Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: Dd19JV4UoJQu1vSBwf4kA+a69bMe1nUOu9HJkHh799Y=
Subject key identifier: AD:7D:BB:DA:40:A4:60:13:3A:81:00:AD:CB:85:C9:DA:83:7C:AE:AE
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 019D29611D4D6BCEE467A9D68EB50BD1FD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 05CC
Signing time: Thu 26 Mar 2026 09:02:03 +0000
Manifest this update: Thu 26 Mar 2026 09:02:03 +0000
Manifest next update: Fri 27 Mar 2026 09:02:03 +0000
Files and hashes: 1: 7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa (hash: VRkqBPN/9BIZfGsddu7EhNguv5Ir9sO9OazfQFdIK6s=)
2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: KcbKZOWlU2IrV6uunGq+ZLEVc/eM4mtQQo8QpRxF9sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:1d:4d:6b:ce:e4:67:a9:d6:8e:b5:0b:d1:fd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Mar 26 09:02:03 2026 GMT
Not After : Mar 27 09:02:03 2026 GMT
Subject: CN=ad7dbbda40a460133a8100adcb85c9da837caeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:17:6e:73:8a:19:43:90:9b:10:1e:df:a1:
0b:d3:3c:cd:e5:4d:74:44:9d:0b:bf:c5:7f:81:72:
11:95:d5:d8:81:a3:c7:cd:bc:eb:4b:21:b8:05:41:
69:7d:74:25:04:77:d4:29:67:7a:e1:93:e9:ad:46:
cc:b0:72:93:c9:8d:00:9a:27:96:d4:24:5f:b0:5c:
3e:bc:47:0d:c4:34:fa:77:9f:49:aa:2d:4d:e0:86:
51:30:7d:c4:ea:4f:2b:f3:42:a6:5a:8e:4f:f3:53:
eb:41:fb:ea:c6:e6:e9:8b:83:3e:d8:cc:69:2d:67:
8f:1e:45:03:89:89:c5:71:75:fa:a1:d0:cb:2a:e4:
0a:eb:69:0a:89:9f:2a:08:a0:c5:79:e1:e9:70:41:
e9:4d:f1:b8:91:db:50:9d:60:db:7e:0a:c4:59:be:
8a:bd:bc:52:e6:d6:79:d6:fd:2a:5a:d9:d8:44:2a:
73:e0:20:80:06:12:23:c4:2c:aa:df:d5:e2:40:83:
a3:03:b1:92:01:a6:8b:67:67:c6:52:20:37:cc:7c:
cf:e2:f3:4b:d5:ab:f1:0d:f5:44:1e:0c:ad:f1:f3:
05:3f:34:86:27:ef:06:be:bc:de:c0:04:4d:29:c5:
23:9c:c3:36:74:72:c6:b9:d3:aa:33:f3:81:1a:c9:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:BB:DA:40:A4:60:13:3A:81:00:AD:CB:85:C9:DA:83:7C:AE:AE
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5e:4b:12:69:16:c5:44:f8:b0:bf:47:60:a4:9a:43:71:64:
cd:c3:7c:88:54:20:c2:9f:ab:18:be:55:67:18:fc:0a:2d:ca:
be:c2:11:5b:bb:9f:d6:77:24:62:51:69:3f:80:57:f6:ad:6a:
57:a1:fa:5a:45:88:ca:e2:1f:0c:86:42:57:3b:dc:5d:d1:fd:
ed:bb:bf:51:f8:40:67:94:99:32:f7:a1:8b:aa:85:54:68:f7:
17:44:fb:77:3d:d7:f8:17:d5:18:07:67:3f:6f:27:9b:00:34:
26:6c:5a:53:4a:f7:80:e9:89:0e:9b:40:ce:00:b6:be:1d:7f:
6d:08:88:02:12:c4:24:11:d9:1b:cc:5c:1d:77:4d:8a:bb:5b:
d6:72:a5:fa:51:11:1c:19:88:27:8d:31:1c:d4:9f:85:5e:7f:
e6:11:fb:5f:2c:80:24:72:88:67:06:2d:6f:4f:b3:f9:04:67:
f7:06:12:df:45:e1:ac:3e:3b:88:fd:08:f1:77:cb:6a:41:ca:
fe:91:3e:81:43:e1:a1:24:9c:3e:e2:8c:3c:5f:70:d6:0f:ee:
ab:41:3c:66:65:50:8f:1a:1f:2b:28:59:1b:1b:e6:a1:71:2b:
79:55:5f:e6:cc:2a:a4:d2:b5:53:65:84:6d:c6:2f:f2:fd:ae:
c0:20:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:33 2026 by rpki-client