Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: OJNHtoFBtgrtdCQq5FfLbx1SR5W3qjHx9gej+BvLIgk=
Subject key identifier: 38:66:52:2F:A4:E7:58:14:89:5B:08:04:2F:25:31:2C:8E:AF:99:3A
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019E1E353FCB96B80DC178DFFA54AFBCAF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 22:01:06 +0000
Manifest this update: Tue 12 May 2026 22:01:06 +0000
Manifest next update: Wed 13 May 2026 22:01:06 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: YsgtS6VDsAF1HAbVIAp8UZy6ED+exJnZ29Mkkko5us4=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:3f:cb:96:b8:0d:c1:78:df:fa:54:af:bc:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: May 12 22:01:06 2026 GMT
Not After : May 13 22:01:06 2026 GMT
Subject: CN=3866522fa4e75814895b08042f25312c8eaf993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:9e:a0:8a:22:94:52:d6:c7:68:8b:82:9d:
eb:61:b3:44:19:ee:e7:ed:75:bc:be:8e:75:28:ee:
ec:19:00:10:a8:87:47:71:3c:e9:12:02:ca:d9:40:
e1:19:af:67:02:f2:fa:bc:90:4e:9c:77:5a:c6:66:
06:c1:a7:23:4d:11:f8:65:60:51:df:54:c9:24:b4:
d0:d7:7b:51:2c:57:cf:fb:e5:09:0b:53:2f:05:e6:
aa:3f:67:77:17:a2:76:ec:96:eb:79:57:df:09:ac:
18:0b:ed:94:40:de:43:2a:cf:93:b0:9e:74:dd:0e:
dd:7e:d9:57:74:ff:79:9f:08:96:eb:af:b6:f7:8b:
90:9c:08:ca:cc:33:75:77:fe:40:ca:21:d5:8a:2e:
e6:33:65:02:47:0c:21:32:10:f2:75:fb:65:2f:6b:
ec:43:f4:a5:47:d5:c3:4e:05:b0:2a:8e:c1:c7:79:
5d:5d:09:bf:c8:6f:3f:72:ef:b4:ba:d1:0f:93:f8:
48:77:88:e1:c8:0b:bd:3b:38:9a:f1:0f:79:4b:5a:
3b:41:dc:42:69:c8:36:77:09:6c:f7:62:e7:18:ea:
23:f8:2e:80:37:7a:7e:86:60:e9:b6:2e:a9:f9:ed:
5c:25:f5:8d:a5:a7:27:0d:cf:fb:e8:e4:d9:f4:b6:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:52:2F:A4:E7:58:14:89:5B:08:04:2F:25:31:2C:8E:AF:99:3A
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f6:5a:e9:4f:3b:42:84:b7:d7:be:1e:fc:f4:20:fb:d3:06:
48:22:85:b2:9b:1c:0b:b2:91:fb:eb:5a:25:2a:1e:81:a8:e5:
e5:ca:99:d1:94:f4:22:91:ab:d9:7f:e9:23:24:94:e8:a5:87:
3c:c7:c0:bc:85:1f:f0:ef:8d:66:26:1c:b1:05:88:10:f1:73:
93:61:87:03:48:6e:b0:79:a5:5d:a5:04:e0:55:bc:12:07:51:
5f:29:b2:3e:f7:2c:8b:ef:7b:c5:af:a0:aa:7c:63:1c:f7:35:
c6:f6:b6:38:4f:c1:79:84:77:1d:88:a1:f9:b3:5f:36:2a:1b:
43:1f:37:fe:c3:f0:69:6a:e7:57:ec:7a:9c:9d:79:55:4a:87:
b5:fa:48:18:49:92:aa:8f:44:ed:65:3d:c7:f9:72:dc:94:bf:
40:57:67:56:9a:52:0a:6b:b1:c7:e2:95:4b:dc:4b:de:71:f3:
bc:d0:09:4b:bb:0c:ac:c3:5b:1c:0a:62:32:0b:ea:b2:d3:40:
72:c3:0e:6c:df:c2:58:da:1f:90:d1:95:1c:58:94:30:94:fe:
e9:d2:71:46:33:f1:37:49:3e:1c:7e:2a:3d:ce:64:37:4f:18:
44:5a:7f:54:04:c0:7e:f2:70:42:20:19:c6:d8:e1:40:d5:21:
a4:86:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:13 2026 by rpki-client