Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: BC3G1t/qOsiApfc4LKMz2U6REBxvS6KFo74boQGycm4=
Subject key identifier: 14:B7:96:AF:DC:6C:7A:C9:9E:A1:B7:13:44:0B:F9:6D:E4:3F:97:95
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 01A01FE8232F1E983C3AC5B7E94B600DC821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 19A4
Signing time: Thu 20 Aug 2026 16:01:42 +0000
Manifest this update: Thu 20 Aug 2026 16:01:42 +0000
Manifest next update: Fri 21 Aug 2026 16:01:42 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: djicl36BXq/wBbTcVblRLDV9CUZc1Vf+1AobjBBbDXg=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 16:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e8:23:2f:1e:98:3c:3a:c5:b7:e9:4b:60:0d:c8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Aug 20 16:01:42 2026 GMT
Not After : Aug 21 16:01:42 2026 GMT
Subject: CN=14b796afdc6c7ac99ea1b713440bf96de43f9795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:61:06:b6:6b:1b:a0:bb:99:ef:13:94:81:
70:36:7e:06:60:8e:07:73:ff:f1:2b:d4:52:24:eb:
2c:3d:1b:d1:a9:9f:3a:28:a6:a1:26:4a:e9:91:98:
f8:8b:4c:18:d8:71:a3:3f:eb:4d:99:0c:d2:2b:b1:
37:ec:05:df:f6:8a:b9:f6:fe:e7:99:6d:a4:cf:0c:
3a:60:ea:d0:38:93:b9:74:0b:14:e2:49:02:53:88:
a3:38:3f:eb:4e:f6:30:67:af:fe:a2:2f:76:f5:d4:
49:7b:70:87:77:b3:c7:a2:b4:4e:f3:e7:71:8e:5a:
5f:74:3a:7b:98:a2:d4:4a:38:70:56:22:06:dd:79:
ad:a5:a0:c8:1b:b8:16:cc:83:a8:1c:60:56:22:24:
eb:c6:06:ad:b8:1c:11:ab:46:bb:ef:65:16:13:ed:
d0:29:26:94:ea:3f:2d:ee:e4:a7:79:3d:ca:e8:42:
84:f8:b2:5a:ac:4f:94:e0:99:38:18:b2:2c:e4:3b:
7f:4e:6f:ba:d4:eb:03:0a:8b:bb:91:0e:f8:39:38:
f8:ac:c8:2a:2e:ed:cc:8a:61:d5:fc:3b:f7:7a:ad:
3c:fa:82:a7:d5:83:05:51:44:84:b4:2e:88:01:2f:
2d:02:f8:17:47:62:47:93:08:d4:b4:d6:06:8e:47:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:96:AF:DC:6C:7A:C9:9E:A1:B7:13:44:0B:F9:6D:E4:3F:97:95
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e3:58:15:a6:87:9e:f5:39:4e:36:a2:71:3d:c3:83:aa:e1:
30:d4:7d:ce:ce:13:a0:ce:95:0d:37:4e:99:cd:71:ae:03:24:
a8:46:de:37:9d:ec:3a:33:1b:be:91:3e:7d:e4:f0:fb:42:2f:
29:0e:2a:a3:69:40:84:96:33:79:2b:2a:51:0f:ca:e4:94:04:
c4:1c:cc:af:5d:85:16:1c:07:da:78:44:91:33:f7:61:d0:05:
f9:1a:8e:7a:05:d6:1a:cb:66:32:ff:64:f2:84:98:a2:c8:20:
e0:88:4e:ec:4f:06:8a:ec:83:59:6c:51:b3:27:2b:44:5b:ff:
93:db:59:ff:30:30:e5:3f:31:05:81:8d:57:69:fa:38:f3:12:
31:a7:fa:6b:28:88:08:33:83:72:53:84:19:65:75:14:66:5d:
df:8b:32:86:aa:5c:3b:44:d1:74:f3:94:f7:b3:bc:44:ff:7c:
ee:a6:f9:37:b6:1d:fb:03:10:77:10:ae:74:1b:7d:d3:9e:bd:
c4:75:bb:cc:89:2e:5c:08:0c:33:fa:1f:f1:f0:3f:ad:c5:d6:
3f:0c:f7:59:1d:14:f7:74:74:9f:2c:24:54:12:c6:17:44:e0:
26:79:00:3b:9b:ab:0a:b5:f9:42:d8:26:42:b4:13:bb:64:8b:
8e:de:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:40 2026 by rpki-client