Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: ++zPPVtIq6iQwFjBatftfd84fJuiBAroq3OchZL1H+8=
Subject key identifier: 9D:A4:D6:DB:93:43:CB:B4:A7:B7:C0:3B:2C:C2:62:44:5F:62:66:7E
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 01A10625E9226DC12A8A303A6DB32E03F2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1523
Signing time: Sun 04 Oct 2026 09:01:50 +0000
Manifest this update: Sun 04 Oct 2026 09:01:50 +0000
Manifest next update: Mon 05 Oct 2026 09:01:50 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: 85fF3mGPMGRtPQG2NhwfHhJM0EILr4Z+pWFoYNZQSkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:e9:22:6d:c1:2a:8a:30:3a:6d:b3:2e:03:f2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Oct 4 09:01:50 2026 GMT
Not After : Oct 5 09:01:50 2026 GMT
Subject: CN=9da4d6db9343cbb4a7b7c03b2cc262445f62667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:93:7b:e0:c3:58:06:ba:b3:a4:04:dc:f1:
d8:f9:43:e3:d0:be:51:b8:0f:2e:36:df:89:e9:97:
ab:03:82:8d:c1:7a:6c:ec:f4:c4:3f:f9:85:7e:7a:
b7:71:31:07:6c:74:90:bd:88:4c:d6:ea:70:1c:8a:
da:24:d4:fa:be:d2:5d:69:18:70:1a:0f:3d:41:fe:
d2:db:bc:ac:62:a2:9f:73:ff:b1:72:33:25:51:d8:
48:ff:b4:1c:ae:8d:9d:b3:3c:2a:6a:1e:32:79:9b:
5c:53:45:26:f3:c4:ca:81:51:3c:a3:30:a2:ae:aa:
0c:e0:d4:04:28:4b:65:41:cd:28:82:eb:61:dc:82:
3b:46:6b:13:ba:0c:aa:44:bd:2c:61:b3:05:22:fb:
5a:d1:fb:3c:ec:aa:ba:49:51:65:ad:0d:f7:fb:3b:
43:99:98:26:07:39:33:0b:e4:a9:e9:16:af:c9:de:
30:00:43:19:72:b9:3f:17:52:1a:9b:d0:23:0e:9a:
22:26:46:59:51:87:62:59:de:24:a4:1d:3d:d2:e2:
a1:c7:8b:5c:3d:43:d5:9d:f1:8c:20:db:60:72:fb:
63:91:70:f6:5c:33:1d:d0:0f:f0:3a:41:85:02:11:
82:1d:1b:af:b4:55:a1:45:07:96:28:d3:ba:61:d5:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:D6:DB:93:43:CB:B4:A7:B7:C0:3B:2C:C2:62:44:5F:62:66:7E
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ed:fc:68:45:e2:21:55:fe:63:67:9f:a0:fe:5a:93:a8:3f:
0c:01:7b:2f:33:17:68:7d:c0:bb:45:7c:9c:79:ad:2d:9f:1c:
ae:5f:32:04:2a:f0:db:df:50:8a:79:e4:d5:8d:8b:40:46:1d:
0a:de:74:ec:67:ea:1f:4e:8a:04:82:c2:95:a8:c2:ec:77:49:
d3:ad:f6:77:1a:23:42:1b:3a:a5:5c:d7:49:20:f7:2a:11:98:
d4:41:b5:e4:bb:59:cb:04:b3:c6:de:d5:f1:73:5e:4d:c6:37:
bd:5a:e5:ed:97:d2:30:ed:30:b9:e9:1e:0d:62:22:c8:57:cc:
04:01:bc:c5:b2:95:eb:06:c3:48:ac:60:01:38:63:76:83:c0:
3e:96:28:ae:f8:fd:45:0d:99:ed:0c:e5:37:d2:6c:ff:2c:b3:
84:e2:5b:4c:cc:a7:04:7f:4d:7e:0e:55:23:49:95:8a:39:e6:
8f:4d:f6:0e:04:52:59:92:4c:93:24:27:96:ee:f3:18:16:d9:
46:d7:6f:7f:44:68:cc:de:18:1a:16:e5:7a:a2:8d:2a:b5:40:
bc:72:98:b4:43:d9:ef:52:43:c1:7d:14:08:58:01:b6:c8:a7:
88:5a:2c:7d:6d:f9:ef:31:0e:1d:3d:09:26:0c:ff:2e:35:5d:
d9:f4:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:48 2026 by rpki-client