Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: EngbiZZ+DmfuaYynZw3drdwJrrLBEuv10vt2yCJk248=
Subject key identifier: FA:7B:9C:22:CF:D7:27:CC:8D:14:FE:48:11:72:D4:FD:48:32:6B:45
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 01A0DBA9DD1319FC0C28EFD914B1452A6183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 150D
Signing time: Sat 26 Sep 2026 03:02:17 +0000
Manifest this update: Sat 26 Sep 2026 03:02:17 +0000
Manifest next update: Sun 27 Sep 2026 03:02:17 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: JVMbCxIiczAze7gVd/Fnwjbvaww7wHe1s7rwtTgDtHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:dd:13:19:fc:0c:28:ef:d9:14:b1:45:2a:61:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Sep 26 03:02:17 2026 GMT
Not After : Sep 27 03:02:17 2026 GMT
Subject: CN=fa7b9c22cfd727cc8d14fe481172d4fd48326b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:99:0f:39:81:f4:e9:67:dd:63:3a:69:94:
c7:d1:f6:5e:30:02:ac:e4:35:33:2e:49:ea:86:f9:
4f:e8:15:eb:2e:ae:38:1f:a0:a2:58:29:22:b9:62:
ed:76:6d:21:0e:1b:b9:3c:b2:8c:8d:d7:c2:98:64:
3f:a0:c0:00:73:c0:c9:d2:03:80:29:46:e2:26:71:
68:0d:55:03:5b:7d:b3:1c:dd:c8:2f:cc:ea:63:fb:
db:2e:2e:6d:8f:7a:e0:fb:0a:f0:1f:ce:78:25:35:
e5:58:f8:78:ed:6b:b9:f0:b8:8b:53:07:b9:88:a2:
1d:75:7e:0d:22:23:b0:b1:de:01:c7:35:a8:7e:77:
0c:cd:ff:c3:db:22:ef:a4:64:0a:9c:e6:dd:71:ab:
62:ed:32:01:1f:83:60:56:78:c6:f4:d5:0d:57:4d:
29:40:9e:f8:25:99:35:23:a0:d6:82:9a:95:82:dc:
df:e8:fe:68:bd:07:65:7a:78:2d:97:b9:c3:3f:6b:
35:13:a3:4b:26:78:03:0a:1a:bb:39:51:86:ba:54:
b9:80:4b:26:ca:e1:33:0b:0a:c2:85:26:28:18:8e:
8f:c4:40:e3:37:7d:89:69:b6:d1:a0:db:6d:0e:f7:
c3:d5:1f:7a:f8:3a:0d:37:84:e2:15:ff:c6:9f:c1:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:9C:22:CF:D7:27:CC:8D:14:FE:48:11:72:D4:FD:48:32:6B:45
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:04:83:4f:e8:ff:80:c1:6b:d0:a9:82:e2:e4:2a:07:33:6f:
da:a9:3a:c1:e3:33:86:37:c8:5a:58:15:a6:01:16:ee:dc:aa:
4a:7e:91:e6:73:91:2a:b9:38:cb:43:0f:92:a7:1b:62:de:eb:
84:e4:90:bc:09:99:ac:63:73:81:4f:5a:5a:bc:e7:ef:3e:bb:
bf:00:80:25:f3:af:33:66:25:72:ac:31:d5:88:b9:27:24:e4:
a2:dc:e3:fd:5c:9e:34:0c:e0:f3:44:9b:e4:70:00:93:23:a4:
57:48:af:e2:bb:34:b2:e2:26:37:9e:30:18:68:c3:34:70:a5:
65:a7:3a:8d:eb:11:db:54:71:a7:0c:47:23:c4:b2:0d:68:ca:
ec:fc:5b:d2:20:cc:fd:fb:41:34:8a:f8:fa:fb:81:58:0a:ab:
79:61:f6:bf:6e:62:12:5f:a8:4e:84:1d:bb:dd:55:bd:f6:bc:
f2:8c:28:78:30:80:7b:df:0a:56:4c:bd:f0:a8:2d:4f:c0:c5:
a7:ed:1f:51:c3:44:17:f2:f7:de:fe:4d:18:4c:56:78:86:bc:
0e:ff:c7:de:69:67:65:88:02:d1:7e:7d:76:34:cc:35:d5:d1:
ad:e2:d6:f5:05:fa:46:41:5f:5f:55:7d:2e:14:4c:81:23:f3:
28:6e:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:36:44 2026 by rpki-client