Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier: 8pjL/6PeMD1apsjsi3DWBRM36iHhvAWVHEGHPHf1xx8=
Subject key identifier: 30:89:82:0D:48:78:5A:73:1B:58:70:B4:48:36:6A:A3:9D:01:09:3C
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 019F95809745BF01761FE9A83B0A86282469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number: 09D0
Signing time: Fri 24 Jul 2026 19:01:00 +0000
Manifest this update: Fri 24 Jul 2026 19:01:00 +0000
Manifest next update: Sat 25 Jul 2026 19:01:00 +0000
Files and hashes: 1: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (hash: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8=)
2: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: abxQs5PJIKPy9zN+stQFmBy3g40b4aruvvkRLptRAds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:97:45:bf:01:76:1f:e9:a8:3b:0a:86:28:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: Jul 24 19:01:00 2026 GMT
Not After : Jul 25 19:01:00 2026 GMT
Subject: CN=3089820d48785a731b5870b448366aa39d01093c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:78:1f:0a:df:32:7f:50:bd:9a:cc:2c:d4:
cb:55:fa:40:b7:18:ca:6c:e7:ef:c0:51:1f:f7:0f:
78:19:a0:53:a4:4e:a7:39:0b:d2:50:43:ed:d5:9c:
59:1b:61:01:05:23:d2:4f:2d:1b:18:db:2a:b4:ed:
b1:a9:93:4d:de:77:3a:1d:3e:96:d7:e8:e5:58:86:
e6:8c:06:8d:2f:7f:50:a4:29:26:68:03:a0:45:38:
8a:52:36:5b:6b:d9:5f:41:ac:0a:9a:93:c9:a9:a9:
dd:c7:7a:0a:b6:6f:2e:61:ae:eb:70:9d:1d:11:52:
ab:85:8b:35:72:2a:4d:6e:ef:a7:71:74:b9:52:4f:
a3:e7:5a:40:31:4f:4f:f2:be:9e:a5:99:aa:ba:cb:
32:71:eb:bf:d3:99:c5:90:82:49:0c:53:20:1d:c7:
8d:6c:be:06:fd:ef:a4:8b:e1:51:65:79:23:71:a0:
f9:e5:65:da:5b:bc:27:bd:9e:13:48:52:3d:54:8f:
32:2c:4d:1f:27:1f:86:11:37:a8:84:95:b5:e4:a7:
82:1e:7a:81:8f:8c:5f:fd:ec:4f:2b:86:b6:d1:2a:
87:f7:79:59:e3:c2:91:1b:34:81:ce:76:ab:5a:5f:
47:b0:d9:c0:82:ea:bc:b1:c4:d3:74:42:e3:d4:4c:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:89:82:0D:48:78:5A:73:1B:58:70:B4:48:36:6A:A3:9D:01:09:3C
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:41:c4:87:08:0b:17:4d:25:ea:df:de:e1:ab:e7:fc:2a:b0:
64:2e:df:3c:15:14:e6:5e:c5:e3:fd:b9:4d:7e:ae:56:48:30:
ee:8e:b7:ea:e6:ab:87:dd:a4:30:40:c7:56:5b:29:d7:f5:99:
ed:39:1e:d0:14:6f:bc:af:1a:8b:f9:2e:93:7d:7a:b6:a3:53:
10:a9:0f:a6:cb:9c:17:6d:f2:e2:5c:11:b7:4c:64:d7:8e:b8:
9e:a2:7d:2d:f0:f5:3f:61:c1:7d:11:f1:a7:40:6e:02:58:c5:
93:02:fb:93:39:66:18:02:d6:a7:89:a6:4b:ab:40:f5:0d:bc:
a3:dc:44:5f:20:69:ec:a3:78:ee:c7:52:2f:1b:4e:2a:9a:cf:
67:29:38:55:de:21:a0:ad:c9:bd:94:08:3c:36:ec:62:2e:de:
0e:f1:91:21:62:50:44:f1:52:a2:56:c9:3b:fe:8c:37:cb:9b:
12:f7:ed:8b:dd:46:d3:f4:94:47:0f:7a:91:6f:a4:43:62:00:
fa:b3:7a:dd:d3:e2:41:90:37:1e:6b:45:5f:00:1a:09:a6:93:
68:f2:d9:f3:9f:bd:80:90:05:77:74:ab:78:9e:0b:85:47:84:
6d:3a:81:a0:5c:af:aa:2e:76:99:a6:59:a6:ca:f2:6d:75:e9:
19:a7:6c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgJdFvwF2H+moOwqGKCRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODY0NGI5MmYzOTRjYWYzNjY3YmRiNmFmM2UzODY5OWM1
NGYzMTUwHhcNMjYwNzI0MTkwMTAwWhcNMjYwNzI1MTkwMTAwWjAzMTEwLwYDVQQD
EygzMDg5ODIwZDQ4Nzg1YTczMWI1ODcwYjQ0ODM2NmFhMzlkMDEwOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWV4HwrfMn9QvZrMLNTLVfpAtxjK
bOfvwFEf9w94GaBTpE6nOQvSUEPt1ZxZG2EBBSPSTy0bGNsqtO2xqZNN3nc6HT6W
1+jlWIbmjAaNL39QpCkmaAOgRTiKUjZba9lfQawKmpPJqandx3oKtm8uYa7rcJ0d
EVKrhYs1cipNbu+ncXS5Uk+j51pAMU9P8r6epZmqussyceu/05nFkIJJDFMgHceN
bL4G/e+ki+FRZXkjcaD55WXaW7wnvZ4TSFI9VI8yLE0fJx+GETeohJW15KeCHnqB
j4xf/exPK4a20SqH93lZ48KRGzSBznarWl9HsNnAguq8scTTdELj1EyJ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCJgg1IeFpzG1hwtEg2aqOdAQk8MB8GA1UdIwQY
MBaAFEaGRLkvOUyvNme9tq8+OGmcVPMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYt
YTVlMTNiNGZiMTJiLzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYtYTVlMTNiNGZiMTJi
LzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0HEhwgL
F00l6t/e4avn/CqwZC7fPBUU5l7F4/25TX6uVkgw7o636uarh92kMEDHVlsp1/WZ
7Tke0BRvvK8ai/kuk316tqNTEKkPpsucF23y4lwRt0xk1464nqJ9LfD1P2HBfRHx
p0BuAljFkwL7kzlmGALWp4mmS6tA9Q28o9xEXyBp7KN47sdSLxtOKprPZyk4Vd4h
oK3JvZQIPDbsYi7eDvGRIWJQRPFSolbJO/6MN8ubEvfti91G0/SURw96kW+kQ2IA
+rN63dPiQZA3HmtFXwAaCaaTaPLZ85+9gJAFd3SreJ4LhUeEbTqBoFyvqi52maZZ
psrybXXpGadsyQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:55 2026 by rpki-client