Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier: zI7xXDjnCIW6WXXB1SrNxEWH+9eUDCHZahjcIYKwDO8=
Subject key identifier: ED:D0:0D:D9:25:06:02:14:7D:39:60:96:A9:14:43:77:B4:FE:C2:11
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 019D27A9377FEBF5E7EABD3C817A568D1F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number: 088E
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (hash: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8=)
2: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: haeOWJHwwvF3yePL1B4qjuKPafWkRqSffvIyP4y9Ros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:37:7f:eb:f5:e7:ea:bd:3c:81:7a:56:8d:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=edd00dd9250602147d396096a9144377b4fec211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:d1:9b:98:da:6d:f0:7c:7e:fd:03:97:2f:
d7:73:a9:eb:ab:0f:87:9c:25:e1:c8:f2:a0:20:73:
a1:9f:77:a3:d5:41:42:f8:b2:05:1b:7d:b8:c9:0d:
a2:67:a5:b0:d6:c9:42:fc:b0:bd:29:d5:17:c0:3c:
dc:62:22:7d:23:23:c4:9e:f3:9c:80:fb:ea:f6:be:
96:43:90:81:e6:e8:38:4d:ae:62:92:ca:ff:f2:d6:
e2:ca:2b:2b:a5:17:54:a1:42:ad:59:a2:6c:c2:61:
c4:38:ec:a3:b8:36:b7:82:c2:94:ec:a9:af:bb:b9:
54:66:c8:f8:3f:9e:57:17:4c:d5:2e:f0:5c:f1:01:
97:c3:d5:d3:5f:0d:44:df:39:c4:52:f8:b4:91:79:
9a:b4:39:37:db:c0:6f:69:d4:23:76:c1:d6:6e:ea:
b9:30:f4:f5:4d:d7:37:dc:f3:f3:60:28:86:5b:b3:
c2:da:99:74:64:c6:f0:0d:d4:d8:c6:26:6a:82:cc:
23:49:09:3e:65:fa:c1:25:4b:b0:1a:d7:57:54:06:
87:e6:df:00:05:b4:8b:30:e3:f1:35:7c:84:d9:4a:
91:b4:cf:6f:a2:5c:dc:60:7e:4f:ec:ad:ac:50:93:
1b:58:64:fe:6e:20:b1:92:cd:3e:0c:f3:85:d2:5a:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D0:0D:D9:25:06:02:14:7D:39:60:96:A9:14:43:77:B4:FE:C2:11
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6c:28:26:d2:d8:e5:55:ce:91:c4:c1:a6:44:6b:ec:3d:60:
3d:38:2f:a6:87:ef:f1:54:db:7c:b4:44:2a:49:f5:b9:f2:c7:
4e:af:ac:cf:f8:0b:8d:de:13:a9:3f:be:77:5a:1d:b8:5b:f1:
7d:53:fe:eb:38:f8:2b:67:6f:51:0c:39:2d:66:a0:c9:a1:08:
11:42:f1:87:10:92:c1:1a:50:a6:c8:9d:1f:fb:1a:7a:51:33:
bf:31:22:6d:fc:23:8a:79:53:28:3b:89:53:8c:b1:9e:42:65:
ca:c2:8f:4e:9b:04:04:b0:da:dd:d3:a4:1c:49:cc:51:57:66:
b9:2e:aa:a6:41:d1:2e:0a:a0:fe:40:fb:49:7e:8e:ab:04:01:
d7:d0:25:01:d6:84:c2:29:8f:6b:33:dc:a5:3d:a1:89:8d:3a:
26:07:7e:a2:00:73:8e:96:41:84:93:7e:e7:68:1e:4e:6b:68:
6c:3b:18:c9:24:d6:6f:39:20:29:24:8c:a1:b9:42:d7:2f:59:
6e:ca:2b:85:c7:8e:9c:f2:5a:3f:b7:4e:13:ba:ec:01:79:78:
a2:64:b8:e9:43:14:8b:0d:49:4a:93:36:3e:19:c6:18:13:b2:
53:ad:c7:c9:6a:59:27:f0:aa:28:1d:f1:b8:fe:b0:ca:a4:2d:
9f:de:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:49 2026 by rpki-client