Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: h/NcMkdRp0NkNvKFzRYaMEiqUr/hGSMhvwNNnkafosA=
Subject key identifier: 3A:B3:D3:B4:4F:BA:4B:56:BA:FA:55:9D:5A:37:A8:BE:49:AE:3F:26
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019DEDEE7AC53239594C83455A205F94546C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1881
Signing time: Sun 03 May 2026 13:02:02 +0000
Manifest this update: Sun 03 May 2026 13:02:02 +0000
Manifest next update: Mon 04 May 2026 13:02:02 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: TaiAttC9F8lOHDiuknEhpEaw3px0x4DdKTz2XuK1SXE=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:ee:7a:c5:32:39:59:4c:83:45:5a:20:5f:94:54:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: May 3 13:02:02 2026 GMT
Not After : May 4 13:02:02 2026 GMT
Subject: CN=3ab3d3b44fba4b56bafa559d5a37a8be49ae3f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:1a:3b:eb:39:53:b6:f5:0d:20:07:6a:6c:
9a:49:2e:08:16:f9:f2:ec:e2:97:4b:dd:3e:0a:af:
97:1c:a4:76:28:b7:9d:cb:bb:20:7f:b1:14:e3:47:
ec:8a:c1:d6:48:23:b8:84:56:d5:d6:58:c5:bf:5d:
f5:08:59:a6:b0:b0:ef:e5:d4:67:00:8a:d1:15:5e:
bf:9c:a0:7a:75:bd:26:af:45:f7:bb:b4:a9:b5:85:
ab:43:bd:15:4d:66:6a:16:94:b1:ab:a9:e5:7b:fe:
99:20:57:a3:1c:b3:c9:c1:cf:a7:67:71:19:6b:c6:
aa:22:3b:c9:f7:d2:1e:b1:28:d6:e3:57:3d:1c:26:
12:90:14:59:30:01:d7:7c:37:e8:42:41:3d:1f:5c:
da:23:90:3b:30:25:39:98:78:be:a7:82:8e:09:82:
77:37:79:b5:19:8c:a4:17:d5:69:44:55:ef:0b:1c:
c3:e5:69:15:fe:2a:08:a1:bf:98:ad:4c:df:45:80:
c0:1e:35:6a:bf:1c:13:7a:96:d5:5b:f4:34:ec:29:
5e:e3:c0:b8:0f:ec:95:c0:94:6d:52:5e:3c:08:13:
45:30:4f:64:57:db:8c:f8:66:77:6d:fc:45:8b:e0:
cf:fe:82:f4:17:93:1b:f1:b8:89:4e:34:4e:0d:02:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:D3:B4:4F:BA:4B:56:BA:FA:55:9D:5A:37:A8:BE:49:AE:3F:26
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e7:60:f3:cd:c3:52:48:ff:dd:f9:3b:17:a3:41:98:01:81:
bb:fe:23:0e:ff:4f:9f:05:24:94:4f:9f:b4:d4:41:dd:09:eb:
1a:8a:b6:6f:0d:df:9b:96:2e:b7:26:c1:1d:c3:e7:86:28:cb:
f7:ed:1e:eb:0d:9e:16:60:fd:90:b7:b0:5c:a0:33:8d:1f:8c:
a2:ea:3e:f0:6d:8e:4e:ea:c5:84:58:40:6a:05:cd:f5:31:36:
ae:06:b9:b8:d8:77:05:9e:9f:d2:4b:6e:3f:9b:b0:09:39:dc:
97:c1:54:b7:24:75:b9:cf:73:9a:db:79:65:6c:7f:84:6a:2c:
29:8b:ab:ff:8e:07:a5:b2:ce:05:48:97:82:fb:b3:34:f9:8e:
17:99:09:ce:92:8e:c6:29:d4:c5:74:48:97:cb:0d:47:06:59:
32:d6:8c:a1:78:e7:d9:e6:00:76:68:d9:c8:0d:dc:9b:71:6e:
f0:83:b1:a1:8d:cb:25:a8:98:6e:d5:0b:98:3d:fd:b9:91:d2:
67:51:60:ec:45:95:5b:19:43:3e:1a:5b:f8:87:e4:f3:13:bd:
85:65:07:dd:4a:b2:bf:b8:a9:86:51:56:c8:2a:df:ae:91:81:
a4:49:87:fb:90:5b:25:d2:19:58:38:78:7a:ca:30:50:e2:3c:
dd:8c:10:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3t7nrFMjlZTINFWiBflFRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj
NjA3ODQwHhcNMjYwNTAzMTMwMjAyWhcNMjYwNTA0MTMwMjAyWjAzMTEwLwYDVQQD
EygzYWIzZDNiNDRmYmE0YjU2YmFmYTU1OWQ1YTM3YThiZTQ5YWUzZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b8aO+s5U7b1DSAHamyaSS4IFvny
7OKXS90+Cq+XHKR2KLedy7sgf7EU40fsisHWSCO4hFbV1ljFv131CFmmsLDv5dRn
AIrRFV6/nKB6db0mr0X3u7SptYWrQ70VTWZqFpSxq6nle/6ZIFejHLPJwc+nZ3EZ
a8aqIjvJ99IesSjW41c9HCYSkBRZMAHXfDfoQkE9H1zaI5A7MCU5mHi+p4KOCYJ3
N3m1GYykF9VpRFXvCxzD5WkV/ioIob+YrUzfRYDAHjVqvxwTepbVW/Q07Cle48C4
D+yVwJRtUl48CBNFME9kV9uM+GZ3bfxFi+DP/oL0F5Mb8biJTjRODQK82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqz07RPuktWuvpVnVo3qL5Jrj8mMB8GA1UdIwQY
MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt
NzA4OWJjNTk4ZDgzLzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz
LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiudg883D
Ukj/3fk7F6NBmAGBu/4jDv9PnwUklE+ftNRB3QnrGoq2bw3fm5YutybBHcPnhijL
9+0e6w2eFmD9kLewXKAzjR+Mouo+8G2OTurFhFhAagXN9TE2rga5uNh3BZ6f0ktu
P5uwCTncl8FUtyR1uc9zmtt5ZWx/hGosKYur/44HpbLOBUiXgvuzNPmOF5kJzpKO
xinUxXRIl8sNRwZZMtaMoXjn2eYAdmjZyA3cm3Fu8IOxoY3LJaiYbtULmD39uZHS
Z1Fg7EWVWxlDPhpb+Ifk8xO9hWUH3Uqyv7iphlFWyCrfrpGBpEmH+5BbJdIZWDh4
esowUOI83YwQGA==
-----END CERTIFICATE-----
Generated at Sun May 3 17:09:01 2026 by rpki-client