Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: mRhmyU8vDzoN7klzVJFCygGCfClZCq7s3DoZfr1JoZs=
Subject key identifier: E3:C2:10:B3:1E:0D:39:FB:34:13:05:E9:C2:C7:78:61:40:AF:83:5D
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019D2771CFC0B5546CE706F49A161F249882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 15CC
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: cvU7MkfetULx5kv_IarJahryhlg.roa (hash: p5quF2qOZPdmbe7Adsu9A/9ZytXzA8MG8H5I1geEROA=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: Z41gb0F/wgeWxMmE05GsyPqwauhFhaAY3nsJIReUhFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cf:c0:b5:54:6c:e7:06:f4:9a:16:1f:24:98:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=e3c210b31e0d39fb341305e9c2c7786140af835d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:53:6a:37:e5:c2:15:1c:f9:2c:4a:6f:d4:
2f:79:f7:66:82:76:3e:0f:5f:3e:55:8b:98:04:49:
5c:91:d5:cb:93:64:52:05:9c:81:9c:ee:c9:1d:af:
35:07:05:2c:6e:03:75:81:46:5e:18:b9:bf:d0:00:
f6:31:d6:2e:c1:9b:c4:24:7e:3a:49:22:3e:2c:ec:
80:91:a1:24:c9:c9:51:4d:9f:4a:08:1c:ae:c2:18:
9b:db:25:fe:d2:08:a5:33:18:5a:65:6d:46:46:46:
d9:e4:ce:3e:22:fc:d8:73:25:58:1b:93:02:64:2f:
7a:1c:90:62:c8:2b:53:7f:f1:9c:9f:4c:f6:9f:86:
ad:ee:6c:c3:6c:21:5f:be:a7:02:65:30:e3:4f:5b:
49:a2:94:4d:f4:10:73:af:f7:2f:e1:4f:1e:65:c6:
64:d6:51:1b:b7:c1:40:4c:21:25:0b:a1:b5:ed:f3:
fe:b7:66:5a:b4:dd:92:f8:3f:c6:f7:a3:9f:62:0a:
c6:8b:43:d7:71:a1:82:e2:ed:e9:6b:aa:15:e6:ee:
1a:23:c0:bb:71:fb:e1:19:19:f9:a8:4a:ca:08:54:
b4:4f:b4:a1:7f:db:1e:df:92:49:78:12:47:ac:28:
13:13:b0:7a:ac:a6:93:1d:db:2c:89:11:76:85:b8:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:10:B3:1E:0D:39:FB:34:13:05:E9:C2:C7:78:61:40:AF:83:5D
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e4:95:c6:36:98:32:47:27:c1:2c:31:b6:55:8d:79:67:3e:
e3:6f:45:a3:b0:14:4b:ca:28:69:45:2e:92:a4:bb:0f:9e:dd:
37:e0:84:c2:3c:0b:41:7d:05:d2:32:12:05:47:d2:2f:c5:57:
3d:ce:db:08:31:db:66:82:2d:15:b3:f2:b7:d8:97:47:4b:31:
f8:d7:ec:05:04:7c:02:20:2f:cc:54:76:1b:a2:ed:f1:c1:c8:
45:09:a8:90:8c:4b:4c:85:22:7c:04:67:9a:2d:26:44:40:ff:
7c:dc:b8:5d:71:67:29:ad:ae:e0:f5:68:bf:98:a2:d8:52:8f:
03:b6:a8:6d:5d:8b:ff:41:21:dc:84:ea:95:45:ae:af:c4:0f:
65:2d:3f:ad:e7:0f:e7:9f:0e:03:92:f0:1c:f2:a9:6a:7e:16:
6c:c7:a6:94:de:4c:bf:ed:a4:b6:96:aa:02:5e:a4:36:d0:fe:
75:95:f8:95:ef:f5:5b:42:89:13:fb:ba:bf:e5:6a:76:ac:d3:
7b:5d:0c:fe:4e:c1:71:0d:22:a1:92:5b:a3:d1:2c:f4:65:9c:
c1:93:b0:41:bf:da:3c:7c:70:6a:c1:98:d1:26:40:7f:9b:81:
cd:3c:2b:e6:ad:53:6c:cc:23:44:58:12:68:55:6b:9f:3e:50:
50:32:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:48 2026 by rpki-client