Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: 2wPpfbLvzaRfnKpzOThlUJtLADjQL0ZXmCfeouFp5pY=
Subject key identifier: 1B:CD:6D:9D:7D:20:A0:6D:7E:5E:66:3D:07:01:6D:9F:62:C7:DD:7A
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 01A1E05F96CAA568CDED81560B373033307D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1594
Signing time: Sun 15 Nov 2026 18:02:03 +0000
Manifest this update: Sun 15 Nov 2026 18:02:03 +0000
Manifest next update: Mon 16 Nov 2026 18:02:03 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: 25MxnqzQC79kMr2NAZ0gpDzh+JWvP8w6pZOdngqMG78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:96:ca:a5:68:cd:ed:81:56:0b:37:30:33:30:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Nov 15 18:02:03 2026 GMT
Not After : Nov 16 18:02:03 2026 GMT
Subject: CN=1bcd6d9d7d20a06d7e5e663d07016d9f62c7dd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:06:ab:3d:48:d8:a6:d1:f4:90:fc:8b:bd:
a2:c9:92:bf:df:af:16:cb:50:79:84:70:27:67:9e:
77:1d:36:d1:a7:d8:20:41:6e:28:13:d9:23:ac:47:
6e:b8:0f:2d:a5:17:8a:82:09:a9:b1:65:4a:ae:22:
ee:ba:9d:3c:35:4a:1f:8a:ef:06:ce:6a:54:18:2f:
42:85:98:67:9f:9d:d9:d6:c0:b8:80:25:ac:e1:5e:
83:a1:a2:23:e7:14:3b:21:0f:6d:ab:39:e9:a7:23:
aa:b6:90:f6:89:8f:1c:9f:51:58:99:4d:e0:a2:22:
29:1d:70:62:39:ba:57:af:91:69:50:05:a8:a4:f6:
53:cf:c6:bf:53:b6:ea:db:99:4b:99:f9:93:62:19:
40:df:84:6c:63:26:70:dc:fd:f7:a2:04:ce:54:e8:
1e:14:e7:dc:05:4a:67:e3:40:2f:a8:32:7c:17:3b:
4f:42:b5:16:5a:fc:cf:e7:aa:c2:6b:f5:52:bd:a0:
35:6a:71:ab:54:7e:41:61:34:8f:f6:d3:0d:2a:b1:
aa:73:1e:4e:f5:22:11:e4:a7:ba:fc:22:3e:fb:09:
39:bf:cd:1e:6e:33:27:71:90:0a:61:fc:40:64:24:
82:60:eb:b7:f3:ca:26:7b:d6:c9:15:7a:c3:d9:2c:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:6D:9D:7D:20:A0:6D:7E:5E:66:3D:07:01:6D:9F:62:C7:DD:7A
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:02:bf:d1:d0:d5:60:21:50:da:9a:a7:c4:18:49:be:06:d8:
43:2d:ce:66:97:ff:cb:e4:d0:ba:cb:c4:06:67:6a:b9:a7:62:
30:67:aa:1e:aa:71:db:d2:1f:55:16:09:60:17:c5:26:d9:77:
55:aa:88:48:b6:74:20:e2:74:4a:5a:ed:30:e7:99:0a:77:2f:
dc:b5:7b:24:97:11:5e:0b:1b:88:54:e1:f8:d1:98:8b:da:c5:
e4:8f:63:b3:ce:48:f8:3d:67:cc:f7:f2:ed:c5:2d:22:7d:3a:
e5:14:d7:e1:19:22:ce:7c:eb:c2:f6:b6:74:fa:9a:f6:dc:8f:
ef:83:82:ff:02:5a:de:1b:65:35:35:6c:b1:a2:f2:fa:70:60:
95:da:b9:c5:5a:57:1e:c8:f6:cc:0c:2e:43:9a:ac:3d:39:2e:
03:8c:5d:af:24:e7:78:65:31:f8:89:af:5a:34:5c:6d:7d:70:
6f:b6:20:05:e4:eb:e9:e7:c8:c0:ea:66:d4:d8:c8:f4:7e:b2:
7c:02:ce:41:dd:37:71:5e:31:cb:78:e3:a1:14:ce:8e:81:30:
1b:b8:75:62:f5:81:a1:5c:fa:0c:04:6c:45:08:9c:89:af:66:
72:69:b4:61:a8:11:2b:28:38:5a:5c:8c:c8:3b:49:ab:62:cb:
64:b8:11:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgX5bKpWjN7YFWCzcwMzB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNzIwMDU0NGY5M2E2NzVmYzhjNzg0MTg1Njk4MGUzOGEz
NTI5Y2IwHhcNMjYxMTE1MTgwMjAzWhcNMjYxMTE2MTgwMjAzWjAzMTEwLwYDVQQD
EygxYmNkNmQ5ZDdkMjBhMDZkN2U1ZTY2M2QwNzAxNmQ5ZjYyYzdkZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR4Gqz1I2KbR9JD8i72iyZK/368W
y1B5hHAnZ553HTbRp9ggQW4oE9kjrEduuA8tpReKggmpsWVKriLuup08NUofiu8G
zmpUGC9ChZhnn53Z1sC4gCWs4V6DoaIj5xQ7IQ9tqznppyOqtpD2iY8cn1FYmU3g
oiIpHXBiObpXr5FpUAWopPZTz8a/U7bq25lLmfmTYhlA34RsYyZw3P33ogTOVOge
FOfcBUpn40AvqDJ8FztPQrUWWvzP56rCa/VSvaA1anGrVH5BYTSP9tMNKrGqcx5O
9SIR5Ke6/CI++wk5v80ebjMncZAKYfxAZCSCYOu388ome9bJFXrD2SwVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvNbZ19IKBtfl5mPQcBbZ9ix916MB8GA1UdIwQY
MBaAFKJyAFRPk6Z1/Ix4QYVpgOOKNSnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgt
ZWZhN2Y4OWJkMGI5LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgtZWZhN2Y4OWJkMGI5
LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAK/0dDV
YCFQ2pqnxBhJvgbYQy3OZpf/y+TQusvEBmdquadiMGeqHqpx29IfVRYJYBfFJtl3
VaqISLZ0IOJ0SlrtMOeZCncv3LV7JJcRXgsbiFTh+NGYi9rF5I9js85I+D1nzPfy
7cUtIn065RTX4Rkiznzrwva2dPqa9tyP74OC/wJa3htlNTVssaLy+nBgldq5xVpX
Hsj2zAwuQ5qsPTkuA4xdryTneGUx+ImvWjRcbX1wb7YgBeTr6efIwOpm1NjI9H6y
fALOQd03cV4xy3jjoRTOjoEwG7h1YvWBoVz6DARsRQicia9mcmm0YagRKyg4WlyM
yDtJq2LLZLgRKg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:33:51 2026 by rpki-client