Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: rZigwHr0jZZ6Wa6zOiMXqQnYitbh5+Eg9RmotD/taX0=
Subject key identifier: F9:48:6C:1D:F1:9A:B4:EA:32:5A:38:F6:6A:93:2D:8B:2D:03:C6:ED
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 019D38D377D01E6466B36BA764329AFBDC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 132B
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: rZ5CdaykKRNgZqOi+HtgQ2fj5bz2oD40fLN08UWRcHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:77:d0:1e:64:66:b3:6b:a7:64:32:9a:fb:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=f9486c1df19ab4ea325a38f66a932d8b2d03c6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:ba:1d:57:b9:db:28:46:6c:2c:37:e0:73:
f3:62:b8:2a:fe:37:10:f1:64:08:0c:c4:bc:92:2d:
4d:96:6b:87:be:f8:e8:24:5d:02:34:25:9e:16:6a:
fa:67:52:1d:94:48:f0:0e:cd:75:e5:6a:38:2a:e9:
cd:bd:df:af:46:34:7c:56:97:aa:9d:1a:d8:b6:61:
0c:2b:54:a9:7f:3d:5d:d4:00:1a:ba:60:a8:59:32:
94:16:5a:c8:c3:4c:eb:4f:9e:da:50:f9:fb:41:c9:
0b:ad:8c:2e:3f:82:51:d2:fc:6d:7a:7d:cc:80:6e:
fd:14:d0:74:b5:8a:58:be:da:03:ae:f2:e8:ee:0b:
f7:a5:07:a1:c9:6a:9c:9b:9b:0d:bb:4b:94:7b:1d:
50:e0:15:1d:b7:de:6c:e8:03:9b:91:ea:c6:f8:45:
2f:09:13:9c:5d:e0:d1:58:f3:c5:5a:35:38:8d:7c:
c2:31:a5:cb:55:c9:f3:02:23:c0:59:86:05:7a:39:
60:14:74:c8:35:6f:7f:92:2d:d1:59:12:39:41:0e:
89:22:fb:12:ca:aa:71:9a:14:58:74:39:e3:41:c0:
8f:6a:96:f7:65:d8:59:15:2e:f9:0d:11:02:d9:cf:
39:c6:39:83:e1:a2:e3:2d:75:77:1e:55:ae:32:1b:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:48:6C:1D:F1:9A:B4:EA:32:5A:38:F6:6A:93:2D:8B:2D:03:C6:ED
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ff:ea:19:60:5b:90:6d:88:4b:b6:24:d9:32:ed:14:c5:2d:
99:6e:a0:de:24:50:2b:18:b3:3b:7b:09:15:21:3f:10:8b:e4:
f4:bd:da:4e:b1:99:3b:ef:be:75:34:d3:ca:fe:dc:a8:c6:d2:
46:7b:c3:dd:2d:9a:c0:30:a2:40:48:5a:6c:69:f9:57:ba:51:
42:8f:3b:19:2c:c2:e0:3a:b0:98:bc:12:d7:2c:2d:3e:ef:6f:
74:f9:fc:1d:7a:71:b2:30:31:c0:d8:65:63:23:af:6f:ae:71:
71:0b:78:35:0f:ae:33:6f:17:77:f7:1a:6c:59:05:01:95:bb:
bb:36:d0:68:53:63:4a:47:29:fd:e9:bf:11:ee:7a:99:10:cd:
2d:88:0f:b9:cb:4f:e6:b7:74:82:6a:7c:28:df:a1:f9:60:92:
37:f3:9f:52:bb:90:49:1e:0a:e0:99:69:58:74:0c:5a:58:d7:
b5:d6:82:4d:b5:0d:ef:e4:6e:86:82:0e:70:65:a9:8b:4b:32:
75:30:c5:52:7c:8c:63:da:58:52:c2:76:d5:9c:7b:a8:82:30:
05:f4:9e:47:72:e9:e3:af:32:d9:81:83:f5:e1:43:3a:06:29:
04:55:c0:b5:10:06:8b:11:39:44:d2:8b:dd:b0:26:d7:8f:eb:
d6:17:f2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403fQHmRms2unZDKa+9wWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNzIwMDU0NGY5M2E2NzVmYzhjNzg0MTg1Njk4MGUzOGEz
NTI5Y2IwHhcNMjYwMzI5MDkwMTE1WhcNMjYwMzMwMDkwMTE1WjAzMTEwLwYDVQQD
EyhmOTQ4NmMxZGYxOWFiNGVhMzI1YTM4ZjY2YTkzMmQ4YjJkMDNjNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsu6HVe52yhGbCw34HPzYrgq/jcQ
8WQIDMS8ki1NlmuHvvjoJF0CNCWeFmr6Z1IdlEjwDs115Wo4KunNvd+vRjR8Vpeq
nRrYtmEMK1Spfz1d1AAaumCoWTKUFlrIw0zrT57aUPn7QckLrYwuP4JR0vxten3M
gG79FNB0tYpYvtoDrvLo7gv3pQehyWqcm5sNu0uUex1Q4BUdt95s6AObkerG+EUv
CROcXeDRWPPFWjU4jXzCMaXLVcnzAiPAWYYFejlgFHTINW9/ki3RWRI5QQ6JIvsS
yqpxmhRYdDnjQcCPapb3ZdhZFS75DREC2c85xjmD4aLjLXV3HlWuMhudZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlIbB3xmrTqMlo49mqTLYstA8btMB8GA1UdIwQY
MBaAFKJyAFRPk6Z1/Ix4QYVpgOOKNSnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgt
ZWZhN2Y4OWJkMGI5LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgtZWZhN2Y4OWJkMGI5
LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxP/qGWBb
kG2IS7Yk2TLtFMUtmW6g3iRQKxizO3sJFSE/EIvk9L3aTrGZO+++dTTTyv7cqMbS
RnvD3S2awDCiQEhabGn5V7pRQo87GSzC4DqwmLwS1ywtPu9vdPn8HXpxsjAxwNhl
YyOvb65xcQt4NQ+uM28Xd/cabFkFAZW7uzbQaFNjSkcp/em/Ee56mRDNLYgPuctP
5rd0gmp8KN+h+WCSN/OfUruQSR4K4JlpWHQMWljXtdaCTbUN7+RuhoIOcGWpi0sy
dTDFUnyMY9pYUsJ21Zx7qIIwBfSeR3Lp468y2YGD9eFDOgYpBFXAtRAGixE5RNKL
3bAm14/r1hfyjg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:54 2026 by rpki-client