Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: yBbaISPCbAmkyQcxa+oQgFPE21T53s+ink5W1/zY/zw=
Subject key identifier: 35:55:B2:61:40:88:75:54:BC:91:18:5B:D7:34:D0:3A:C7:2F:41:2B
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 01A1114DFD0456FC61AA961CE347B4A2C8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1A21
Signing time: Tue 06 Oct 2026 13:01:26 +0000
Manifest this update: Tue 06 Oct 2026 13:01:26 +0000
Manifest next update: Wed 07 Oct 2026 13:01:26 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: lENGa2htCSuj8Vq9COQsvvJM0RdZ/qKgPYMrejcLe4Y=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4d:fd:04:56:fc:61:aa:96:1c:e3:47:b4:a2:c8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Oct 6 13:01:26 2026 GMT
Not After : Oct 7 13:01:26 2026 GMT
Subject: CN=3555b26140887554bc91185bd734d03ac72f412b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:12:29:d0:a6:7b:b8:1b:83:2d:5a:bb:2f:
ba:c5:62:96:0e:11:10:53:db:d0:f1:8c:05:a7:ef:
13:4e:7e:0b:7f:ec:1a:6b:3f:72:fe:a8:b9:e5:dd:
7b:08:aa:5d:e7:5c:00:1d:7a:25:87:be:4c:e6:d1:
40:9d:bd:bf:b1:9c:20:91:86:61:36:04:66:ba:21:
65:e1:e8:75:23:c1:92:47:df:b2:9d:be:27:de:b1:
a3:af:62:89:4b:dd:36:84:1b:1f:f9:4f:d4:ae:c3:
b0:27:e9:ea:2c:e4:1a:6b:53:7f:e2:6d:34:7f:80:
68:93:ae:c5:05:4a:bd:79:af:2a:68:66:ca:2b:41:
13:11:09:3f:6a:1a:63:73:8f:fc:1a:aa:7a:79:8e:
89:8b:6b:15:85:d2:1f:db:88:be:5d:33:50:1d:7b:
11:f3:34:b1:d3:03:15:79:53:1d:2b:61:a1:be:3f:
56:79:27:80:19:8f:4b:fc:2f:26:1b:e1:13:ea:56:
43:6b:09:c9:b6:fc:d1:69:ff:ad:fc:47:76:1a:e2:
65:ad:21:80:cc:e1:11:cd:80:c8:b6:d8:7b:10:26:
cf:bf:f2:af:44:38:b9:1b:17:e4:d2:36:3a:42:1e:
ce:61:ff:00:72:75:72:c0:8f:18:8c:e5:a4:2a:1e:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:B2:61:40:88:75:54:BC:91:18:5B:D7:34:D0:3A:C7:2F:41:2B
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:ed:c7:28:f7:84:42:aa:31:63:78:28:52:0e:c7:60:95:
3c:2b:46:6e:44:57:22:e4:49:3d:12:0d:bc:aa:e4:92:69:0c:
c2:69:d6:7e:54:db:c3:7a:80:4d:30:3f:88:02:32:ed:6d:ea:
1d:5e:06:92:c0:5f:eb:5c:1b:e5:31:bd:6e:0c:ce:0e:f1:2e:
11:e8:a0:e0:c8:ae:09:3e:94:6d:78:db:1a:77:73:34:9b:f9:
54:3e:b3:04:33:21:17:80:fb:00:53:be:1f:32:8d:31:ac:ef:
0a:19:4a:a5:79:38:fa:4d:b6:38:0d:9e:62:7e:2b:31:f3:03:
78:2b:84:5a:ce:9a:fc:7e:63:79:35:cf:d6:c6:d2:46:23:67:
11:74:f6:06:85:0e:4f:35:ee:8f:b6:4c:36:54:22:42:94:47:
bd:fd:c6:ba:bc:de:6d:23:71:2c:b2:e6:91:78:3d:5d:74:fb:
ed:c9:1f:0d:de:13:7f:bb:5c:3b:8f:38:cc:85:93:90:37:a7:
ae:cb:f5:1c:c2:21:5a:31:c4:d2:ca:e8:00:0e:d8:0e:1e:1d:
60:a0:a3:74:b3:db:c4:4a:33:3c:a5:12:f0:b2:8e:8a:f7:c5:
1d:e0:26:c5:29:23:f8:64:2d:ac:1f:52:5b:86:14:09:fd:f4:
9a:4a:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:55:57 2026 by rpki-client