Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: b0JPX7HNBNIhaYNDbbK1vfTFKl8nbtJHJIjWmx1R4qU=
Subject key identifier: AD:23:C0:CD:FE:45:23:53:A7:60:DE:47:56:DE:53:1A:6F:A8:77:23
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 01A17DE1992CD6AEDB52BEDA0304E341F7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 080A
Signing time: Tue 27 Oct 2026 15:01:39 +0000
Manifest this update: Tue 27 Oct 2026 15:01:39 +0000
Manifest next update: Wed 28 Oct 2026 15:01:39 +0000
Files and hashes: 1: 7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa (hash: VRkqBPN/9BIZfGsddu7EhNguv5Ir9sO9OazfQFdIK6s=)
2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: /7DNyz3FNvC4vlzblsQ1jmdSeskoMBDmvwNDd9AdMn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:99:2c:d6:ae:db:52:be:da:03:04:e3:41:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Oct 27 15:01:39 2026 GMT
Not After : Oct 28 15:01:39 2026 GMT
Subject: CN=ad23c0cdfe452353a760de4756de531a6fa87723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:d1:c2:84:1a:08:86:27:93:a7:1b:3b:63:
56:c1:d0:a0:fa:76:ec:f7:da:6f:83:96:6c:12:05:
3c:51:cc:cf:f4:a0:69:91:13:42:46:d1:9b:9f:b4:
42:b9:14:5b:72:7b:d4:c0:96:9d:8c:6f:c8:83:4d:
74:c2:72:63:91:a4:b9:16:0b:89:24:9f:86:97:a5:
fd:1e:38:f6:a6:e0:f6:49:76:42:83:46:a1:24:0d:
8d:1c:c2:dc:4f:27:63:da:19:d1:aa:b3:62:a1:5a:
9c:96:d2:5a:5b:6f:5d:c9:27:93:b0:e7:8f:05:35:
8f:6b:fd:bf:64:f6:5c:fa:61:0d:50:3f:f1:a6:41:
66:48:14:0c:3c:83:8c:0d:8b:bb:17:a6:31:eb:1f:
b1:d0:81:c6:d4:11:45:06:8b:46:7b:fc:e6:a1:24:
6b:47:a0:84:c8:62:75:f9:10:b6:ad:8b:83:ce:e6:
01:fd:ea:2d:6a:d5:69:b1:89:8f:6b:9e:c4:2a:34:
a1:79:bd:74:d2:46:7d:65:b6:d3:8d:fe:f7:71:d5:
7c:96:2a:74:bb:1d:42:e3:af:66:d1:d4:4f:0a:7e:
8a:e7:56:c6:ce:17:92:3d:5e:b4:c7:0d:46:21:7e:
92:93:a4:68:f1:d8:cb:26:f1:3b:f9:75:4b:26:3b:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:C0:CD:FE:45:23:53:A7:60:DE:47:56:DE:53:1A:6F:A8:77:23
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:14:34:97:86:3d:32:06:5d:99:75:d7:bb:24:bb:dd:36:d1:
5e:84:77:73:dc:4d:fd:d8:8e:a4:37:6f:16:c0:c8:71:77:12:
c5:60:11:1d:8c:ae:2b:53:e6:b3:ac:9e:60:f1:43:50:e2:48:
5f:70:63:8e:97:89:46:e6:55:e2:58:5a:b8:52:20:eb:63:9e:
d5:bf:a4:2b:71:ac:c8:ae:b2:d8:83:f3:7a:67:84:f2:58:5a:
d7:e4:d6:8a:76:27:0d:88:5d:1f:57:ef:11:cd:6c:6d:de:8c:
d1:30:c9:60:8a:19:7d:fd:8e:17:ca:bc:12:47:a9:ec:d9:68:
05:85:3d:b4:71:43:3b:b1:67:30:b6:14:50:5b:c2:c9:53:03:
89:bc:e2:e1:48:ea:b0:f5:9c:69:0d:e1:50:41:41:ac:f9:53:
3b:94:f2:7b:5c:be:85:5d:20:91:75:5d:e6:45:d3:b1:81:4c:
4e:bb:ba:ac:3b:84:66:7e:f2:7f:dd:f3:19:3c:f8:9f:f4:0b:
1e:fa:9a:52:f6:f3:4e:3c:4c:fa:7f:60:82:91:25:7f:d1:ec:
07:e6:67:c6:bd:a5:43:0b:fe:0d:68:00:fd:61:5d:61:d7:0c:
c2:bb:86:4e:bd:1a:36:e0:81:60:75:b4:72:f7:fe:a4:19:f7:
af:97:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:47:16 2026 by rpki-client