Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: ZRYfdqxxUezIxMVokp8XDRHCsy/VjdOyGGUvM89p6c4=
Subject key identifier: A6:2E:A3:9B:48:16:E7:8E:7A:0F:4B:13:95:CB:94:55:52:0A:10:7E
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 01A0C7EAC7532834E64190A87C34A08D7579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 07:00:47 +0000
Manifest this update: Tue 22 Sep 2026 07:00:47 +0000
Manifest next update: Wed 23 Sep 2026 07:00:47 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: P8X/eEcQtGfdLfUgSIQFBotasBBWdYOEEJRfHOw/czM=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c7:53:28:34:e6:41:90:a8:7c:34:a0:8d:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Sep 22 07:00:47 2026 GMT
Not After : Sep 23 07:00:47 2026 GMT
Subject: CN=a62ea39b4816e78e7a0f4b1395cb9455520a107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:f6:a3:02:49:21:93:d9:c0:ce:11:29:47:
85:18:45:d2:f2:6c:2f:a7:5e:4e:66:8a:b0:42:54:
df:34:77:e8:41:88:9a:c1:22:0f:06:b6:ca:ad:ab:
ec:c0:91:6e:80:71:fd:09:48:db:f3:bc:50:cd:23:
b0:d5:64:2d:68:a9:b2:cb:ec:ba:5d:ed:0f:ae:97:
1a:62:72:0d:76:9c:8c:d1:48:ca:95:3c:3c:9e:a8:
bd:a2:be:c4:10:18:b8:d2:0c:e5:b3:24:d0:66:e5:
c4:3d:ad:82:5e:85:49:6f:6d:b5:a5:0b:0f:2f:24:
41:ae:8f:ce:2b:ed:66:9d:14:de:6e:ac:34:ee:c9:
e2:e7:01:e1:f7:c5:a8:21:22:04:83:03:27:af:55:
d4:96:c2:00:50:92:95:6c:e4:e7:c4:ad:cf:13:b9:
6d:d1:50:c4:c7:84:b7:93:89:d6:81:a4:76:cb:1b:
ce:1c:9f:f8:dc:6c:12:e4:77:c5:71:a8:68:1c:99:
4d:24:80:4b:e7:21:2b:a5:b7:a1:a0:fe:47:bf:6f:
8b:09:14:59:e3:b9:63:79:95:c9:c5:69:e2:20:84:
01:6f:6d:64:23:a2:ab:2a:47:13:d2:c2:eb:65:cb:
0f:a9:53:e7:f0:71:73:b2:be:88:fb:1f:0d:7c:00:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:A3:9B:48:16:E7:8E:7A:0F:4B:13:95:CB:94:55:52:0A:10:7E
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:cb:65:55:ff:95:45:b4:e5:12:41:ac:dd:75:0f:b5:13:
67:4b:41:2f:15:13:29:72:bb:83:e6:a9:02:88:b4:a9:0b:10:
bc:d4:a4:49:8d:83:b0:68:9c:e2:b5:64:14:74:6e:0e:7a:0a:
49:c6:36:b2:98:5e:b5:b6:ce:0f:bd:bd:5b:bc:b0:15:5b:73:
d7:bb:9e:5f:bd:2f:14:cb:d0:b9:81:c3:ce:bd:61:48:7a:a1:
e6:22:fe:a5:c5:fc:3d:f8:dd:ee:0a:2b:69:3b:b9:11:b1:2f:
d1:57:40:99:88:cd:3b:2c:43:8a:fe:05:e0:2a:b1:af:0f:ab:
1c:e7:89:1a:5b:d0:b7:6e:d4:78:9c:90:d3:eb:07:4d:4c:f4:
d7:8a:94:de:0e:7e:dd:0e:2d:2e:1b:0e:81:c8:48:a7:ef:d9:
a4:a4:f2:bb:31:96:8e:d3:65:82:1f:f7:18:69:b4:80:1b:c8:
b3:87:9e:5e:f9:05:d8:99:81:56:ed:64:03:64:77:4c:0c:77:
68:01:1a:86:30:44:bb:50:14:d3:67:b5:62:08:c3:d7:c6:10:
6d:2e:04:fe:2e:9c:5e:09:fd:4d:2f:79:1b:da:62:f4:dd:8d:
bf:f7:ce:bc:fa:30:a1:6b:9c:99:69:60:2d:c8:63:fd:7f:7d:
a4:f0:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:21:31 2026 by rpki-client