Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: TgcLPglp/v+aDIx6rbGAnS4a/J/iQUlpJmCCBLRK5iY=
Subject key identifier: AC:94:8D:EE:80:A6:04:21:A0:A1:23:97:28:6D:D6:67:88:7F:04:7B
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019CABDA0202940AB6743BF9277E2EF48F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 158C
Signing time: Mon 02 Mar 2026 00:01:57 +0000
Manifest this update: Mon 02 Mar 2026 00:01:57 +0000
Manifest next update: Tue 03 Mar 2026 00:01:57 +0000
Files and hashes: 1: cvU7MkfetULx5kv_IarJahryhlg.roa (hash: p5quF2qOZPdmbe7Adsu9A/9ZytXzA8MG8H5I1geEROA=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: OSpQltyyDndDVgpWW5feW/FmHVG5HY6XYjFcEXk+MhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:02:02:94:0a:b6:74:3b:f9:27:7e:2e:f4:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Mar 2 00:01:57 2026 GMT
Not After : Mar 3 00:01:57 2026 GMT
Subject: CN=ac948dee80a60421a0a12397286dd667887f047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:1f:23:64:90:f7:c9:fb:d7:72:44:2f:82:
ee:77:4f:77:1e:bd:2d:53:e0:63:ed:74:a7:7a:e6:
16:a3:43:ae:3e:ec:0f:7b:f3:cf:dd:33:15:cb:4f:
9b:e6:60:f0:b0:4e:af:74:50:c9:f9:06:a2:c3:f0:
31:de:bf:23:85:9e:9e:e2:9a:96:22:50:6f:8c:17:
d7:79:27:23:70:e7:e4:a9:84:1d:1d:81:a9:4f:77:
35:04:25:8c:fd:b4:a5:c7:0a:50:10:df:31:15:c0:
ae:21:ac:0b:94:3e:4c:23:44:57:65:c3:57:cc:df:
6c:e3:8b:c0:00:46:34:ec:b4:76:17:bf:35:da:e8:
52:e9:e8:73:7b:b7:96:f6:9d:d4:64:78:e0:fc:14:
fe:cd:f3:5f:c0:ff:f4:7d:90:e0:05:f8:e0:53:cb:
bf:75:ed:d4:2d:43:90:8c:22:49:09:ff:cb:c1:a0:
0f:14:95:44:7e:fb:a6:cf:c8:de:13:01:01:55:29:
36:bb:b3:9e:02:9d:59:cd:f3:ec:0c:b1:ba:ba:08:
b5:c1:5d:72:ed:4d:07:1a:9c:e5:75:e3:64:b2:d0:
a4:70:7e:c6:2c:1d:4f:8a:67:11:06:69:67:4e:6d:
7a:42:96:93:c9:59:56:6e:ea:da:51:94:92:e7:0b:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:8D:EE:80:A6:04:21:A0:A1:23:97:28:6D:D6:67:88:7F:04:7B
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:20:ec:e6:5a:76:5b:de:1d:53:7f:15:86:70:8f:e9:70:a7:
41:fe:d9:ba:e5:23:86:0f:55:b3:c1:04:d5:be:67:13:b9:8e:
6a:70:1a:c9:c5:d0:1a:ca:5e:7a:15:09:c9:3d:3e:4c:f2:3e:
39:3f:a7:5e:36:fa:0d:93:92:b6:97:4f:31:3f:f8:ab:bd:bb:
61:bf:ba:51:cb:e3:00:1a:40:36:c5:38:59:6a:d1:ee:44:ca:
0d:20:c7:75:34:2f:bd:b7:3c:1b:1e:6e:42:18:6d:2f:60:84:
8f:2b:81:1d:5e:5e:3e:cb:d1:ec:52:48:90:b3:b1:c5:76:57:
41:47:3f:7d:20:35:e7:16:42:1a:d2:3c:13:12:69:fc:5f:a3:
6a:98:43:48:ef:81:29:95:dc:aa:c2:a8:2d:50:28:10:d7:72:
48:c0:c1:56:50:74:ae:9e:a2:93:b1:3b:f5:50:86:c3:d9:76:
b1:e6:9d:71:15:99:93:1d:ee:6e:e8:ab:1f:df:16:9b:29:13:
a3:4b:4e:da:d8:a4:b5:c8:65:8a:41:96:0e:e2:97:6d:49:c5:
0d:41:7e:5e:bd:e7:d8:a8:80:98:c2:9c:de:e3:38:21:44:f0:
56:07:1e:b5:31:7c:e7:63:5f:d7:ea:6b:73:a0:21:ac:a5:23:
7b:4b:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:22 2026 by rpki-client