Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: kKm3XXymdLeFgMScIep1qxNQEsdeu/zO8UZRcwUVRVw=
Subject key identifier: F7:8A:87:38:BD:16:71:21:B9:9F:24:AC:D6:F9:A4:15:CE:BF:7D:1E
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019D9AE3549A6206D74AB590CBD305235208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 10:01:22 +0000
Manifest this update: Fri 17 Apr 2026 10:01:22 +0000
Manifest next update: Sat 18 Apr 2026 10:01:22 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: xH6P2jipynpkfmhDmgUBi+PBRnXBFyINlzufnAj8ijI=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:54:9a:62:06:d7:4a:b5:90:cb:d3:05:23:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Apr 17 10:01:22 2026 GMT
Not After : Apr 18 10:01:22 2026 GMT
Subject: CN=f78a8738bd167121b99f24acd6f9a415cebf7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:04:30:a1:06:28:a1:33:d9:d8:e5:28:48:
bc:a7:09:75:ab:39:8d:d2:8c:3c:25:c9:f2:4c:b1:
4b:a0:12:4c:e0:2b:b0:5c:de:16:a9:d4:68:35:86:
5d:5f:24:23:c8:e5:1d:cc:cf:1b:34:e5:41:7d:54:
4b:d9:e9:85:22:0b:03:7f:33:2a:e0:af:51:ec:ed:
17:51:bc:ad:cd:58:b1:1c:c5:6f:65:ea:9f:09:67:
9d:c9:ce:de:c4:e4:b9:e5:72:af:50:78:ab:04:7c:
70:bc:ed:c8:b8:ec:6a:0c:b1:97:b0:bc:a9:18:06:
45:a7:80:7b:2f:85:6b:74:35:e3:a9:b9:e8:44:39:
97:8c:76:6f:c3:3f:64:46:a4:3a:ed:c1:54:7f:35:
14:9b:92:23:f5:e3:a1:e3:78:7c:6e:86:e0:a4:d1:
a9:1a:5c:79:63:24:7e:d8:43:34:fc:d4:eb:70:9f:
cb:87:cc:79:3e:e0:57:2e:eb:ed:a7:73:a4:fe:dd:
d6:d3:3f:c7:7b:8c:5b:c4:bf:d2:37:e5:77:2d:47:
cb:f2:6e:02:48:2b:8b:e0:b2:ba:a4:c8:68:80:2b:
96:da:ca:d8:88:3e:4b:8b:c7:c9:bc:da:02:45:52:
31:cf:05:92:84:a0:1e:8c:db:aa:d1:f6:0d:47:70:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:87:38:BD:16:71:21:B9:9F:24:AC:D6:F9:A4:15:CE:BF:7D:1E
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:02:ea:ef:83:d3:e6:99:cf:d1:63:99:a1:bb:40:b9:30:33:
f9:25:bc:4c:1a:50:61:d8:f5:d6:cd:9b:cd:29:bf:88:e4:6d:
f5:58:33:c6:5c:4e:0e:2d:b3:59:d3:b9:c4:ef:77:f4:2e:94:
01:e9:24:c5:1e:d5:c6:4c:dc:cd:a1:27:27:29:62:10:8e:91:
14:92:8e:76:52:29:ca:4e:54:91:fe:60:3f:8d:01:c8:a8:73:
bd:72:f1:c0:34:b8:b4:f0:fc:c2:7e:ec:f1:3b:cf:86:e7:7b:
69:b1:e7:fb:30:9a:3b:2c:31:ae:3f:ad:4b:dc:5c:92:c4:8a:
c8:5b:53:d9:24:ec:72:d7:7b:0f:78:61:99:63:78:3d:fb:d6:
51:23:d4:b8:3a:4e:eb:c0:2e:a5:fb:49:c8:aa:05:9d:f9:b3:
38:93:cd:07:78:f1:e7:87:f1:07:6a:bb:56:0e:3c:f1:3f:96:
d9:3a:d7:46:33:e8:c3:5d:39:ed:97:1a:88:41:b8:44:67:ac:
34:9b:c4:5c:d8:4f:96:19:ba:79:4e:16:ff:f3:8b:7b:df:6a:
fe:5d:03:f7:50:38:99:ac:e7:58:c6:6c:15:e5:3b:25:4f:e0:
40:6f:6e:db:6b:65:e1:1d:dd:61:d9:c3:c6:68:26:62:3c:ca:
52:26:60:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a41SaYgbXSrWQy9MFI1IIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj
NjA3ODQwHhcNMjYwNDE3MTAwMTIyWhcNMjYwNDE4MTAwMTIyWjAzMTEwLwYDVQQD
EyhmNzhhODczOGJkMTY3MTIxYjk5ZjI0YWNkNmY5YTQxNWNlYmY3ZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm8EMKEGKKEz2djlKEi8pwl1qzmN
0ow8JcnyTLFLoBJM4CuwXN4WqdRoNYZdXyQjyOUdzM8bNOVBfVRL2emFIgsDfzMq
4K9R7O0XUbytzVixHMVvZeqfCWedyc7exOS55XKvUHirBHxwvO3IuOxqDLGXsLyp
GAZFp4B7L4VrdDXjqbnoRDmXjHZvwz9kRqQ67cFUfzUUm5Ij9eOh43h8bobgpNGp
Glx5YyR+2EM0/NTrcJ/Lh8x5PuBXLuvtp3Ok/t3W0z/He4xbxL/SN+V3LUfL8m4C
SCuL4LK6pMhogCuW2srYiD5Li8fJvNoCRVIxzwWShKAejNuq0fYNR3BbkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeKhzi9FnEhuZ8krNb5pBXOv30eMB8GA1UdIwQY
MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt
NzA4OWJjNTk4ZDgzLzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz
LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwLq74PT
5pnP0WOZobtAuTAz+SW8TBpQYdj11s2bzSm/iORt9VgzxlxODi2zWdO5xO939C6U
AekkxR7VxkzczaEnJyliEI6RFJKOdlIpyk5Ukf5gP40ByKhzvXLxwDS4tPD8wn7s
8TvPhud7abHn+zCaOywxrj+tS9xcksSKyFtT2STsctd7D3hhmWN4PfvWUSPUuDpO
68AupftJyKoFnfmzOJPNB3jx54fxB2q7Vg488T+W2TrXRjPow1057ZcaiEG4RGes
NJvEXNhPlhm6eU4W//OLe99q/l0D91A4maznWMZsFeU7JU/gQG9u22tl4R3dYdnD
xmgmYjzKUiZgdw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:23 2026 by rpki-client