Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: JT6lxnvWeAOaUxfQ8tK7EoCCxhn4xgBFhBz6KDL/ui8=
Subject key identifier: A5:46:55:74:D3:A2:71:0C:CC:05:70:CA:6D:DF:35:4B:10:B0:73:9E
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019D38D2E7F315B4279895A7418CCBC4A842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 15D5
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: cvU7MkfetULx5kv_IarJahryhlg.roa (hash: p5quF2qOZPdmbe7Adsu9A/9ZytXzA8MG8H5I1geEROA=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: qXYxDhMTbR03iddyIis1C9bWY6wLSqIzEDZJok7csrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e7:f3:15:b4:27:98:95:a7:41:8c:cb:c4:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=a5465574d3a2710ccc0570ca6ddf354b10b0739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:2f:cd:9b:97:b1:c5:67:d2:a1:7f:91:da:
3c:c5:15:23:52:c6:cc:63:c6:2f:56:94:b2:1a:bb:
ac:6c:de:13:08:a5:d3:05:d8:a5:00:32:f9:d2:e6:
3b:dd:6d:dd:f3:e1:0b:7f:d0:90:48:81:1c:64:a5:
c5:68:34:8a:91:0a:a5:8e:a8:9d:49:1b:ba:02:56:
fb:20:ce:ae:df:4a:8c:ea:50:35:9f:c7:f5:d3:8d:
83:08:8a:33:d1:6c:ad:d6:c0:a6:34:ef:20:99:d0:
77:cb:2c:9d:53:53:02:97:3e:b0:78:ea:c3:f3:ab:
f9:a3:66:66:35:90:ac:7c:92:89:a6:73:a7:9e:a1:
31:7a:2c:af:0b:92:6d:bb:81:4c:6d:eb:7d:98:67:
10:bb:51:03:ec:2d:3d:71:4b:09:b0:cd:f9:80:d1:
4b:43:ec:24:79:f5:21:64:de:12:e8:6d:a1:ae:84:
80:c6:b4:8e:20:63:79:57:b8:a1:09:aa:1a:28:61:
4d:4f:dc:f4:92:93:4a:0e:e2:4a:cb:fc:37:7b:47:
10:b9:03:12:24:6d:d8:07:23:04:75:c0:9c:54:4d:
86:09:76:c9:d8:c2:8b:7b:3c:de:0b:ad:9f:d6:84:
88:c5:b8:75:cc:4d:ce:2f:df:fe:44:91:84:d7:81:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:55:74:D3:A2:71:0C:CC:05:70:CA:6D:DF:35:4B:10:B0:73:9E
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:f6:b1:86:77:92:ab:c8:4a:34:62:2b:86:c4:26:f3:d7:
13:fd:13:7a:9f:dd:e1:1a:00:74:a4:ba:55:ca:2b:79:b1:d9:
75:73:6a:00:79:ee:84:dc:75:dd:a7:52:d5:8a:44:e5:f2:98:
6b:e9:f8:7b:5c:ae:70:7d:67:fd:cf:f0:29:df:69:2c:aa:42:
e3:e7:3d:da:ed:2c:d9:46:32:4c:aa:11:f4:45:c9:d9:0d:43:
ff:ec:d7:47:58:54:41:6c:9f:c8:0f:85:e9:b8:d5:7a:94:d5:
d8:79:c9:30:47:68:a0:55:aa:e2:2a:e3:52:a6:c8:03:58:97:
1c:ff:97:4e:5e:9f:18:63:1f:45:ce:cd:f1:01:26:39:13:0d:
ff:8d:d4:bb:c5:92:17:7c:50:7f:38:24:d8:85:3d:70:d7:bc:
e1:24:fa:9f:f5:19:b0:5f:55:45:64:3e:0a:d9:26:11:5d:63:
45:1f:c4:7e:f2:a7:c4:6a:ed:aa:55:48:ff:79:3b:b9:ef:6f:
2d:e0:56:62:3e:1e:ea:52:aa:26:67:ae:18:42:d8:d8:8a:31:
df:26:4f:60:ae:fd:1b:1f:2c:98:63:8e:3b:85:a4:99:1f:59:
7f:95:7b:6a:f2:34:36:51:b0:06:5b:e2:04:1e:9c:d3:c8:9a:
c0:84:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:45 2026 by rpki-client