Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: T1mWU/g1WejH2v5XAp4aASSfQtIIyBJeWWBRARaoCyQ=
Subject key identifier: D9:AF:D9:56:4F:87:DC:A4:84:17:11:DC:57:0D:4E:D8:D5:F7:6F:8F
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0123
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 57
Signing time: Wed 18 Mar 2026 09:17:45 +0000
Manifest this update: Wed 18 Mar 2026 09:17:45 +0000
Manifest next update: Thu 18 Jun 2026 09:17:45 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: RoIOmIXUbImK6LEMxFfh8gz/cyfLh0gcnk080sv08aI=)
2: ripe-ncc-ta.crl (hash: otW5PlBWzyZmXIrfYMt9d2LEoujPKhtmQHBVrqBS0ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 09:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Mar 18 09:17:45 2026 GMT
Not After : Jun 18 09:17:45 2026 GMT
Subject: CN=d9afd9564f87dca4841711dc570d4ed8d5f76f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:05:17:87:84:06:bc:8f:d7:0d:74:ca:fb:
e1:42:ed:5a:b5:aa:2d:ee:cd:2a:f8:3a:fd:8b:c2:
e7:15:11:41:38:46:e2:1f:f3:91:3d:61:d0:09:0c:
b7:22:75:bd:bd:ba:33:4c:38:07:a6:eb:3d:11:a1:
ae:94:05:ad:e0:06:d8:cf:d6:90:e6:35:4a:a5:31:
cb:73:13:65:f2:53:18:bb:ba:da:ba:30:dc:db:28:
68:30:d6:36:8c:35:11:76:23:88:9a:08:23:a9:1c:
0c:2c:b9:cf:82:03:f8:bc:a1:01:34:66:e8:40:9c:
36:12:8d:be:25:b3:b9:02:47:bd:cd:1e:fb:0c:ed:
cd:ab:f9:cd:34:34:7e:78:f5:ee:99:ac:73:bf:e1:
8e:31:26:96:74:27:1e:48:16:d6:de:c5:9d:0a:91:
9d:86:fa:f2:cb:61:7e:c8:c0:3c:52:cf:78:38:28:
4a:c9:e6:cc:ba:bd:4f:d3:ca:6c:a9:8e:8c:cf:c2:
98:4a:5b:9b:b4:d3:fd:f6:d2:61:dc:bd:aa:7e:a9:
85:a3:6d:d5:5a:a4:32:5b:38:ed:d7:fe:4c:4c:14:
37:e7:87:38:fe:05:b5:1c:37:94:32:4a:4e:69:c0:
f4:44:bb:9a:99:76:36:4e:25:56:e2:f3:da:25:01:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:D9:56:4F:87:DC:A4:84:17:11:DC:57:0D:4E:D8:D5:F7:6F:8F
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:03:0c:78:16:73:6c:74:02:79:d8:19:fb:c5:4a:3b:fb:4f:
6e:4a:61:13:6d:2f:ec:23:89:08:19:e9:56:7e:6b:9e:f8:e9:
e4:32:08:d4:28:33:99:12:8f:29:59:5e:77:33:95:e7:1e:a7:
61:57:1d:8b:5d:38:45:5c:b5:8d:b2:70:8b:76:c4:f6:45:46:
ab:a4:c6:2d:a8:a5:1b:e6:36:38:d3:0f:73:15:2f:13:e2:f3:
13:9d:f3:00:32:70:63:7a:26:df:00:75:bb:26:67:f2:53:1d:
07:af:d4:a8:c2:2f:f7:5e:df:e4:3f:54:17:29:e9:9f:51:bc:
03:11:b4:25:1e:99:6d:a6:6a:88:ce:16:c4:80:d4:f7:aa:98:
da:5f:26:40:47:9d:99:fc:25:f7:e5:46:ac:47:d6:fe:50:06:
97:13:70:da:ad:90:54:c8:1b:9e:5b:6d:12:5b:9a:fc:4a:f4:
ac:0d:e7:a7:92:a9:a9:53:67:f5:01:fa:6e:e1:cb:c7:a8:d3:
8b:53:1e:be:71:d8:1e:f8:28:a4:f8:05:14:0c:a5:d8:3e:65:
31:f6:4e:f3:b6:f2:fc:37:4d:7a:f4:3c:88:0e:7f:b2:a7:e3:
07:f6:90:14:fe:57:26:0e:80:1b:6c:b9:6a:5e:8d:6c:01:4d:
4f:26:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 10:31:25 2026 by rpki-client