Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: ubvm5FqubVH3hCLwkDvNFkBo+Ta2qajR95kQ75LKRfE=
Subject key identifier: 54:5E:68:9E:A4:06:D2:1C:20:09:E5:BC:C2:BF:24:18:07:E2:1D:2D
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019CAB6BC3876EDAFC2D41DDC443950871A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 22:01:32 +0000
Manifest this update: Sun 01 Mar 2026 22:01:32 +0000
Manifest next update: Mon 02 Mar 2026 22:01:32 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: j4Z6vdQ53N5sI4vDr61Tl7dfjWpOIw40L+hXQybuMR4=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c3:87:6e:da:fc:2d:41:dd:c4:43:95:08:71:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Mar 1 22:01:32 2026 GMT
Not After : Mar 2 22:01:32 2026 GMT
Subject: CN=545e689ea406d21c2009e5bcc2bf241807e21d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:e7:f5:7a:78:2a:3a:56:bb:5a:5e:b8:a8:
5e:db:e8:b3:f6:cd:58:75:a3:5e:2b:68:5e:c2:01:
8b:c6:e1:47:ca:f0:63:7a:35:04:ab:75:a9:70:b2:
63:50:85:dc:64:64:1a:96:07:a0:53:5e:c0:3d:06:
dd:a3:09:1a:77:51:a7:45:8c:74:a8:13:4b:dd:00:
08:3e:05:3c:b7:28:d4:48:5a:88:da:17:aa:ce:62:
3d:cc:2f:0a:8b:3e:79:13:88:8b:27:ee:b1:d3:48:
c5:72:6c:44:22:e7:99:83:01:25:09:54:9c:7b:97:
bf:66:c1:e1:09:f0:17:cd:64:c7:49:95:d4:13:50:
0a:28:75:46:e8:9e:54:d6:1b:9f:4c:b5:e4:fb:25:
48:03:0b:3b:80:8b:bb:2e:2d:8d:06:3b:9a:f2:81:
a1:91:b9:5d:6a:54:9e:d5:ac:27:3b:95:68:e0:c7:
0b:e0:fe:8b:73:ca:b8:3d:ae:bc:a7:e7:fd:02:0e:
b2:30:96:50:50:56:52:f9:c7:f8:21:46:ac:8c:b6:
8f:25:f8:88:f1:94:ec:bb:19:5b:5c:97:ac:0d:df:
1a:80:9f:7b:76:86:63:a4:16:d5:7c:c9:14:dd:20:
44:d7:bb:c5:a1:ec:15:bd:14:65:f0:b1:5a:b9:67:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5E:68:9E:A4:06:D2:1C:20:09:E5:BC:C2:BF:24:18:07:E2:1D:2D
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:01:91:21:37:9d:bc:61:be:80:19:3e:a3:d1:e1:c8:cf:2e:
fc:c9:c4:44:1a:44:de:05:ca:76:15:52:4a:b6:eb:e6:12:a5:
66:16:39:70:23:40:7d:e9:3e:4e:4a:0c:32:3d:07:cb:f2:12:
70:a2:16:4e:eb:f2:37:33:9e:ae:1a:9e:ea:99:4e:be:3a:f2:
ed:43:f0:d2:d4:1e:6a:6c:e5:31:67:29:d8:9a:11:c3:47:02:
43:9f:c7:a2:9b:d8:51:e8:7b:54:32:55:25:4c:7b:c5:4f:b8:
b3:0b:df:ad:26:1d:1a:3f:a4:92:1c:47:bf:53:d7:b7:31:c9:
1e:49:01:e1:d8:b0:bd:5a:ef:1c:6d:cb:cd:2f:44:86:3d:d0:
bc:50:59:3d:3a:0e:b6:98:6d:22:90:ee:dc:d2:9e:ce:43:d9:
cf:08:af:29:c4:b9:c0:33:19:b4:44:4d:e0:af:41:3b:d0:c2:
2d:98:c9:80:b0:1d:79:52:7b:fb:77:01:71:80:cb:36:b0:32:
91:81:7b:d6:77:ec:b3:9a:fe:f3:3d:70:c7:a2:d3:fb:5c:82:
ee:79:be:6e:47:ca:a1:bd:a4:c4:77:f0:c7:c7:9c:12:79:95:
fc:1a:d8:f7:02:2c:11:02:89:18:c8:c3:6b:f4:f9:a6:bc:97:
3d:d2:eb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:31 2026 by rpki-client