Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: wvjC73ogftQfdOV0fUoJLos+mxmAJpo0RmnXO8gRuwc=
Subject key identifier: EF:77:A3:E9:4C:39:62:0F:98:04:1D:88:DE:F3:B4:CC:18:A0:90:69
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 019E246EE1CAA76D55A4617B8AB60BD4CA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 13A5
Signing time: Thu 14 May 2026 03:01:46 +0000
Manifest this update: Thu 14 May 2026 03:01:46 +0000
Manifest next update: Fri 15 May 2026 03:01:46 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: 7zz2sUuOyWasyseab7VH/fxjAuq0PErbvi/2weAIuxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 22:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:6e:e1:ca:a7:6d:55:a4:61:7b:8a:b6:0b:d4:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: May 14 03:01:46 2026 GMT
Not After : May 15 03:01:46 2026 GMT
Subject: CN=ef77a3e94c39620f98041d88def3b4cc18a09069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:15:05:0c:62:5b:2f:21:90:5a:14:b0:02:
c6:34:9f:d3:d1:d4:81:00:93:92:a8:ba:26:ae:45:
12:7c:40:4e:3c:1a:23:d8:0b:81:78:0c:f9:6a:6b:
60:31:e5:c2:d8:97:7b:e2:75:70:c5:c9:4a:d5:a7:
ce:07:29:54:2b:ad:8b:31:c2:08:2b:e3:2d:1e:eb:
c5:e6:c9:b3:37:73:28:40:8f:4f:0b:af:40:07:cf:
c8:27:d0:9b:e9:47:5e:79:dd:58:85:7a:72:3f:10:
27:da:20:31:49:a1:bd:4b:5d:26:56:7b:9e:4e:93:
7d:40:65:82:c4:43:32:bf:23:fc:05:1b:6f:fa:7f:
b9:6c:f8:e8:f2:e7:d8:49:f3:39:cc:f0:de:09:3d:
c9:7d:83:bd:ef:3e:25:9f:d4:40:c6:5d:d7:10:9d:
9e:96:2d:3a:6a:0c:7f:04:a5:29:cb:49:2c:d2:6b:
9f:05:93:32:fb:b0:26:b0:9d:ce:d5:f5:5d:5e:cc:
c0:c4:50:fb:36:27:e8:d5:af:46:b1:79:c7:c3:ac:
81:4f:a1:24:44:8f:e7:fa:b7:39:66:64:5c:4b:ba:
5c:c8:55:68:16:65:18:48:0a:fd:92:00:b7:ac:ae:
3b:a9:b9:fb:4a:e5:0d:20:87:8a:ab:a3:3e:3b:c5:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:A3:E9:4C:39:62:0F:98:04:1D:88:DE:F3:B4:CC:18:A0:90:69
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:61:20:23:1f:b5:c9:23:50:cc:b7:a1:71:6a:17:c6:c8:44:
62:07:9b:ca:d8:0e:e7:63:a7:cf:9a:fe:9b:e9:89:5a:43:04:
0c:99:ae:a9:7e:ba:08:0f:ce:7c:8a:75:51:34:44:a7:87:91:
c1:70:05:98:79:a6:41:f9:a0:c1:40:8c:5e:d3:fd:10:06:9d:
6c:60:91:be:6c:86:56:36:ae:9c:c3:c6:5a:b4:de:82:9b:b8:
ef:4d:56:36:52:dd:53:a5:a2:38:13:48:69:32:ad:88:f8:88:
f1:27:ec:58:a6:07:0e:7c:ba:a4:69:5c:88:83:c1:f2:d5:b8:
6e:d2:8e:8c:f3:2b:2f:ef:eb:52:51:bb:74:26:74:79:59:1e:
dd:e6:2f:77:58:2e:44:67:a3:01:dc:cb:11:45:f3:05:dc:83:
94:e8:b5:bd:8a:2d:98:61:9c:87:6a:41:27:c1:56:ac:c1:84:
d5:67:7b:ec:55:b0:44:cd:9a:04:90:4b:1a:72:f6:1c:1c:96:
dc:ca:6b:0e:ee:ff:4b:fb:ff:53:fd:ed:8e:53:11:4f:67:66:
42:91:5e:fc:42:87:a1:be:3a:8b:ac:5b:41:88:5c:dc:7c:51:
1b:a2:26:39:d4:d6:ef:02:d7:ad:ab:25:47:31:28:c4:2a:4c:
f8:23:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 06:02:54 2026 by rpki-client