Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier: VCpkFxhHNLRZRRgVh5AP5yARWFyBnJFIiPYdpNjE+N4=
Subject key identifier: 7F:6A:42:D5:D4:1B:28:AA:25:32:82:9B:C7:DB:6E:D9:BA:14:CA:04
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial: 019D39AEA7A0664329083F6644B4288A5171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number: 0EB4
Signing time: Sun 29 Mar 2026 13:00:40 +0000
Manifest this update: Sun 29 Mar 2026 13:00:40 +0000
Manifest next update: Mon 30 Mar 2026 13:00:40 +0000
Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: hDcsMSifFOzwEyh6xaGifdN5aS1ge8eVZuBX+rELik0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a7:a0:66:43:29:08:3f:66:44:b4:28:8a:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Validity
Not Before: Mar 29 13:00:40 2026 GMT
Not After : Mar 30 13:00:40 2026 GMT
Subject: CN=7f6a42d5d41b28aa2532829bc7db6ed9ba14ca04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:40:4a:89:ba:2c:f1:4d:34:31:97:0b:20:2a:
8c:17:3e:ce:d6:08:4f:0d:c8:85:fc:c2:19:61:5b:
f4:ff:9f:99:e9:52:82:70:45:9e:aa:39:a7:f8:9e:
90:f6:fd:f8:91:3b:80:b0:a3:bb:25:f1:48:0a:d3:
73:4a:26:cd:bc:09:f4:48:4c:11:63:20:bf:f7:20:
7c:84:ef:c2:24:fa:4c:b7:5c:3e:7f:9a:bc:c0:35:
b7:c0:6f:e8:a9:85:1c:8d:39:3b:94:55:e3:95:dd:
08:6a:2d:84:84:20:22:d2:fc:19:38:79:8d:a9:74:
fe:29:67:65:77:3b:dd:e3:8c:4f:db:4e:4b:c5:d4:
0c:4e:97:69:b9:57:2d:a7:5e:c7:24:84:8f:7d:19:
c9:f1:d1:d6:f1:db:85:66:c8:24:31:45:e1:15:f5:
22:fe:b2:1e:c7:25:e0:2a:65:43:25:06:7a:4a:48:
2a:6f:7e:17:98:c5:7c:d4:da:53:51:6f:03:77:ad:
af:b9:ca:b0:fa:7a:14:65:a6:f3:07:ac:74:3a:e9:
88:6d:bf:36:9e:f3:fa:66:7a:1e:0f:e7:dd:02:d6:
06:f8:8c:f3:32:3a:e3:79:41:d8:0d:c0:32:3b:cf:
9c:de:91:77:ca:61:9d:a8:64:f5:8e:36:ea:dd:e4:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:42:D5:D4:1B:28:AA:25:32:82:9B:C7:DB:6E:D9:BA:14:CA:04
X509v3 Authority Key Identifier:
keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:30:f6:c2:a7:2a:40:e0:e8:ed:58:d4:95:b9:ff:4e:d3:bd:
bd:e6:de:7f:7d:8d:de:d6:1e:62:f1:1e:7e:8c:0e:39:7b:cf:
d6:18:46:80:be:5e:f2:fd:3d:94:b2:d4:5e:11:e0:54:b7:71:
f9:94:34:60:90:f0:98:2f:77:01:57:65:6c:fe:9e:a9:c6:d8:
31:04:c4:8a:a2:cd:ad:1a:2b:7d:06:1c:19:ff:39:b6:08:47:
1a:d6:76:27:b4:02:83:3b:e5:a6:8d:78:45:93:55:0c:25:59:
e6:4b:93:c9:50:b6:61:2f:a1:85:6f:bf:b3:b8:df:28:a3:3b:
b2:73:14:31:96:74:28:fc:78:0a:0d:ec:82:4c:b7:3c:c4:41:
52:73:87:19:39:e7:39:df:65:cc:c2:7e:3f:ac:e6:72:43:72:
f4:25:b2:a4:7a:2b:b6:62:44:04:2a:63:98:bc:e0:19:4b:5a:
4d:85:08:ee:b5:30:84:3f:ae:8d:a8:ac:ad:54:db:e6:9d:13:
c3:06:12:45:ba:56:76:d8:68:14:96:08:9b:3a:6b:79:08:cb:
39:89:50:66:a9:dd:5f:16:9e:f6:c9:b0:f1:8a:b2:d1:7e:80:
e2:46:bf:5c:0a:94:15:6c:e6:d2:37:24:c9:2b:5f:3f:0d:9b:
44:ec:91:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rqegZkMpCD9mRLQoilFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWQwOTY3Y2EwMDAyZGQ5Y2U0NWJjNDNiYjcwMWI0MTcz
ZDc5YmQwHhcNMjYwMzI5MTMwMDQwWhcNMjYwMzMwMTMwMDQwWjAzMTEwLwYDVQQD
Eyg3ZjZhNDJkNWQ0MWIyOGFhMjUzMjgyOWJjN2RiNmVkOWJhMTRjYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUBKibos8U00MZcLICqMFz7O1ghP
DciF/MIZYVv0/5+Z6VKCcEWeqjmn+J6Q9v34kTuAsKO7JfFICtNzSibNvAn0SEwR
YyC/9yB8hO/CJPpMt1w+f5q8wDW3wG/oqYUcjTk7lFXjld0Iai2EhCAi0vwZOHmN
qXT+KWdldzvd44xP205LxdQMTpdpuVctp17HJISPfRnJ8dHW8duFZsgkMUXhFfUi
/rIexyXgKmVDJQZ6Skgqb34XmMV81NpTUW8Dd62vucqw+noUZabzB6x0OumIbb82
nvP6ZnoeD+fdAtYG+IzzMjrjeUHYDcAyO8+c3pF3ymGdqGT1jjbq3eT1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9qQtXUGyiqJTKCm8fbbtm6FMoEMB8GA1UdIwQY
MBaAFLWtCWfKAALdnORbxDu3AbQXPXm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTIt
N2MzNmVmNjEzYThmLzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTItN2MzNmVmNjEzYThm
LzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTD2wqcq
QODo7VjUlbn/TtO9vebef32N3tYeYvEefowOOXvP1hhGgL5e8v09lLLUXhHgVLdx
+ZQ0YJDwmC93AVdlbP6eqcbYMQTEiqLNrRorfQYcGf85tghHGtZ2J7QCgzvlpo14
RZNVDCVZ5kuTyVC2YS+hhW+/s7jfKKM7snMUMZZ0KPx4Cg3sgky3PMRBUnOHGTnn
Od9lzMJ+P6zmckNy9CWypHortmJEBCpjmLzgGUtaTYUI7rUwhD+ujaisrVTb5p0T
wwYSRbpWdthoFJYImzpreQjLOYlQZqndXxae9smw8Yqy0X6A4ka/XAqUFWzm0jck
yStfPw2bROyRag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:52 2026 by rpki-client