Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier: ajjixbHJYb7Ai/xZK7dzA0NxnL0NcYMmnfX2kBa1nEM=
Subject key identifier: 09:5A:65:0B:D7:01:11:FE:46:F8:3B:AC:0D:39:7D:BB:E6:1A:7C:7C
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 019CAC102040B5613E80D37EF1587C1D55FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number: 084E
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (hash: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8=)
2: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: DIH45Lp0sZro9pCwLNQKp6sVmJi4MGXBGm5ZX+8uXUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:20:40:b5:61:3e:80:d3:7e:f1:58:7c:1d:55:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=095a650bd70111fe46f83bac0d397dbbe61a7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:9a:44:3b:a5:f2:3e:ff:ba:cb:58:1d:1e:dd:
29:fb:1c:b7:a2:0c:19:06:c3:ad:3b:4c:74:bc:3d:
62:1c:b2:e0:e2:b3:b0:cf:b7:8c:c3:4f:97:cf:fd:
26:04:be:77:5b:bb:c1:6e:6a:1a:44:46:db:5d:62:
09:a2:36:19:af:d4:92:12:67:a5:e1:2c:f3:c3:00:
01:3e:f8:04:7e:ef:45:50:4d:67:14:60:f8:5c:48:
a4:46:06:ee:58:1d:d1:e1:ad:9c:83:e4:c8:58:ce:
ee:9e:5f:56:c0:bc:fb:80:c8:27:f2:06:52:30:81:
a2:df:ef:30:23:ba:72:42:e8:55:fd:a3:2c:8d:80:
51:ff:f3:6d:7e:10:5c:0c:2b:64:24:d1:8b:28:c3:
8a:48:7c:87:09:5f:8d:23:0d:5d:73:92:d3:4f:04:
dd:2e:86:54:95:7d:2a:3e:40:a2:92:d9:49:c0:3f:
23:b1:18:d9:2e:da:55:7c:60:3e:da:59:1f:8f:83:
e3:6c:80:95:be:53:b1:9c:56:2b:b2:f7:31:3c:6d:
2b:66:ee:30:d4:f3:7c:7c:47:11:af:30:a7:4c:75:
6a:57:58:06:6e:56:db:c6:96:96:31:9f:08:6f:6b:
5a:6b:b0:3b:af:01:e2:23:97:e3:23:fc:8d:df:95:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5A:65:0B:D7:01:11:FE:46:F8:3B:AC:0D:39:7D:BB:E6:1A:7C:7C
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:23:4e:81:86:4a:a4:f3:d1:90:3b:51:6b:b7:d5:ae:3d:8d:
60:11:bc:08:da:1a:90:13:91:8b:80:d2:5f:ab:d5:5c:c9:fb:
7b:8e:7f:b8:3a:e2:29:22:7c:df:57:5a:bb:ac:2b:ee:b7:0c:
2b:29:fc:c3:68:f2:f1:dd:90:d2:22:f0:bc:9d:c0:c3:ff:b6:
21:d3:e9:a4:20:3b:c5:ac:bc:cb:43:c4:a4:24:c8:b0:22:95:
be:33:4e:b1:86:dc:db:b0:e5:54:ec:08:9e:7d:36:07:19:c8:
75:dd:83:c5:d2:0f:73:2d:9a:2c:ac:30:71:9b:6a:9f:4b:9d:
e3:9c:dd:38:8f:14:d8:e8:25:e8:17:1e:ed:5f:59:36:e0:a6:
df:1f:6a:59:c4:3d:ce:14:6a:31:7e:7a:20:1d:db:7b:22:aa:
63:64:55:fb:99:4f:8a:93:60:30:7c:99:39:d6:fa:81:cc:22:
61:27:0b:4e:5c:26:1d:7b:a1:23:1c:45:bb:14:6d:dd:34:27:
d0:b6:04:cc:bf:c6:e9:a5:5d:bc:18:23:01:f7:14:32:b4:6d:
51:c5:b6:04:e8:41:bc:ca:56:84:78:5b:99:d9:2e:5e:3b:04:
79:fe:97:45:ae:41:c2:93:67:72:5a:50:51:ea:b6:e6:ff:12:
d1:83:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:06 2026 by rpki-client