Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: OUa4G1jZOD7jhZuhd7AL+wjt3TsBAIIXTmJzuJTf+uY=
Subject key identifier: FC:CA:21:7C:A9:93:8B:10:7A:19:DF:DB:9F:95:06:A4:CA:6E:C3:7A
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 019F11F85643E7292E8EFA54E06D7BF86E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1420
Signing time: Mon 29 Jun 2026 06:01:55 +0000
Manifest this update: Mon 29 Jun 2026 06:01:55 +0000
Manifest next update: Tue 30 Jun 2026 06:01:55 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: Htt8wV+zjnAzZezMq+28tUZRNlPS8FrpkIQ4ejMhW60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:56:43:e7:29:2e:8e:fa:54:e0:6d:7b:f8:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Jun 29 06:01:55 2026 GMT
Not After : Jun 30 06:01:55 2026 GMT
Subject: CN=fcca217ca9938b107a19dfdb9f9506a4ca6ec37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:3c:66:04:cc:9c:00:8c:fc:50:81:4d:76:
db:df:e9:e2:d3:25:6f:d9:a9:8a:f2:a0:af:fc:8a:
33:23:42:ef:22:e1:ed:f4:98:2d:ce:0c:e2:2f:9b:
3c:96:af:37:1e:ba:8b:a2:69:89:d4:ce:22:dc:1c:
7a:71:66:13:c1:60:c1:1a:1f:bf:99:8a:b2:a2:fb:
ec:72:17:cc:43:9d:8c:a1:86:93:fc:46:4d:da:58:
44:33:11:1b:97:d0:2c:d4:34:67:8a:c6:a0:f5:8f:
4a:b7:47:c6:d2:43:92:e5:5b:34:36:b0:56:ec:50:
34:ab:18:e7:f3:cd:2d:d7:c4:c4:66:ca:00:b5:e2:
53:33:7b:04:ae:92:06:2b:5e:3a:c8:d5:14:5a:b8:
29:bf:31:3d:5b:b3:e6:2f:15:e2:7a:cb:1e:d4:63:
51:1a:3c:57:ba:63:84:30:29:d1:6e:c7:2c:47:db:
47:6e:44:0d:9f:5d:91:54:b0:c3:d6:52:59:d8:cd:
cb:9c:67:b6:f1:5e:ef:c0:d3:92:ae:95:d3:44:34:
14:81:99:12:b0:3b:ac:4c:c5:58:54:42:82:38:a6:
52:83:4d:d0:93:2c:be:a7:aa:f9:0f:a5:a8:cf:14:
af:ad:2d:51:44:18:a2:53:16:f2:9e:e1:2b:2d:c9:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:21:7C:A9:93:8B:10:7A:19:DF:DB:9F:95:06:A4:CA:6E:C3:7A
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:69:e6:62:6c:27:78:62:9f:cd:60:d6:49:8d:2b:f4:79:95:
b8:f2:72:a7:2f:ca:c8:73:89:a1:a2:97:8a:70:19:e5:f7:c8:
9d:a2:b6:cb:3f:91:56:af:51:c5:fb:03:44:f6:74:3a:b9:1c:
92:80:3b:41:5a:a4:85:9c:bf:aa:ef:d6:9a:d7:01:d7:ef:b1:
3f:10:b3:96:a5:4d:a9:97:4f:c0:6a:bf:1b:0b:68:be:6c:58:
5d:ae:f7:91:34:86:27:14:d6:ea:f4:39:a2:06:a9:2c:b7:f5:
84:73:f8:90:36:44:ef:53:69:36:ab:e6:ee:87:d5:42:b2:2c:
dd:6c:0b:e2:1d:db:e8:12:e1:10:d7:fc:f3:5c:10:3c:ca:69:
a1:b4:a5:9f:fa:ee:6a:f9:56:04:2c:fb:2e:7e:c7:f2:1c:c4:
a8:ad:62:c1:65:14:9f:f9:86:0a:30:1b:b4:ed:f4:8b:cb:4a:
20:75:f8:4c:f4:82:c3:af:d6:db:3b:1d:b7:0e:03:b5:f7:4d:
95:57:86:02:69:89:df:d5:7b:0c:1e:d8:9f:0e:89:7e:ab:05:
76:73:6c:72:a4:5b:25:0c:e5:24:cd:c8:12:86:3e:f0:23:86:
5b:87:b3:5b:5e:ac:e0:3d:36:6f:59:ef:1e:47:49:8e:59:24:
12:5a:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 07:40:55 2026 by rpki-client