Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: anLV3cIcBngXi914DrVwIFDL4AcGPHenQRDPNqHbmsE=
Subject key identifier: DA:CA:F9:1B:2B:92:BC:0B:A9:33:3A:A3:76:34:35:F5:C8:45:08:72
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019D0441967DEC0C611BC767F77626653F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1808
Signing time: Thu 19 Mar 2026 04:01:40 +0000
Manifest this update: Thu 19 Mar 2026 04:01:40 +0000
Manifest next update: Fri 20 Mar 2026 04:01:40 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: YgkeQyxVgBzbK65TfcrQCmflHtJfXVbjLGXk5WOp95c=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:41:96:7d:ec:0c:61:1b:c7:67:f7:76:26:65:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Mar 19 04:01:40 2026 GMT
Not After : Mar 20 04:01:40 2026 GMT
Subject: CN=dacaf91b2b92bc0ba9333aa3763435f5c8450872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:29:22:69:29:54:88:ba:ae:24:8b:1c:6f:
ea:04:73:7e:6c:52:51:87:20:30:6f:9d:55:e1:8b:
40:67:59:27:11:26:ea:31:d6:77:bd:d5:bd:ce:45:
58:51:9e:34:8e:45:b7:4c:c5:a0:81:29:53:18:b9:
02:84:c3:26:21:f4:8f:e6:5c:f7:1c:6e:a2:bb:fa:
83:7f:b3:5a:9d:56:26:76:6d:b0:cf:2d:9f:cb:25:
c9:ea:2e:68:79:02:4a:c4:c3:50:4d:07:3c:25:19:
b0:15:cb:80:14:f0:28:d2:30:44:60:bc:e9:1f:11:
a8:5b:77:b5:02:4c:dc:35:6f:82:05:0f:a6:42:99:
8d:98:5f:b9:00:bb:bc:8c:ec:7e:b4:c4:a1:7e:b9:
5c:c7:35:d9:20:18:ec:20:f2:d1:f7:f2:c4:90:1a:
f0:c4:f1:55:05:c0:70:9a:45:f7:ad:90:b8:25:38:
af:33:ff:a0:e0:71:c0:c1:a3:6a:33:73:02:84:4d:
2a:81:d8:d5:dc:08:5e:3b:5b:e6:4a:e6:f5:78:6b:
2a:c7:16:2a:9a:76:4e:7c:d6:c5:a9:7b:46:fc:46:
71:09:85:7e:d6:3e:71:aa:9a:b8:52:f4:08:1e:34:
d5:1b:6c:5b:da:5c:a8:ab:40:e7:be:74:a5:df:de:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CA:F9:1B:2B:92:BC:0B:A9:33:3A:A3:76:34:35:F5:C8:45:08:72
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:68:c5:f6:8e:47:d3:b5:bb:6d:c4:14:05:05:ca:7d:a2:cc:
8d:39:ac:d6:7b:72:41:bb:5a:b3:c2:73:3d:41:91:46:c8:eb:
35:1c:03:2d:d0:a6:7f:84:a9:75:84:76:d1:c6:17:30:ed:3c:
5d:a0:db:4d:95:d8:c2:82:83:01:4f:42:ed:aa:05:d5:c7:51:
ca:03:81:97:16:67:2b:29:30:e7:15:f7:5b:4f:bf:f2:d7:9c:
50:8e:b8:8d:19:9c:93:5a:73:cc:a8:24:9a:0b:5d:5d:46:2b:
5c:36:42:13:58:21:13:f3:90:3e:00:7e:4b:04:e0:6a:82:85:
c7:c4:11:49:0d:39:5a:39:d6:94:f0:d6:dc:24:34:92:0a:9f:
fd:fd:4e:e2:07:c4:b1:99:09:e1:6b:d1:82:76:7b:23:59:24:
3e:0a:06:16:66:87:c9:8f:d4:64:b6:a8:fe:86:2c:5b:dd:3a:
30:82:92:94:69:65:fe:fc:8e:85:a6:b4:cc:1f:6c:ba:58:de:
64:30:6c:66:da:70:96:1c:b1:c8:46:09:4b:9b:e0:fd:04:0f:
63:9c:49:13:05:2e:3e:6e:a5:96:85:99:89:d8:e9:79:1a:19:
2e:10:87:9a:ed:40:ff:18:c1:8b:ce:3c:cc:cf:98:91:0a:d1:
b6:2a:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:55 2026 by rpki-client