Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: Mv5ORoTXtOO5GsdDNKx7Rb70q1ibWl0jm5zHdIDqDAk=
Subject key identifier: B1:2A:18:BD:FD:34:15:F4:DE:45:91:81:87:9E:FF:0D:DF:B2:1F:E1
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 019F935C25215771E74B82544C2CB368E9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1463
Signing time: Fri 24 Jul 2026 09:01:57 +0000
Manifest this update: Fri 24 Jul 2026 09:01:57 +0000
Manifest next update: Sat 25 Jul 2026 09:01:57 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: CwhFaC6pvfPnofYojipUhAQ/o5x0+C0/sN+7HxvmLq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:25:21:57:71:e7:4b:82:54:4c:2c:b3:68:e9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Jul 24 09:01:57 2026 GMT
Not After : Jul 25 09:01:57 2026 GMT
Subject: CN=b12a18bdfd3415f4de459181879eff0ddfb21fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:d9:20:c6:37:e5:3d:cd:55:a2:f1:c5:06:
35:cf:0c:8d:ee:d1:22:08:5a:d6:40:3b:7b:21:47:
88:53:97:60:0e:5a:b0:a8:cd:7c:cd:35:4d:99:a6:
bb:27:38:87:ca:60:bb:31:18:bb:0a:7d:38:eb:28:
94:59:b9:1f:97:64:14:94:90:04:c8:82:ce:89:2d:
49:0d:15:d0:8f:ad:92:79:23:7f:49:6e:f7:b2:bd:
48:16:0e:ed:6b:9e:d4:6e:76:8f:5d:98:54:b0:38:
2a:4a:31:44:ef:98:c2:24:b5:ed:3a:fc:d8:2d:ef:
66:11:a5:14:f6:52:22:2f:72:96:b1:c6:6c:61:de:
57:fc:91:76:ad:c7:4e:51:61:2d:76:c8:5e:3d:ba:
7c:ea:e4:af:ff:30:bd:d8:38:57:b7:5a:dd:34:24:
41:fc:ed:34:8c:c0:6b:89:91:9c:43:6c:03:e5:ca:
d6:8d:f9:ef:c3:97:0a:5f:ea:06:73:37:aa:b3:22:
d2:72:44:d7:20:df:de:83:73:27:ce:ff:8d:07:bc:
69:f6:45:12:4a:fa:30:f4:1a:7c:4d:b8:64:ba:be:
47:73:01:f5:ca:7f:79:11:a9:f3:04:20:75:63:ef:
ac:73:9a:74:49:07:82:4c:10:51:02:00:a2:7e:7c:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:18:BD:FD:34:15:F4:DE:45:91:81:87:9E:FF:0D:DF:B2:1F:E1
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:83:98:a3:d8:d0:a9:57:37:74:d6:92:4e:fc:85:27:83:
f3:61:6a:22:4d:ff:19:a8:28:18:8b:a9:16:9f:d0:f7:ef:88:
79:84:7d:1e:e5:81:65:80:e8:f9:46:f2:c6:c5:17:f0:f7:fa:
84:7b:0c:38:90:9c:1e:c1:13:a2:1c:99:11:4d:2e:fd:c3:ac:
e2:a6:0c:74:ce:67:8c:6b:7c:30:15:70:16:37:ed:3e:8f:91:
cb:c2:60:2d:a6:18:2b:b9:44:14:06:64:c5:7e:e2:d4:41:b8:
b6:90:f1:4b:51:3b:cb:5e:09:d4:09:33:42:87:80:b0:59:48:
b1:e0:0d:d5:a6:47:fa:e3:4f:8f:12:3f:7c:b5:68:ae:46:cb:
e7:d9:c3:5c:94:37:90:bb:d8:12:af:4d:72:bd:ab:e7:87:48:
f7:34:66:b9:ca:4a:8a:86:f8:af:97:33:1e:4c:96:ae:f3:99:
5e:e7:25:d1:e1:9f:47:2a:b4:93:dd:8d:fd:82:25:2b:32:ee:
33:29:1c:fe:46:77:8f:45:11:ea:3a:cc:4b:35:31:70:2e:46:
63:a1:a7:f1:24:ab:72:66:63:bf:03:54:c6:20:ee:1e:a9:17:
82:b4:b6:73:81:8c:b7:7a:34:6a:b5:5a:ba:d6:ea:10:de:d4:
b2:ec:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:24 2026 by rpki-client