Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: AK4heDSQ7S3ps2eIXQkV9QkBEZ+TeGi8ccUwF9k7/TE=
Subject key identifier: 05:48:34:32:ED:14:C3:86:6B:D2:61:62:34:BD:97:3E:35:80:CE:E0
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 019FFBA439792682CBBE9BB5D84911A30198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1499
Signing time: Thu 13 Aug 2026 15:01:11 +0000
Manifest this update: Thu 13 Aug 2026 15:01:11 +0000
Manifest next update: Fri 14 Aug 2026 15:01:11 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: dBNvss/GhWETo/EFx420SubJis/can5wX0EraU/X/Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:a4:39:79:26:82:cb:be:9b:b5:d8:49:11:a3:01:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Aug 13 15:01:11 2026 GMT
Not After : Aug 14 15:01:11 2026 GMT
Subject: CN=05483432ed14c3866bd2616234bd973e3580cee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:a2:c7:cc:df:d5:13:a2:3b:61:34:5c:69:
f9:40:a3:20:7f:54:4e:9f:50:75:15:e4:a1:7e:e9:
89:e0:e6:34:e4:cb:2e:bd:9a:73:f3:23:88:fa:25:
1f:ec:ce:9e:02:47:88:e0:18:77:cb:01:dd:b0:d8:
c8:70:29:36:d8:a5:12:d6:04:9a:c4:c3:47:39:af:
97:7a:b0:45:ad:d5:5a:a9:25:4b:87:05:7e:e4:f3:
6d:06:d4:36:86:53:40:a1:34:f0:5e:6d:27:ce:12:
d2:27:15:77:dd:14:a7:1d:4e:62:a3:77:dd:72:62:
da:97:20:9a:99:7d:42:be:c6:28:1a:00:f7:2b:44:
64:43:a6:ff:88:00:21:b1:13:4a:ac:0d:9c:d8:17:
47:41:8f:9a:b8:ee:e6:a8:0f:64:68:fb:fa:90:c9:
98:a3:de:bc:c4:8c:19:f5:3a:35:8d:1c:4c:02:eb:
7c:40:52:9b:a3:3d:3a:a8:83:e5:66:1b:90:a3:3e:
1e:5d:1e:26:c7:8a:36:be:26:bc:a2:97:ce:06:89:
8c:70:42:af:e0:a6:64:6b:62:89:ea:1f:57:01:67:
0e:ad:21:9e:94:c6:fc:9a:77:08:2f:f8:26:3d:f9:
74:bd:85:57:82:4d:e8:aa:6b:7a:5c:80:5a:e3:73:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:34:32:ED:14:C3:86:6B:D2:61:62:34:BD:97:3E:35:80:CE:E0
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b7:bd:f4:26:44:55:7a:df:d3:48:a3:c3:f2:5e:39:71:91:
54:89:9b:67:ca:a2:19:42:c1:42:62:41:c4:29:50:a5:01:16:
e9:49:dd:11:46:1b:d4:0a:3e:5e:d3:72:1a:e2:86:7a:cf:a5:
af:97:24:71:2b:3c:7b:72:79:1c:e6:90:ac:b8:8a:bf:d8:9e:
37:0f:20:fc:a8:84:c4:44:e2:d0:47:f5:fb:f9:dd:4e:fe:99:
3e:2f:0c:03:cb:16:34:9f:ba:79:c5:0a:eb:ec:7c:10:06:f0:
7b:0e:89:a3:92:eb:82:c1:35:b9:07:02:2b:e7:bc:e9:da:ca:
c0:da:dc:a4:05:4d:3c:2e:33:7d:e9:61:0f:f0:fc:d7:b9:75:
a3:97:36:c3:20:7a:f2:1b:42:fb:66:36:2f:be:b4:a0:69:b6:
ee:73:44:a6:53:f9:2b:9a:e1:68:6d:94:23:88:97:38:98:16:
c7:d9:e9:37:65:d0:cd:6f:a9:48:1f:42:fa:f4:c9:f7:6b:c4:
cc:ba:ef:1d:5f:33:ff:a2:25:f8:7d:e8:59:5d:ce:c8:87:22:
23:17:8c:e2:29:d2:25:ec:56:61:76:27:dd:25:ac:b3:7c:65:
53:8c:90:89:c9:ae:08:27:f8:88:69:c7:90:94:d0:c1:e2:e2:
a7:9b:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:12:47 2026 by rpki-client