Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: ZZB9glJUkokrM64ZFHK82m3slj+OGkl8AzHQqJrQPrg=
Subject key identifier: 1E:30:EC:E4:2F:B9:21:78:94:B2:F9:BC:B6:36:DA:12:C7:89:62:BA
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019F90FEF925E378786A943A1EF347570EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 22:00:56 +0000
Manifest this update: Thu 23 Jul 2026 22:00:56 +0000
Manifest next update: Fri 24 Jul 2026 22:00:56 +0000
Files and hashes: 1: PchZpgQI1cqOkfrSxeBDQtCE6Og.roa (hash: dQcycKyCIYtsPpLQXquvjdEaWu6oSUN5IQlEGuJOqr8=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: F4Bb7UuIFbx5z/hTWx5qLoZkNXcbuwOkobodnRleEd4=)
3: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (hash: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:f9:25:e3:78:78:6a:94:3a:1e:f3:47:57:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jul 23 22:00:56 2026 GMT
Not After : Jul 24 22:00:56 2026 GMT
Subject: CN=1e30ece42fb9217894b2f9bcb636da12c78962ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:dd:16:9b:08:30:9c:aa:d9:61:4a:16:5f:
a9:b8:13:64:63:ff:49:99:dd:84:b2:c3:93:f2:f0:
32:ee:90:a0:be:fb:3b:40:33:bc:1a:91:db:75:b1:
d3:dd:19:cc:8a:38:28:50:18:10:bd:ac:75:08:35:
82:4f:a4:8c:8e:0a:7b:3b:e0:93:90:bf:3c:4d:fa:
10:ef:f9:cf:24:60:0b:d7:80:d5:5e:37:2f:a3:30:
41:e0:fe:a2:d8:ed:3a:b8:38:d1:a4:5e:0d:d2:db:
47:c3:2a:9e:a9:96:26:c0:6c:16:56:af:50:c9:35:
fb:bb:6d:82:fd:fb:f5:54:bf:09:df:5a:f9:19:bc:
be:b5:0f:1f:ef:ee:ea:d0:cc:8a:ff:4d:f7:b9:a8:
54:a2:a9:72:d0:08:09:c3:fe:4d:54:ca:e3:a2:52:
a3:ad:79:3b:7d:56:16:7a:dc:6d:e6:2e:5e:2e:e4:
b4:da:69:d8:81:89:3d:8e:70:59:7b:80:5e:9a:77:
94:51:68:84:33:92:6f:0c:82:ef:28:b9:de:00:d0:
59:b3:76:80:03:3a:da:ec:b8:b1:ea:18:11:37:f3:
c3:88:53:ea:d8:9a:cb:3b:ef:f7:96:af:fc:f7:7b:
c6:f9:02:62:3e:f4:73:9e:7e:34:95:55:16:9d:1a:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:30:EC:E4:2F:B9:21:78:94:B2:F9:BC:B6:36:DA:12:C7:89:62:BA
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:29:89:d3:56:ea:08:76:8d:39:38:55:69:d6:fa:f0:cc:
8b:a8:28:94:18:df:eb:8b:e0:f1:4f:40:a4:4b:7b:84:56:b6:
ed:37:5c:81:8d:2c:4d:f1:5f:c1:2a:48:63:56:eb:42:25:20:
cc:2a:1c:34:83:4c:27:da:1a:6a:4d:08:7d:ee:9e:b9:3c:cf:
ec:72:15:3a:3e:da:83:4a:5c:01:e6:e2:ae:53:18:b7:c6:e7:
9d:ca:18:7c:ef:c5:6a:14:07:df:80:c0:69:00:3e:85:3a:d8:
22:d5:8c:39:2b:88:d2:84:e4:a8:fe:09:35:34:3c:87:6e:20:
e2:96:9d:52:f3:a5:eb:e0:cc:62:02:8a:d4:1b:43:f0:f1:19:
25:03:07:f2:b0:26:c0:48:8f:16:a7:06:2c:02:47:cc:1c:1b:
81:45:84:2f:c5:1f:b5:10:34:f5:ca:ed:f8:a9:49:0a:7b:ad:
d9:40:4a:81:1c:8d:76:e5:90:4b:a2:f7:db:7f:8e:85:9b:76:
98:31:68:e0:d8:86:e2:c8:76:1e:3d:63:38:73:f0:1d:9c:ba:
d7:7f:37:21:b4:34:e4:75:d4:95:9d:79:c7:ec:f3:46:a8:f4:
ba:20:cf:5b:19:e3:1d:43:4c:e9:a7:93:c8:1d:00:83:3f:1f:
9d:e2:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:10 2026 by rpki-client