:8f:fe:b8:3e:
d9:03:d8:fa:47:25:bf:b9:77:e0:a8:d9:e1:4f:b5:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:DF:CE:2C:68:F2:1E:4F:39:BD:CE:B8:7F:B8:39:33:67:02:CD
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ff:91:2e:c7:b8:d9:a0:5a:98:8d:c7:1d:5a:21:41:96:4f:
3a:81:c2:4d:f6:4a:d3:53:2f:42:33:32:e0:98:c7:2b:53:f9:
78:b5:35:37:92:a0:a7:44:2e:0d:9b:6c:a8:2c:ea:50:73:12:
a8:13:09:03:b7:f2:c6:01:d9:d5:34:e7:40:5d:8e:c2:7a:02:
52:31:c5:ba:02:ca:42:42:8a:c6:86:98:28:a6:85:db:cf:f7:
83:79:1f:4a:b9:3e:f7:fe:68:fb:ad:71:b0:cb:49:b6:07:33:
e4:91:d8:dd:41:fa:83:7c:7a:22:86:9e:e3:ae:45:57:ac:96:
5f:7f:85:4e:15:c9:46:c2:37:43:a3:91:f9:6b:2c:22:6a:2c:
bd:e4:ba:06:8d:5e:d4:e6:49:bb:1d:91:65:35:a2:b4:48:1d:
87:98:63:87:18:77:90:de:87:58:ac:c0:8f:70:92:16:26:38:
29:2a:c6:89:e6:a1:d8:2d:cc:d0:08:23:f2:18:f1:91:c9:25:
32:0a:01:e7:e3:d6:f0:af:cb:cb:1f:f2:6b:97:37:ab:c3:9e:
c9:ef:1e:18:49:25:ec:53:7c:78:e5:4d:78:ac:4c:b9:77:37:
94:d6:0e:a6:56:a4:4b:ec:a4:39:87:a2:02:85:cf:52:2b:d1:
c7:cc:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:40 2026 by rpki-client