Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: SpymhyCxhVaDJrt/YcSsWSrnvOuXooFNuHZJ4VMd95A=
Subject key identifier: 16:A7:D8:11:3E:F8:E9:AE:AB:05:CA:8D:4F:8A:85:79:16:60:7F:3D
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 01A0DD2A107033C144CEC4C053B5E8D5EEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1A06
Signing time: Sat 26 Sep 2026 10:01:56 +0000
Manifest this update: Sat 26 Sep 2026 10:01:56 +0000
Manifest next update: Sun 27 Sep 2026 10:01:56 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: +TTo0Yhy/oRun3QecXI+kDX6x2/I9yPiRWfiH0dvbi4=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:10:70:33:c1:44:ce:c4:c0:53:b5:e8:d5:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Sep 26 10:01:56 2026 GMT
Not After : Sep 27 10:01:56 2026 GMT
Subject: CN=16a7d8113ef8e9aeab05ca8d4f8a857916607f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:86:b9:12:7e:86:70:43:fa:35:d1:2d:de:
75:82:de:a4:a1:31:cf:18:79:b1:a3:df:63:6c:20:
d9:cf:5b:66:2e:04:ba:7d:82:25:9f:b4:4d:e0:02:
a4:65:b5:29:3f:53:70:13:25:74:a4:16:66:99:3d:
3e:c7:8d:d4:c7:2b:15:c1:13:85:92:b8:b7:73:8b:
cf:02:92:43:c4:32:2d:56:5e:35:35:1d:61:be:89:
b1:7f:7c:c8:29:21:f8:b8:99:3b:24:82:87:79:ea:
7c:ea:30:0e:d5:71:4c:3c:27:3d:c2:e6:df:26:a5:
ef:75:22:c7:b6:9c:37:fb:62:6e:0c:e0:0f:85:e4:
2a:aa:d5:81:b4:3d:e5:fa:9b:92:a3:ee:8f:5d:2a:
16:56:ef:e4:9f:d2:a9:66:49:b9:58:92:f0:e0:ab:
a3:ff:39:f8:8f:fe:dd:11:87:5f:02:2a:87:ce:74:
ab:6a:f7:6c:f4:da:f3:2f:7a:44:ea:8a:24:2f:5a:
db:62:f8:b3:1b:06:fe:cc:2c:cd:20:56:e5:90:90:
b0:bf:4f:f8:1e:20:5f:fc:82:e6:8d:51:06:c3:26:
32:1b:2d:87:ec:6e:fa:76:38:81:ca:54:ad:33:ce:
31:8d:8f:60:2d:b3:f7:40:21:83:c2:78:1b:6a:dd:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:D8:11:3E:F8:E9:AE:AB:05:CA:8D:4F:8A:85:79:16:60:7F:3D
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:93:af:02:fc:fa:45:1c:32:c4:7a:e6:e2:19:75:0d:70:9b:
00:e8:0a:89:26:5e:dc:f0:a2:4f:03:fb:c3:bf:2f:dc:b5:b2:
d2:a3:55:6c:4e:2b:8c:b7:59:37:78:ab:93:3c:c3:73:8f:a6:
64:00:7a:28:99:6b:01:e5:7a:02:80:08:a9:45:4a:92:37:19:
c7:26:d3:c8:d8:8e:4b:14:36:6d:d9:f8:55:68:66:ce:92:82:
17:55:42:6e:5e:e9:46:2d:a6:69:2c:c9:90:8c:7c:56:d3:bb:
59:57:08:bc:85:af:aa:c2:ea:a8:f3:56:a2:92:81:19:b3:61:
19:f5:51:51:b5:a7:93:88:3d:62:c2:31:39:39:15:6e:ec:04:
3b:87:1d:b6:2f:17:94:09:6b:46:23:71:3d:0b:26:5f:0a:51:
6c:2c:4b:25:47:02:ba:5d:a7:6a:2a:c8:d4:ab:e1:fd:a6:96:
0e:05:44:d2:1b:27:e9:5d:1f:45:65:71:5f:09:93:de:ca:f9:
4e:18:19:01:09:90:74:a3:ed:6f:3d:40:8c:3e:89:93:9d:ce:
f3:66:20:bd:21:b1:d0:1d:b2:fd:a2:8f:eb:f1:35:c1:3a:9a:
1e:e0:5b:2f:3a:dd:a9:29:1c:90:5a:02:e2:17:9a:5c:57:50:
ec:c3:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:33:01 2026 by rpki-client