Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier: YXClWGnRdlevssvz70HqfSRIn0JHKKRv6E8mHc216xw=
Subject key identifier: C6:D2:F7:F7:A5:CA:AD:88:BB:5B:51:66:E3:5A:3A:95:7B:94:34:8D
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial: 019D2A3C1CD4E5C937E2286352CEA7CBE0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number: 0EAC
Signing time: Thu 26 Mar 2026 13:01:15 +0000
Manifest this update: Thu 26 Mar 2026 13:01:15 +0000
Manifest next update: Fri 27 Mar 2026 13:01:15 +0000
Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: YK4/jqCDpCfxMo5n2lyWIeSHLlEVEnG+gOQt+rjJYGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:1c:d4:e5:c9:37:e2:28:63:52:ce:a7:cb:e0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Validity
Not Before: Mar 26 13:01:15 2026 GMT
Not After : Mar 27 13:01:15 2026 GMT
Subject: CN=c6d2f7f7a5caad88bb5b5166e35a3a957b94348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:55:45:11:d3:ab:7d:b9:52:f6:84:1e:07:
96:9e:67:d1:51:35:93:7a:0d:25:84:3d:ad:de:36:
90:14:0c:50:6b:c2:48:30:e1:36:79:9a:fe:6a:47:
45:e4:6b:79:a4:38:75:fa:05:5a:8a:a1:a4:3b:21:
ba:34:8b:28:33:a6:06:70:79:6e:ed:f9:ef:53:c3:
20:63:73:e2:52:3b:a2:00:80:99:05:b3:52:74:66:
4a:c9:18:ed:ca:b0:e0:ff:89:d4:ee:db:94:b3:e8:
db:4f:1e:37:b2:d3:ee:f3:a2:9b:d6:f0:b5:87:65:
49:27:63:78:a4:9f:18:9c:7c:32:b4:7d:d9:cf:63:
4d:47:d3:55:97:c1:f5:8d:ac:ff:fc:8a:c9:cb:e8:
e4:41:da:cc:2e:82:4b:89:ea:a6:72:ca:d1:4f:d7:
e3:c0:54:80:11:f8:ae:84:18:82:af:fe:7f:7d:52:
6a:95:af:c1:7b:ff:31:dc:40:88:00:b9:86:af:fc:
7c:62:8a:f6:da:cf:ff:28:18:68:68:bc:c3:02:9e:
a5:2e:3b:d7:04:c6:83:9d:6c:14:42:9b:f9:25:b3:
dc:79:aa:6b:ce:bd:61:14:8b:38:e8:5a:16:51:11:
4a:72:67:32:26:13:d0:00:c0:43:7d:ea:52:51:d9:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:F7:F7:A5:CA:AD:88:BB:5B:51:66:E3:5A:3A:95:7B:94:34:8D
X509v3 Authority Key Identifier:
keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d1:cb:47:13:17:71:ab:4b:2f:39:cb:48:b5:12:a7:fc:26:
5e:f6:f5:85:73:d3:dd:ac:93:14:53:30:3e:78:eb:43:e3:cf:
75:02:bc:79:94:ee:b4:70:59:5f:9c:58:c9:04:e6:e9:3c:01:
e0:34:4a:e2:64:a9:6c:4f:44:e9:19:60:4e:94:64:72:6f:ff:
e1:8e:56:cf:8c:6d:8e:52:64:85:07:83:4d:41:17:88:c0:42:
1d:2d:2f:53:39:66:f5:2a:92:74:52:53:57:e0:96:d3:98:1d:
d5:6e:e7:46:a6:aa:d9:5c:ad:1d:cb:99:88:ec:59:78:03:2a:
04:94:84:d8:97:1f:8d:6c:d7:75:43:9e:49:ea:56:b3:8a:cb:
d2:4c:b7:c1:df:01:16:32:27:8f:87:f2:04:79:25:c8:ff:6a:
14:ff:2e:1b:4c:bf:2a:31:d3:1e:2a:5b:b3:c7:57:d5:f4:c8:
55:e8:f5:8f:51:f7:cc:df:f7:88:43:43:53:e0:48:40:38:ef:
3a:d5:95:b3:ef:14:3a:3c:cd:24:eb:90:b6:01:52:ce:8e:64:
94:c0:1d:d5:98:85:dc:c9:64:19:02:3b:7f:34:47:7b:9e:ae:
6f:36:db:38:1a:95:b2:57:74:79:df:4f:2e:39:e3:f1:b2:05:
14:f8:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:41 2026 by rpki-client