Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: jacCuBR1QuBnHUPcZKXmja+x2dJJzlFXSY6snTNFlsU=
Subject key identifier: 58:28:65:4A:7A:BE:3F:0C:AD:4E:3F:95:87:65:E7:EB:DB:A3:DD:94
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019D27045D1889DF1BD6DB953427FE6C2355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: 5FlplGKBnRtDQ8HKeduwarBEOZF8XG97exv/LAv18P8=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5d:18:89:df:1b:d6:db:95:34:27:fe:6c:23:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=5828654a7abe3f0cad4e3f958765e7ebdba3dd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:92:53:a7:4a:1c:ac:31:89:b5:6e:86:10:
3d:a7:6d:97:8c:29:dc:9a:64:7a:84:bf:14:3b:db:
34:1e:0e:de:8c:42:38:e0:7b:33:ce:64:06:be:13:
6d:a5:5f:27:fe:ff:a4:6d:ce:b6:2e:e6:10:54:d6:
04:2f:e3:a8:62:cd:ba:44:bc:6a:9c:6e:14:76:7c:
c2:8d:ee:8a:dd:31:3f:f4:57:51:a1:22:24:a5:97:
33:25:cc:32:59:25:fa:cf:b8:54:39:ea:83:26:f8:
55:89:ea:78:0d:0f:e0:2b:90:17:f9:11:06:da:55:
b3:9f:2a:d0:7e:a0:60:25:96:ce:46:6b:0f:19:93:
3f:ad:04:ed:a3:15:60:c4:db:85:64:8e:6f:9c:71:
3b:a0:28:c3:7f:72:c9:df:24:90:28:33:50:bd:93:
37:f0:9e:70:17:3c:99:e3:d0:1b:2f:ae:31:29:ba:
2e:24:93:89:09:ae:59:34:37:80:a9:09:21:96:dc:
6e:49:d5:17:98:65:1e:b3:3e:b9:09:14:3f:1a:7e:
bd:3c:da:1d:fd:48:61:33:85:75:6c:ad:6d:11:38:
68:3f:0a:83:3f:d0:1b:3c:15:00:97:8b:f2:15:e5:
3b:b5:e0:7b:df:8f:a6:03:d0:f9:c3:45:04:cd:b1:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:28:65:4A:7A:BE:3F:0C:AD:4E:3F:95:87:65:E7:EB:DB:A3:DD:94
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a9:69:30:c6:58:f2:16:c5:2c:73:e3:99:9f:0c:f5:99:0b:
24:23:18:c7:9c:e4:c7:04:48:16:7c:c7:2a:18:9d:15:fd:d2:
34:44:40:42:f9:05:ea:1f:ff:a4:8a:c9:c2:aa:32:69:20:4c:
5b:f0:93:e1:8e:04:45:77:b8:14:3d:1d:01:1a:9c:8c:0e:e6:
07:7d:52:b1:df:41:06:69:41:b2:ba:5e:89:7e:7d:48:fa:0a:
aa:11:c4:5f:cb:dc:9f:5d:fa:8d:f4:18:e0:3d:66:ec:bb:f9:
7a:e5:db:57:b6:a3:fb:ed:60:9a:db:be:8e:34:0c:1e:03:2b:
67:9c:ed:30:46:b9:bd:c3:2c:66:f8:4f:72:05:a6:6d:16:4e:
99:bc:46:e0:d9:f2:13:bc:5f:08:5f:bc:ba:92:34:ff:cd:1c:
f7:80:a6:e0:f9:2b:f7:6e:60:4d:73:18:70:db:c3:32:c0:11:
a9:c9:2a:34:ab:10:cb:09:6f:08:43:47:37:e1:ba:ba:e0:9b:
34:7f:50:4d:64:41:4b:9d:99:5f:3b:72:3e:81:22:e1:08:e3:
75:40:57:cc:81:90:6d:bd:dd:38:33:01:e5:31:37:c1:f2:cb:
61:36:14:ca:16:6e:a5:22:b4:10:b3:ed:48:d7:c9:82:4d:7c:
a8:0a:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:41 2026 by rpki-client