Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: 2uc0MLeDUVQ8jW+9bG7WO1V8sgqPHe96f8BGmfatA7E=
Subject key identifier: 09:1C:FD:C3:7D:2E:A4:3B:E1:B5:1C:FF:BF:E5:DB:6C:B2:D9:0B:6B
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019EBE7FDD67D490BC9A3B484F4859703D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 18ED
Signing time: Sat 13 Jun 2026 01:01:51 +0000
Manifest this update: Sat 13 Jun 2026 01:01:51 +0000
Manifest next update: Sun 14 Jun 2026 01:01:51 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: Rq1IrmxvSfa8CnCGii8ZQ8KjYArNmEfUPJ9MBb/lzfQ=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:dd:67:d4:90:bc:9a:3b:48:4f:48:59:70:3d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jun 13 01:01:51 2026 GMT
Not After : Jun 14 01:01:51 2026 GMT
Subject: CN=091cfdc37d2ea43be1b51cffbfe5db6cb2d90b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:e4:4f:19:68:f4:91:2e:71:83:db:9f:1a:
62:8f:85:cb:f1:cc:bd:7a:b3:de:71:9b:ec:03:16:
cc:a7:e9:30:1c:61:28:8b:3f:e8:2a:b8:74:10:68:
ca:e5:82:75:04:e3:be:fd:bc:48:fa:5a:3b:5c:53:
69:17:f0:0c:fc:3a:3d:1b:7a:44:19:82:0e:27:00:
ee:4d:c5:bf:8c:6b:9b:d0:3a:88:0e:3c:36:5d:be:
ad:a1:72:fa:91:4c:7c:6a:9b:ca:e0:d8:5f:e5:35:
08:5f:b3:45:40:c7:a6:24:aa:60:98:ab:0b:e3:ec:
ae:75:7a:8a:40:1d:de:13:9a:e6:4e:b0:8c:66:cf:
bb:11:1c:e1:d0:1e:de:02:5c:32:c6:5e:7f:cb:06:
b4:c6:dd:e6:b6:1e:68:a7:e3:60:77:89:8b:fe:4e:
01:49:aa:91:8e:c9:ed:29:e3:7c:1b:74:41:0f:57:
82:6d:24:16:22:8c:81:db:2e:f0:48:61:b1:49:65:
b5:90:08:71:6b:51:e0:1a:32:2c:5b:4f:70:a1:5b:
b9:77:8d:b2:bf:0b:6f:37:8c:cc:c0:54:18:79:27:
f2:b6:84:38:ff:76:5b:71:9d:d0:42:f6:64:61:d8:
2f:80:63:d0:89:a0:2e:cf:8b:76:ee:17:58:91:97:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:FD:C3:7D:2E:A4:3B:E1:B5:1C:FF:BF:E5:DB:6C:B2:D9:0B:6B
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:34:8b:f5:be:36:5b:5c:5b:73:ca:13:fc:7d:22:0b:7a:80:
7e:15:bf:fc:d6:ff:f1:eb:13:1c:c3:b1:4a:d5:32:32:d6:30:
5e:c0:77:f8:d3:b4:95:81:34:9f:71:6d:0e:58:ab:12:46:0a:
5d:a6:78:5b:f9:4c:1f:86:69:88:39:16:c8:16:5c:d5:01:0d:
ec:48:06:42:06:c4:b2:4d:c3:0c:c5:d5:f5:0d:06:17:25:16:
9f:15:65:b4:37:8d:fc:c7:05:9d:ee:f5:bd:53:b0:3a:fd:4f:
7f:68:0a:6a:8f:ff:93:bd:e5:be:f5:98:cd:ca:7e:03:02:5a:
91:67:6c:f2:88:75:5d:a4:64:af:f0:2c:c3:6e:b2:3f:9d:0f:
5a:4a:64:f4:3c:2c:d1:d6:78:4f:70:10:cb:0b:31:17:4d:79:
6c:ea:f3:b9:3b:32:e9:bf:68:82:82:b0:89:97:bd:1b:b2:0b:
6c:19:bf:d2:0d:29:a0:1c:c9:a2:f8:60:aa:b0:ee:61:04:e8:
0a:ab:85:5d:0f:08:83:10:df:e8:a5:90:af:78:85:88:86:b7:
04:29:6a:19:9d:15:2f:11:aa:c3:41:e5:28:d3:8d:21:06:76:
cc:bd:d6:18:f5:45:74:78:3e:fe:dd:2a:f7:0a:2e:ad:23:54:
df:49:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:44 2026 by rpki-client