Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: wJx8hxK0QMJivT6ffkcNhRb7HXbCVJebgOpfnO747Ig=
Subject key identifier: EB:9A:72:7C:84:3A:5F:5C:F6:AC:19:6F:2F:9A:0F:84:B2:98:CE:E0
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 019E7F31DAEC7FDC9F2B389BFF41030A1CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 067D
Signing time: Sun 31 May 2026 18:00:34 +0000
Manifest this update: Sun 31 May 2026 18:00:34 +0000
Manifest next update: Mon 01 Jun 2026 18:00:34 +0000
Files and hashes: 1: 7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa (hash: VRkqBPN/9BIZfGsddu7EhNguv5Ir9sO9OazfQFdIK6s=)
2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: Tso1PtF/jZqTWuP2ZPPyMf6FG61VFoVUWpFMKzzbE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 11:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:31:da:ec:7f:dc:9f:2b:38:9b:ff:41:03:0a:1c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: May 31 18:00:34 2026 GMT
Not After : Jun 1 18:00:34 2026 GMT
Subject: CN=eb9a727c843a5f5cf6ac196f2f9a0f84b298cee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:5c:2f:af:f1:42:f1:43:a0:95:6b:dc:db:
95:3d:6f:33:4b:23:28:cb:16:9c:6a:54:4c:1a:47:
b6:b3:5d:22:26:97:80:fd:b0:8b:7a:5d:f0:a0:31:
cc:2f:8d:96:af:54:70:e8:7b:2e:16:a4:ed:39:8b:
75:58:f8:29:20:31:c5:c5:03:02:26:e7:89:e4:7f:
71:0a:38:06:0f:a7:ab:96:13:90:09:df:52:04:d4:
c7:4d:21:20:d7:c8:9a:d3:0d:9d:60:81:4b:fe:f7:
44:65:0c:87:98:40:c4:3b:52:c2:ce:27:cc:a0:40:
63:76:5a:73:51:4f:31:86:45:47:bf:bb:33:bd:9c:
e8:69:35:87:b3:b4:6a:43:1d:a5:ea:56:12:85:7e:
4e:7e:5e:cd:6f:8c:6b:d9:ed:8e:1e:a3:e7:01:4e:
13:35:d4:2c:5a:58:cb:70:4a:9c:62:e3:5e:74:af:
de:26:d0:b9:8b:8e:17:6f:8e:d9:df:6b:1d:9a:2b:
87:3c:6d:f8:19:39:bb:e6:8a:de:7f:4b:c8:c8:55:
a1:0f:30:7c:59:79:3d:bd:75:70:56:a8:a7:af:c2:
f7:7a:3c:dc:09:58:0d:86:db:48:fc:06:a1:0f:00:
41:f4:d3:23:fd:b4:1a:27:19:b8:fe:93:1c:48:c9:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9A:72:7C:84:3A:5F:5C:F6:AC:19:6F:2F:9A:0F:84:B2:98:CE:E0
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b7:71:38:c0:eb:fe:69:40:de:c0:52:06:95:92:22:24:d8:
53:e5:e0:f8:e4:04:b1:1a:97:ab:53:1c:c6:62:8e:7c:e5:5a:
5e:d2:ac:20:bd:19:e9:b7:bd:42:70:79:2d:99:5f:15:45:e3:
4c:ce:a1:c5:88:1c:af:a7:2e:48:d2:3f:24:54:10:4f:0d:53:
3a:01:65:11:dc:3e:1e:67:26:fc:7b:64:22:e7:47:40:af:61:
93:77:67:db:c2:8f:73:b1:4f:9e:61:22:66:0d:aa:fc:9e:f1:
2e:a7:48:4f:99:78:c8:53:d8:32:37:a2:16:57:65:48:5d:fd:
bc:45:fa:22:45:de:c0:ef:f8:24:70:34:45:1b:40:8e:35:91:
c9:95:29:11:cb:4e:b8:c8:2c:03:e8:f5:63:95:2b:9a:11:4f:
52:59:e6:6e:70:2e:ff:0a:ae:41:8b:ca:0c:95:98:b9:d2:31:
98:6b:5d:58:fa:b4:80:72:49:b8:fd:f8:f0:c8:61:96:67:0e:
73:c7:24:3c:ed:3d:27:8e:75:7d:ad:38:e4:20:81:65:d3:3a:
72:0f:6b:1b:ed:61:59:a2:27:04:75:fc:c4:84:1c:95:07:05:
7e:08:1e:a9:fb:bb:e3:32:f4:ec:56:29:4f:fa:76:1c:06:14:
0a:bf:95:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 19:45:49 2026 by rpki-client