Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: Nno+8Z9T/499SuMs7ZNpopX55xH2YrLFhkb7rbAOURk=
Subject key identifier: 8A:B3:87:F0:D7:37:E2:16:29:8E:90:9A:52:7A:4D:04:18:AD:94:13
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 012C
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 5A
Signing time: Wed 16 Sep 2026 13:31:22 +0000
Manifest this update: Wed 16 Sep 2026 13:31:22 +0000
Manifest next update: Wed 16 Dec 2026 13:31:22 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: MhqQb22hI8B8FGVA1TXxnDwZ7q8o/YuvYBv9c3PLFv0=)
2: ripe-ncc-ta.crl (hash: d/YZnkmwvImPPYoWqQJE7EymM6lnBVEaMpvtuPrz6R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Dec 2026 13:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Sep 16 13:31:22 2026 GMT
Not After : Dec 16 13:31:22 2026 GMT
Subject: CN=8ab387f0d737e216298e909a527a4d0418ad9413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:e3:96:2c:63:fb:44:3d:2c:19:86:29:23:
c2:8d:a5:b1:81:eb:a9:35:59:88:e3:0e:41:b2:1d:
b2:0e:0e:2d:09:75:2a:a4:1f:f7:1b:cb:5d:bf:a5:
2a:b5:ac:0e:9c:c6:ea:80:8a:e1:e5:94:d2:df:60:
4f:e4:0b:6c:f9:0d:81:04:11:94:23:4a:13:42:1f:
7f:06:07:33:3e:35:21:68:62:a7:4f:6b:aa:a0:69:
9a:e7:44:15:81:b2:42:c2:bb:95:5d:3e:d5:24:6c:
2b:bc:ae:01:41:12:a5:0a:6f:2b:2e:a7:fa:75:d0:
66:9c:ab:7c:c4:1b:ed:38:37:94:b1:01:12:02:e7:
c9:47:56:98:89:3b:91:f9:fa:da:53:f7:ca:62:26:
52:b6:af:ee:22:ff:08:62:ba:a9:cb:38:de:14:16:
96:cb:31:d7:75:c5:0c:67:ee:96:3f:1e:b2:ca:9b:
70:0d:d9:8d:f1:3c:87:de:13:64:12:88:79:b2:42:
33:6e:fe:0a:79:62:3d:10:dc:eb:e0:ce:3e:69:d1:
4e:20:0f:c2:72:9d:b5:cb:3c:fc:e7:bd:fb:a2:a0:
f3:38:bd:cb:79:ca:95:d7:af:6c:a8:2a:68:9d:f8:
f2:a0:e6:bd:1a:e2:ab:d0:75:e5:8e:a0:e1:70:3f:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:87:F0:D7:37:E2:16:29:8E:90:9A:52:7A:4D:04:18:AD:94:13
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ab:6a:10:8b:ea:39:fc:a7:d2:63:90:7b:38:fd:d4:49:6c:
c7:1b:a7:26:b9:d4:c4:21:9b:a3:1b:5f:e7:ab:4f:54:82:e8:
cd:04:66:64:a3:c5:15:77:2e:cd:7d:47:6e:af:0b:e7:08:83:
19:f8:1a:d4:17:e5:89:04:27:1d:48:0a:cc:32:2f:96:cd:5b:
e8:6b:57:95:aa:3c:cc:47:62:8e:f3:bb:f1:a5:45:2a:4f:52:
98:74:d1:e3:02:a1:34:9f:90:ab:ec:a9:50:44:f3:a7:48:74:
38:7c:52:17:5f:a5:25:ce:50:55:e2:3f:be:e3:72:29:10:1c:
01:12:39:3d:96:28:4a:47:56:d2:2b:77:5f:43:d9:25:8e:55:
66:02:73:18:17:81:6a:d6:b2:aa:80:1d:93:37:4d:9b:c0:35:
b4:23:bf:e2:14:bd:43:bc:5b:74:29:f8:01:ec:3d:97:73:1f:
72:03:51:4a:62:32:2d:cf:cd:79:5e:bf:13:a3:f2:25:fe:82:
5c:dd:d1:d2:d0:7c:6f:07:52:7a:17:3e:df:a3:8b:27:48:e7:
76:96:e2:01:22:3d:7a:b4:29:ac:38:ea:e1:d6:21:b6:e5:e3:
bb:a2:54:8e:5e:b3:0c:4a:a1:46:9f:1d:95:1e:82:80:7b:20:
06:59:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:44:14 2026 by rpki-client