Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: wtBCe8WjLELuoatWY9WSsfwpx9TvFqsLXh1jHQOdzCE=
Subject key identifier: 5D:8C:8F:18:D1:7F:21:73:AF:94:F5:87:DD:73:68:7E:AF:E3:37:33
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 011B
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 54
Signing time: Thu 28 Aug 2025 13:32:06 +0000
Manifest this update: Thu 28 Aug 2025 13:32:06 +0000
Manifest next update: Fri 28 Nov 2025 13:32:06 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: MXZ1Tlnx0eRgMBaPLv4gXF581hVgSu7p6SG2c22BxMQ=)
2: ripe-ncc-ta.crl (hash: ie93+Pb90exSeB1/YWOSMz9Ggs1S0GPm7q4bDlMor3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Nov 2025 13:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Aug 28 13:32:06 2025 GMT
Not After : Nov 28 13:32:06 2025 GMT
Subject: CN=5d8c8f18d17f2173af94f587dd73687eafe33733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:7a:b8:83:b7:2b:5e:a3:bc:97:f1:97:ba:
8c:13:10:b2:6e:13:44:a6:2c:ff:99:a5:79:c8:01:
3e:6d:bd:02:f3:48:fe:6b:53:67:09:12:ae:f6:73:
e0:7d:17:c5:d1:3e:0c:3c:a4:49:fb:d5:49:95:a9:
67:af:94:7f:58:65:a4:c6:aa:1e:e8:1e:a0:b9:87:
74:61:be:f8:ff:80:54:3b:bc:62:e9:d7:b8:1e:ff:
d2:1c:de:fb:33:f0:bc:f3:d9:1f:d9:64:5e:10:f8:
c0:5d:51:60:da:97:c6:92:ea:bb:15:c2:f7:f7:f5:
f9:25:89:3f:c1:c9:d9:9a:c4:89:e7:83:89:c1:ad:
ad:4c:aa:6c:aa:c9:d5:1d:3c:40:86:81:27:0c:be:
25:09:89:ae:20:49:e7:10:2b:d5:f9:68:4a:53:af:
1e:0b:64:4c:5b:b6:25:99:0e:c1:94:41:08:44:b6:
e0:98:f0:7e:8a:ff:a7:89:18:15:bd:74:0e:45:45:
55:81:14:f1:f5:79:94:6b:74:1d:a7:56:7a:58:c7:
5f:1d:2c:d7:7f:9a:03:b1:58:cd:e5:01:41:20:c5:
34:13:4a:51:57:ef:1c:41:a9:a5:cd:28:d1:33:da:
8c:37:4a:a7:8c:96:7e:ac:2f:90:01:41:b0:25:e2:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:8F:18:D1:7F:21:73:AF:94:F5:87:DD:73:68:7E:AF:E3:37:33
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0d:59:dc:54:a7:3c:6e:d0:55:1f:e3:92:bd:17:94:d8:b1:
38:30:a5:55:ea:aa:c6:9b:55:e7:f5:07:09:d3:8e:a0:14:b0:
52:ee:06:86:f6:7f:08:eb:60:f5:ea:b1:d2:3f:d7:19:6d:90:
35:e7:50:af:ae:be:a4:1e:95:2e:d9:11:54:b4:b5:fb:e4:52:
dd:17:66:2c:7e:b1:3e:69:ea:5c:87:08:b7:c9:84:a4:53:e0:
f6:fa:d5:7c:a0:d8:f8:7e:1f:a0:32:4e:b3:98:14:84:92:29:
39:d5:66:fe:00:b3:c9:8e:30:ae:1a:2e:44:b9:c6:cc:b7:73:
89:9f:0d:94:7e:dc:84:e9:ab:41:cc:64:df:f9:f7:1f:b6:22:
62:77:bc:d4:52:e6:3b:60:f8:48:51:24:7d:48:6a:49:d1:73:
a2:13:25:bf:30:c0:73:9e:b1:22:5d:c6:f5:cb:b6:73:d5:29:
41:40:06:6e:b0:05:6c:b1:e9:47:3a:21:d8:63:fb:f1:89:43:
e9:68:95:70:0e:c0:a9:77:18:a5:8a:f9:e3:96:94:f8:4a:84:
22:2f:1b:aa:bd:4d:61:f2:b1:30:35:c9:2e:fb:2a:a6:9c:23:
04:33:c4:0f:8e:71:3d:8b:41:a7:96:3d:f7:fb:23:bd:da:e6:
fe:0e:b8:73
-----BEGIN CERTIFICATE-----
MIIERjCCAy6gAwIBAgICARswDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw
ZS1uY2MtdGEwHhcNMjUwODI4MTMzMjA2WhcNMjUxMTI4MTMzMjA2WjAzMTEwLwYD
VQQDEyg1ZDhjOGYxOGQxN2YyMTczYWY5NGY1ODdkZDczNjg3ZWFmZTMzNzMzMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEh6uIO3K16jvJfxl7qMExCy
bhNEpiz/maV5yAE+bb0C80j+a1NnCRKu9nPgfRfF0T4MPKRJ+9VJlalnr5R/WGWk
xqoe6B6guYd0Yb74/4BUO7xi6de4Hv/SHN77M/C889kf2WReEPjAXVFg2pfGkuq7
FcL39/X5JYk/wcnZmsSJ54OJwa2tTKpsqsnVHTxAhoEnDL4lCYmuIEnnECvV+WhK
U68eC2RMW7YlmQ7BlEEIRLbgmPB+iv+niRgVvXQORUVVgRTx9XmUa3Qdp1Z6WMdf
HSzXf5oDsVjN5QFBIMU0E0pRV+8cQamlzSjRM9qMN0qnjJZ+rC+QAUGwJeLGnQID
AQABo4IBfzCCAXswHQYDVR0OBBYEFF2MjxjRfyFzr5T1h91zaH6v4zczMB8GA1Ud
IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr
BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90
YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw
QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPDVncVKc8btBVH+OSvReU2LE4MKVV
6qrGm1Xn9QcJ046gFLBS7gaG9n8I62D16rHSP9cZbZA151Cvrr6kHpUu2RFUtLX7
5FLdF2YsfrE+aepchwi3yYSkU+D2+tV8oNj4fh+gMk6zmBSEkik51Wb+ALPJjjCu
Gi5EucbMt3OJnw2UftyE6atBzGTf+fcftiJid7zUUuY7YPhIUSR9SGpJ0XOiEyW/
MMBznrEiXcb1y7Zz1SlBQAZusAVsselHOiHYY/vxiUPpaJVwDsCpdxilivnjlpT4
SoQiLxuqvU1h8rEwNcku+yqmnCMEM8QPjnE9i0Gnlj33+yO92ub+Drhz
-----END CERTIFICATE-----
Generated at Wed Sep 3 04:49:23 2025 by rpki-client