Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: SULHw/prdYSTfN/ZObvpwToNHVR57RTZm1YDLhuGKqU=
Subject key identifier: FD:99:BA:68:CF:41:44:4F:6C:FD:DB:4A:34:9C:0F:11:6F:0B:6A:72
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019D9B509F3DB05A08E93F178B5C8C323AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 1608
Signing time: Fri 17 Apr 2026 12:00:45 +0000
Manifest this update: Fri 17 Apr 2026 12:00:45 +0000
Manifest next update: Sat 18 Apr 2026 12:00:45 +0000
Files and hashes: 1: cvU7MkfetULx5kv_IarJahryhlg.roa (hash: p5quF2qOZPdmbe7Adsu9A/9ZytXzA8MG8H5I1geEROA=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: 7JVkxB6+V6CRLT6VvyIEtOigIZvzEzfqI/guEULGuwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:9f:3d:b0:5a:08:e9:3f:17:8b:5c:8c:32:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Apr 17 12:00:45 2026 GMT
Not After : Apr 18 12:00:45 2026 GMT
Subject: CN=fd99ba68cf41444f6cfddb4a349c0f116f0b6a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:c1:ab:d4:64:36:58:6a:04:f3:79:ca:86:
23:c4:b2:68:d3:1b:d0:21:a4:b3:0e:84:63:d8:39:
72:e0:b4:fa:4a:a1:10:1b:82:4a:b9:5c:85:ad:3e:
91:0e:f8:b3:4f:21:72:70:26:4d:b7:99:cf:02:31:
8d:c2:3c:7d:a1:80:9f:df:ea:a2:12:d8:9c:19:c7:
0d:54:37:f3:3b:3e:28:3d:00:56:4d:5e:c2:0e:c9:
cd:f1:7e:ef:a1:2a:50:6e:37:a3:98:2c:cc:91:50:
09:da:f4:5d:9b:04:77:c6:ef:e9:cd:2f:cf:a8:86:
ce:ee:b4:13:e9:db:95:49:92:9f:3c:2f:49:f7:7a:
4a:d9:a7:d1:5c:4d:34:6e:2b:bc:16:a1:be:56:a1:
93:04:c2:34:43:d7:35:2f:da:95:73:ef:cf:a8:9d:
50:11:0f:4c:5c:8f:4f:51:4a:62:d7:76:bb:f5:41:
18:56:3f:1b:34:9b:2b:6d:ca:39:14:97:f0:f4:a5:
6a:2b:e6:11:51:bf:d6:33:59:e8:a4:b4:41:98:57:
0a:c5:7b:b0:da:dc:5f:64:5f:8e:35:92:3c:22:d4:
ba:b9:ec:2d:e3:79:5b:b5:17:0e:99:b4:a5:71:ff:
ac:90:a3:79:ea:9f:27:fc:2a:f5:73:90:44:b6:eb:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:BA:68:CF:41:44:4F:6C:FD:DB:4A:34:9C:0F:11:6F:0B:6A:72
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:a7:2a:7e:3c:4f:ec:60:7b:30:e0:eb:6c:f7:9e:a6:af:
e0:70:34:7f:e3:97:a8:4b:4f:45:0e:cd:33:53:e5:d5:c0:10:
4f:3a:c1:fd:5e:4a:46:43:a6:7b:08:6d:4b:c3:7c:44:f1:d4:
de:83:53:d7:ac:9e:d4:d5:21:bd:a9:1e:82:df:69:7c:18:c9:
fb:43:9b:40:61:23:fb:00:25:ba:0f:74:7d:3a:68:d9:14:3f:
22:da:c3:c4:4a:a3:12:50:12:ac:74:7a:6b:f1:08:b1:80:9d:
7e:15:08:62:76:9a:07:7a:06:89:fa:b2:97:89:39:c0:c7:7e:
92:f4:48:ba:c0:02:7d:c5:6a:6f:9c:9e:97:11:13:be:b8:58:
92:b1:65:b6:2b:bd:87:85:fa:59:1a:5f:e0:0f:ca:08:19:e4:
7f:8f:7b:bf:e1:f0:b4:e2:a9:fe:be:e4:50:f2:f8:1b:e7:70:
e1:d6:07:31:fe:5a:b3:64:3e:4d:12:4a:8c:43:24:3c:61:01:
cb:c3:ad:3e:cb:50:6a:53:85:ab:98:32:0c:6a:9a:a6:f7:dd:
ed:62:67:e7:50:61:ec:2e:5f:8f:8d:f0:31:2c:a9:20:0f:42:
19:ba:f5:f5:cd:56:19:ec:6a:2e:dd:46:b9:cc:50:d4:86:71:
5b:bd:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:16:11 2026 by rpki-client