Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: PyEljNiNCz+4yR7l6bBSuusPtezRWsz/BQO0MbbcfOc=
Subject key identifier: A9:6A:49:7C:AC:21:F3:21:06:F7:20:A5:48:65:70:0E:DF:5E:20:2E
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0129
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 59
Signing time: Wed 15 Jul 2026 11:12:24 +0000
Manifest this update: Wed 15 Jul 2026 11:12:24 +0000
Manifest next update: Thu 15 Oct 2026 11:12:24 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: sN0K935Xob/wUp2OyvpgmTbP20aPK17ajCNg9xeaaJI=)
2: ripe-ncc-ta.crl (hash: DAKaCiN0SOTPrGHOE2DQ7mgl67zGEwF+Ej0cuukmBto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Jul 15 11:12:24 2026 GMT
Not After : Oct 15 11:12:24 2026 GMT
Subject: CN=a96a497cac21f32106f720a54865700edf5e202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:c0:87:04:ce:7d:03:3e:93:64:88:5b:ab:
44:78:cf:b0:8d:3f:71:73:34:e3:7e:2f:bd:b2:d5:
53:da:67:4c:ec:eb:80:79:98:20:d4:7e:eb:99:ac:
3c:70:bb:21:07:e6:14:eb:e5:58:da:75:09:6d:e4:
28:05:8e:db:d5:22:fb:62:8d:18:28:04:b0:a2:97:
1a:99:be:99:0b:6d:c0:8e:25:fc:4a:2b:4d:87:2f:
fd:b7:86:c3:6b:47:06:c8:2e:5e:6b:0b:03:80:70:
dd:49:3d:b5:ac:cb:6d:9e:7c:5e:85:03:34:d5:bc:
01:a5:57:24:a3:1a:b4:b6:4e:9b:4c:59:aa:f1:09:
ad:aa:38:61:d3:74:be:ad:3b:68:0f:95:cf:d0:70:
23:41:50:b5:45:d8:2c:16:91:af:4c:04:1b:e4:6c:
7a:32:64:ba:fe:9c:91:95:f6:c9:a2:bd:1a:15:18:
9a:7b:9e:7c:e2:83:88:18:e8:0a:28:45:b7:a5:9f:
69:d9:0a:9d:b5:99:74:ff:fb:10:cf:02:a1:87:8b:
27:7f:49:e5:00:e4:8a:54:3b:8f:ca:ef:2a:99:6f:
f3:ab:15:2b:88:31:6a:31:99:85:0c:ed:52:98:04:
ff:1b:2e:62:e6:ef:63:55:ca:74:c5:18:a1:97:cf:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6A:49:7C:AC:21:F3:21:06:F7:20:A5:48:65:70:0E:DF:5E:20:2E
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b3:93:5b:89:a8:9f:a6:19:e5:64:50:fb:06:2c:36:25:bb:
99:f7:47:e7:0a:1c:8f:49:a4:ad:1e:d6:22:46:54:9f:18:cb:
6b:c0:9a:fd:50:c6:58:13:e8:8d:b2:5d:3a:c4:03:25:a9:3e:
ab:67:91:23:30:ec:49:f9:9e:d2:54:cf:d2:48:bc:ea:fb:48:
0f:5c:e4:5c:a9:03:b7:bd:48:e1:94:be:66:6c:77:18:59:ba:
fd:a4:e1:35:d6:b8:d4:ef:2a:66:85:a2:c8:03:f2:6a:d5:d4:
d1:fd:05:29:26:ff:11:2d:fd:24:fc:42:e6:50:fb:d6:18:32:
4e:7d:69:18:61:d1:bc:71:ac:ab:5c:b3:43:7b:c5:3f:13:db:
bb:ba:1d:bf:73:30:4e:b6:30:4b:72:45:a2:70:bf:c0:7a:d9:
3b:98:1d:93:4d:79:68:01:1d:0f:b6:9a:93:56:fb:6e:4e:bd:
82:62:e9:e2:6b:d0:2b:79:2e:1d:7a:9a:52:03:9c:06:b8:2e:
01:52:d0:18:cb:4a:e1:e5:9b:4d:9d:e3:3b:3f:cd:df:9f:16:
1a:af:93:de:47:99:83:5e:cc:88:1a:a9:2a:4c:e2:94:dd:64:
0b:0f:d3:40:64:7b:ff:57:8d:9f:17:3a:7b:9f:e4:83:21:40:
6a:68:b5:5f
-----BEGIN CERTIFICATE-----
MIIERjCCAy6gAwIBAgICASkwDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw
ZS1uY2MtdGEwHhcNMjYwNzE1MTExMjI0WhcNMjYxMDE1MTExMjI0WjAzMTEwLwYD
VQQDEyhhOTZhNDk3Y2FjMjFmMzIxMDZmNzIwYTU0ODY1NzAwZWRmNWUyMDJlMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UHAhwTOfQM+k2SIW6tEeM+w
jT9xczTjfi+9stVT2mdM7OuAeZgg1H7rmaw8cLshB+YU6+VY2nUJbeQoBY7b1SL7
Yo0YKASwopcamb6ZC23AjiX8SitNhy/9t4bDa0cGyC5eawsDgHDdST21rMttnnxe
hQM01bwBpVckoxq0tk6bTFmq8Qmtqjhh03S+rTtoD5XP0HAjQVC1RdgsFpGvTAQb
5Gx6MmS6/pyRlfbJor0aFRiae5584oOIGOgKKEW3pZ9p2QqdtZl0//sQzwKhh4sn
f0nlAOSKVDuPyu8qmW/zqxUriDFqMZmFDO1SmAT/Gy5i5u9jVcp0xRihl89yQwID
AQABo4IBfzCCAXswHQYDVR0OBBYEFKlqSXysIfMhBvcgpUhlcA7fXiAuMB8GA1Ud
IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr
BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90
YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw
QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWs5NbiaifphnlZFD7Biw2JbuZ90fn
ChyPSaStHtYiRlSfGMtrwJr9UMZYE+iNsl06xAMlqT6rZ5EjMOxJ+Z7SVM/SSLzq
+0gPXORcqQO3vUjhlL5mbHcYWbr9pOE11rjU7ypmhaLIA/Jq1dTR/QUpJv8RLf0k
/ELmUPvWGDJOfWkYYdG8cayrXLNDe8U/E9u7uh2/czBOtjBLckWicL/Aetk7mB2T
TXloAR0PtpqTVvtuTr2CYunia9AreS4deppSA5wGuC4BUtAYy0rh5ZtNneM7P83f
nxYar5PeR5mDXsyIGqkqTOKU3WQLD9NAZHv/V42fFzp7n+SDIUBqaLVf
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:56:28 2026 by rpki-client