Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: NYlfXgmRbFgRSQW+IgFQQmCAH8/EFuDd/1O4nfGdiU4=
Subject key identifier: BB:F3:2E:D1:5F:03:3F:7D:43:09:32:05:51:03:BA:1F:DE:9C:43:2B
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 01A0CA46C18DC94E1B9B8D91C87367D61750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1504
Signing time: Tue 22 Sep 2026 18:00:29 +0000
Manifest this update: Tue 22 Sep 2026 18:00:29 +0000
Manifest next update: Wed 23 Sep 2026 18:00:29 +0000
Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: FkRr3BxF7Y4j6FDP6+J0sBR7CP5RwlPeFo/ice4EemQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:c1:8d:c9:4e:1b:9b:8d:91:c8:73:67:d6:17:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Sep 22 18:00:29 2026 GMT
Not After : Sep 23 18:00:29 2026 GMT
Subject: CN=bbf32ed15f033f7d430932055103ba1fde9c432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:be:5f:64:61:f7:36:83:aa:81:21:13:60:
47:2c:ff:4d:9b:b5:6a:af:24:0f:18:7b:8c:a5:59:
11:19:50:c7:0b:e7:11:56:f1:39:62:8f:97:b2:5f:
8a:44:a1:ed:d3:5d:16:70:35:74:3e:67:aa:fd:5e:
21:db:d3:1c:30:61:aa:e3:40:40:56:c4:53:7e:13:
81:cb:3a:a0:ab:e3:7c:e8:c4:90:a0:96:15:3c:08:
e6:e2:5e:50:31:5c:c8:e4:7c:eb:a3:5d:b9:d0:b6:
52:18:ea:c6:a2:3f:4f:48:e6:b8:dd:0b:ec:07:b2:
ab:7b:a8:5e:88:4b:a7:5d:01:2d:54:fd:8f:e9:17:
60:d5:df:de:ce:da:b5:4c:98:42:b4:6c:5f:3c:d4:
9f:a3:e0:c0:a9:00:07:9f:a7:16:27:38:08:4e:db:
fa:f3:fc:b0:19:58:27:ea:d3:14:d2:0d:bf:20:31:
c0:85:6d:ac:f1:ce:15:64:85:69:50:58:60:16:fb:
cb:11:72:31:3e:de:fb:0e:78:7b:6c:86:b7:a5:ff:
38:b9:39:e3:c3:13:33:e1:b5:e7:35:8e:86:24:d2:
70:33:ff:f6:e5:2e:8b:3b:69:da:ca:53:dc:58:e1:
cc:da:f8:4b:b8:17:a1:3c:e8:46:a6:72:60:10:c9:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:2E:D1:5F:03:3F:7D:43:09:32:05:51:03:BA:1F:DE:9C:43:2B
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0f:e3:bb:62:42:4a:56:47:e6:40:3e:a4:32:92:a4:15:a4:
14:87:f6:63:52:9b:81:f0:e1:4d:4a:39:d0:bf:60:74:a5:1a:
eb:e0:94:8a:97:1d:c9:71:ee:66:70:4b:7e:7e:88:ab:ad:53:
d5:73:c2:69:b9:3e:27:b0:68:fd:9a:46:70:0f:22:23:3c:59:
8e:84:88:72:80:88:19:a2:74:f6:64:58:96:03:c5:a9:76:3d:
2a:a4:96:52:2a:87:1e:5f:1a:04:30:44:5e:00:4e:40:ff:c8:
35:85:37:72:a6:75:e8:ff:5c:2e:9a:83:87:a5:4a:34:47:ed:
ad:27:14:0a:4a:ae:ca:62:fa:f9:bf:46:68:87:63:a3:8d:a8:
06:c6:b4:24:5f:4d:02:6f:3d:31:6c:e4:87:92:70:9d:1f:ff:
6b:1b:3a:00:43:0a:ce:23:34:12:06:fe:ee:17:20:56:71:a2:
cd:ce:14:84:3f:c8:e6:1a:62:96:98:b7:f0:6d:14:00:84:6f:
5f:28:32:d4:69:e3:78:37:9d:f1:21:a3:91:c6:d2:14:5d:6b:
24:75:72:1a:5f:7a:7f:95:ae:75:c3:b3:f5:4b:dc:28:9d:e0:
92:22:e2:03:92:f5:87:7a:4c:90:4c:18:79:a0:76:49:85:5c:
bd:c8:4b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:18:49 2026 by rpki-client