
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: 0tZNVdBPU9LZBoxvcCoj/QckdYOLsZru3EmQ5RFVM3I=
Subject key identifier: A7:75:3F:B4:45:7E:B9:86:84:F9:F1:96:F3:14:ED:FD:E6:EA:A1:4C
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 01A0D9BAFFE732B0A4EA7285F8BE857D6A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 07B5
Signing time: Fri 25 Sep 2026 18:01:46 +0000
Manifest this update: Fri 25 Sep 2026 18:01:46 +0000
Manifest next update: Sat 26 Sep 2026 18:01:46 +0000
Files and hashes: 1: 7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa (hash: VRkqBPN/9BIZfGsddu7EhNguv5Ir9sO9OazfQFdIK6s=)
2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: pcUaOBcDSa6ZqUi0ojHeDL1MsjBJZCKWra6na5gRKAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:ff:e7:32:b0:a4:ea:72:85:f8:be:85:7d:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Sep 25 18:01:46 2026 GMT
Not After : Sep 26 18:01:46 2026 GMT
Subject: CN=a7753fb4457eb98684f9f196f314edfde6eaa14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:0e:20:2d:39:02:74:bf:5c:ca:78:6b:4d:
2c:e7:03:50:96:69:92:fb:27:69:4b:ad:2e:06:37:
46:62:83:6b:83:5c:1c:28:54:11:46:87:e8:c8:b2:
79:ff:78:e9:db:48:c2:41:36:6b:1c:51:10:f0:b0:
77:c3:fd:38:df:32:d5:38:8d:d8:16:da:de:09:2d:
69:f7:2b:43:6a:a5:e4:e5:8a:d4:62:d8:df:48:38:
0b:eb:e6:d1:22:44:75:09:55:b6:1f:93:54:58:1c:
b8:45:3c:6f:08:9c:36:56:a5:2b:8f:22:29:d1:a9:
05:66:68:9f:b9:dd:79:ed:9a:e6:50:2a:3e:6c:14:
af:1c:96:a1:0f:d9:3f:59:63:e7:d9:23:ba:fb:c7:
88:0e:ab:00:6d:57:7b:39:36:ba:12:4a:ff:a5:c8:
a0:cf:71:34:03:88:8c:9e:38:a1:9c:ce:5f:e4:6d:
9a:75:d3:18:15:9e:d0:61:c2:dd:59:05:d4:df:b1:
7a:80:69:90:4f:4d:22:ae:9b:cf:22:0f:8a:5b:ef:
9e:68:8c:ee:7c:2c:e1:66:28:03:6a:5b:e2:10:a4:
d7:0a:bd:36:91:98:99:31:41:26:89:6c:ef:0d:91:
b8:31:fb:55:2e:7a:26:11:39:2f:51:82:a3:dc:ee:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:3F:B4:45:7E:B9:86:84:F9:F1:96:F3:14:ED:FD:E6:EA:A1:4C
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:44:b4:c8:7a:e8:85:ba:50:19:d3:4f:33:46:2c:4c:fc:48:
db:e7:c7:10:cd:77:75:bc:a0:ce:ad:e6:bc:8c:a5:30:f3:fd:
32:e8:85:52:9f:78:a5:49:3e:cf:f1:bf:f9:0e:93:9f:ec:89:
80:b0:b4:1f:84:e0:43:d6:ce:a5:2c:6b:8f:e8:e7:80:d8:d9:
c9:a6:06:ee:79:66:26:ad:f1:24:6b:c9:2b:98:68:84:d3:e3:
59:cd:a6:57:5c:ab:72:32:d6:0b:b7:ce:6c:42:cc:7c:08:d1:
7d:01:23:d4:a6:d8:4d:e6:14:c7:c9:d9:9e:21:56:41:e1:db:
98:2d:ed:87:77:c9:66:47:38:b8:16:22:3a:a4:32:ea:72:bd:
a2:b7:21:81:d1:bd:e3:95:a4:40:29:77:fe:7a:89:cf:a5:48:
e3:70:41:8f:c4:4c:f1:b5:c7:61:93:32:7a:ad:59:1d:1a:5a:
1a:1e:5f:05:f8:24:5e:29:db:7b:fe:22:2e:64:75:8f:30:1b:
a9:49:12:44:e7:19:d3:00:44:6e:e9:b1:1a:30:06:80:48:34:
ad:9f:6c:5b:dd:b5:74:f9:da:9c:7c:b4:6b:a6:46:35:bc:13:
f6:ba:22:9a:38:9c:0f:94:fd:6f:13:41:9d:c2:01:7f:56:d8:
bd:31:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:10:53 2026 by rpki-client