Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: ziJ7y4hPCkFzwVWhZ5YBgC0GtP3fEsC6PVcIMhoOrKA=
Subject key identifier: 2F:DF:1F:F5:59:90:43:18:F6:A9:F2:24:9C:40:B5:87:A2:90:0E:4C
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019FAA195BD44DFFC037AEAC272E77EEB8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 19:00:16 +0000
Manifest this update: Tue 28 Jul 2026 19:00:16 +0000
Manifest next update: Wed 29 Jul 2026 19:00:16 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: bxDmcxhZ+ibEfiypZfG2PIvBPOIxAC34C78tSlrcHnc=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5b:d4:4d:ff:c0:37:ae:ac:27:2e:77:ee:b8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jul 28 19:00:16 2026 GMT
Not After : Jul 29 19:00:16 2026 GMT
Subject: CN=2fdf1ff559904318f6a9f2249c40b587a2900e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cf:5e:79:f5:b1:7f:79:74:5a:f5:5e:42:b5:
49:5b:e2:cd:21:f4:2b:dc:00:86:d4:ae:b4:2f:03:
e9:5e:92:f5:a7:cb:74:25:c9:bb:fb:40:5a:eb:23:
ed:ff:0a:12:c4:6a:40:51:8b:7f:06:67:32:64:2f:
2b:24:41:f7:76:51:04:3b:26:4d:bc:a4:a7:bb:c7:
8e:94:b7:b6:37:22:52:96:17:09:f9:a4:64:3b:76:
16:24:05:2e:16:e3:48:d5:00:59:5e:57:0c:ba:72:
6e:6c:ec:18:53:e8:1c:06:46:4e:90:db:d3:40:5d:
ee:5f:45:8d:81:15:d6:4a:be:31:44:f2:cc:c4:d5:
48:78:91:63:42:20:0a:d6:8b:25:2f:7a:68:c2:05:
d3:21:6a:31:a1:d8:d1:ba:33:85:8b:4c:a7:b3:05:
8b:ec:4e:29:90:69:3b:91:d5:af:05:d2:e4:1b:07:
6b:f0:39:54:87:d5:ec:73:2a:86:d9:66:e1:f3:80:
65:e9:b8:3c:4e:06:54:e1:f3:27:47:f0:ce:0b:bb:
02:df:60:01:ef:22:54:5a:84:eb:4f:a4:75:59:06:
d7:5d:05:bf:58:08:78:57:dd:3f:cd:43:40:65:5d:
9c:59:ee:42:b9:fb:a6:44:0b:c6:a6:e6:d2:3b:de:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:1F:F5:59:90:43:18:F6:A9:F2:24:9C:40:B5:87:A2:90:0E:4C
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ec:79:a7:11:2d:f4:76:ff:3f:0e:26:28:bd:00:17:c1:e0:
e6:4b:75:6c:37:38:65:b0:19:e9:1a:9f:37:2a:b6:b7:6a:00:
78:7e:23:ce:6f:03:4a:6d:ac:39:42:b2:3d:45:ad:90:fd:9e:
42:9e:a7:90:93:8d:da:cc:d5:4d:b6:83:46:de:8b:19:74:ff:
27:b1:e1:96:88:8e:63:73:91:45:1e:d0:64:dc:6d:78:09:c5:
6c:8d:f0:97:fc:58:16:75:ac:ce:77:1b:9f:8d:0f:63:3d:98:
b0:1d:e2:c6:66:25:d0:86:b0:ee:a0:c1:c0:e2:1c:9f:7c:0b:
db:cc:a2:f8:64:41:51:a5:9e:c0:80:73:8f:a7:ea:c4:aa:ff:
7b:ff:84:97:6b:b9:1a:15:b7:b5:97:c8:06:12:78:7b:70:e3:
6c:39:15:fe:24:61:fb:f5:1f:58:ed:be:c0:26:3a:d0:ad:d0:
57:d8:ee:b1:b7:b8:f6:20:e4:01:9d:a3:91:f1:25:db:2e:c5:
c0:94:ae:60:09:8d:f5:64:82:05:3f:48:33:82:8d:41:b4:0d:
33:e8:e5:18:75:ab:15:7d:c4:ee:66:f6:1a:ae:59:98:e4:cc:
41:4c:9a:d2:c0:ad:e7:41:da:a6:39:dd:07:cb:4b:5a:95:d0:
c9:e8:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:45 2026 by rpki-client