Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: WmKg4Qfym4oDtf7Hp4SZjlKQtMg4Iod1HaIpVkJLFls=
Subject key identifier: 20:CF:91:42:18:13:43:47:E2:92:FB:41:72:C7:C2:15:A7:5D:FC:0E
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 01A0E1751499E0D3E0CE0DAB28A2C36A9AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1510
Signing time: Sun 27 Sep 2026 06:02:21 +0000
Manifest this update: Sun 27 Sep 2026 06:02:21 +0000
Manifest next update: Mon 28 Sep 2026 06:02:21 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: jgZsihbQ8pjSlyCs2CjVE1adIs0ybsjxeyqi+s2e4Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:14:99:e0:d3:e0:ce:0d:ab:28:a2:c3:6a:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Sep 27 06:02:21 2026 GMT
Not After : Sep 28 06:02:21 2026 GMT
Subject: CN=20cf914218134347e292fb4172c7c215a75dfc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:54:47:3d:7c:1f:41:3c:f9:f8:ad:2f:da:
70:60:2e:9c:8a:74:bc:de:6f:95:ec:32:e8:50:5b:
be:23:f8:82:78:87:1e:0b:4d:10:66:97:0a:66:23:
59:71:4d:eb:d2:23:f1:a6:31:d1:a5:6a:c2:d8:c3:
4d:b9:65:9c:26:fd:f9:09:ff:bf:ee:2c:38:57:a4:
02:41:85:36:a3:b2:8f:9e:f9:c7:2e:98:bb:ba:7e:
d7:94:f1:ee:75:9a:64:b6:94:df:9b:66:e2:3e:3b:
de:72:36:c3:52:0d:6b:22:2a:ce:7a:e8:9e:e4:91:
2e:88:a0:35:10:b5:09:55:6c:d6:32:6e:6e:1f:3b:
f3:7a:6f:ba:29:7b:68:35:3c:78:36:1a:d7:39:b5:
f3:1f:e7:81:97:bb:ad:f9:9f:cc:ac:ee:e6:0e:01:
95:c4:8f:fa:8e:aa:53:fa:8d:87:53:e8:4c:b5:71:
34:94:bf:c9:a9:b6:a2:46:eb:c6:4c:f8:72:f2:79:
76:93:94:68:af:b8:e8:d8:d8:59:ed:42:1e:b5:31:
47:7e:6a:8e:3b:7f:1e:fd:b1:d3:5c:37:5b:67:bc:
62:a4:3a:ee:f1:bb:59:11:fc:a1:d0:e0:82:c7:f4:
ae:2e:bd:d1:1b:b3:1b:be:b0:95:1b:25:9c:17:97:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CF:91:42:18:13:43:47:E2:92:FB:41:72:C7:C2:15:A7:5D:FC:0E
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a8:00:ab:be:f7:58:57:18:af:30:35:dd:f7:2c:cb:45:c2:
4d:bd:50:09:b1:05:e0:53:ba:94:0d:7d:41:3a:69:19:5a:1a:
6a:38:0c:43:64:d0:4d:86:b3:a7:b0:16:55:75:6f:02:d6:dd:
79:b6:03:d6:c7:22:12:0a:96:7c:e3:bc:5f:1c:71:42:6a:99:
ad:3f:db:0c:5a:c0:1b:b3:7e:a7:13:9e:50:ae:7b:48:aa:29:
00:38:5b:3a:02:fa:fb:25:f6:7e:47:eb:43:cf:5c:2a:d4:d0:
7f:8f:af:43:1d:55:80:dc:10:30:ab:b1:eb:e4:87:4d:21:42:
9b:28:3f:0b:a4:1e:1e:73:8b:59:1b:75:f2:cf:c8:61:55:08:
b3:3c:f8:97:1c:40:fd:c4:bc:76:19:66:a5:ef:0f:88:30:03:
e7:92:10:45:78:a0:b5:e6:01:8c:e6:4a:6e:12:b5:ec:3f:d1:
d2:7d:ef:aa:46:7e:88:65:1d:b5:da:44:fe:08:be:de:9f:a9:
5c:20:67:42:43:4c:d3:78:56:90:11:85:d3:ce:6c:0d:c7:e4:
38:d4:90:47:db:b2:1b:52:ce:ce:49:16:5a:41:27:b4:1d:fe:
05:cb:67:12:0a:4b:21:e2:d1:8e:4f:de:15:44:28:74:11:7d:
53:8a:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:12 2026 by rpki-client