Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: 9s8JUHkEvOOA11qYJcZXXkLzYVriKWLx8y1ElCc2H9o=
Subject key identifier: BE:42:31:3B:86:09:95:06:D0:A9:EB:B8:E3:7C:63:93:AC:88:53:66
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0126
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 58
Signing time: Wed 13 May 2026 12:23:54 +0000
Manifest this update: Wed 13 May 2026 12:23:54 +0000
Manifest next update: Thu 13 Aug 2026 12:23:54 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: dHf70fzbRlzkW9oi7RSyf6ySxiqA196LbNT15mQM0EA=)
2: ripe-ncc-ta.crl (hash: 3RA2MPDt3YAT6/WdbceVD15MqAIavNiRL7PWEfjdBF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: May 13 12:23:54 2026 GMT
Not After : Aug 13 12:23:54 2026 GMT
Subject: CN=be42313b86099506d0a9ebb8e37c6393ac885366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:c6:1d:ec:6b:c2:83:1c:7f:14:5c:15:29:
ff:e3:b0:29:31:d5:cd:fb:9a:e2:be:f4:a6:4a:aa:
e7:1f:09:8d:2c:da:4c:05:79:e5:ce:ee:5e:8f:e4:
11:73:35:d8:3b:fc:f4:47:ac:64:a0:40:29:2e:e1:
6f:2b:83:6a:6b:4b:c9:c4:7a:31:d1:7d:cf:3f:32:
69:c6:c0:7b:9a:56:bb:38:c5:4a:88:65:59:04:bf:
42:94:a5:7a:f8:45:09:4f:17:b2:17:2a:5c:9a:d6:
9a:d5:e6:72:dc:76:36:0f:db:cc:f7:e8:e6:7b:9e:
81:7b:f2:7e:23:b6:bd:2e:0e:25:11:29:c0:69:50:
83:ef:65:21:25:47:a0:0e:bc:73:dd:31:c6:90:c5:
94:2f:c4:79:b5:5f:02:b1:b3:9b:3c:c1:8e:a8:5b:
dd:18:e1:5d:c9:e8:d2:27:31:9e:a9:26:c2:d0:b2:
da:48:42:85:cc:2e:2c:95:53:34:a4:dc:96:c0:23:
fa:06:6a:ee:9c:91:d1:ea:0f:ff:9f:c4:17:f3:e4:
47:d8:0c:8e:f4:2c:36:a7:69:bf:fa:2f:7e:07:bf:
23:4e:40:b5:a4:45:9f:08:06:e0:e6:9d:9d:fa:3d:
43:aa:44:8a:7a:21:91:cb:b2:b5:84:99:fc:7f:68:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:31:3B:86:09:95:06:D0:A9:EB:B8:E3:7C:63:93:AC:88:53:66
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c5:62:52:f7:ff:fc:62:3c:d4:c9:2f:78:89:a9:5f:fc:fc:
6c:a8:55:e0:58:12:c8:38:ca:c9:ed:d4:2d:14:ba:d2:ac:36:
d3:17:52:69:7b:be:fc:b9:15:63:0d:bc:fc:1d:e5:f5:f8:ff:
37:32:68:5f:42:a4:57:2b:39:96:41:91:68:0f:03:66:0a:4a:
4c:d9:eb:b0:36:d2:55:79:a3:f7:6c:5c:8c:77:eb:95:73:b9:
88:41:a7:a2:85:01:db:17:70:00:64:75:51:f9:1a:ee:26:38:
e0:7e:ee:64:4f:bc:a3:8c:74:3b:ea:60:fc:ba:7b:79:e8:f1:
fc:61:69:f7:aa:1d:01:5c:79:ad:26:54:40:64:53:fd:d7:88:
95:16:c0:92:99:11:5e:df:fc:79:11:21:6f:e6:ee:95:1b:a7:
63:31:2a:bd:04:d2:18:ac:67:0b:1c:84:c9:4b:cd:62:d1:8b:
ee:a3:1f:c8:fd:3e:32:38:2d:d2:35:a3:73:89:3e:fc:17:0f:
df:20:41:b5:0e:5a:73:ea:36:2d:66:df:fa:07:05:8c:d1:11:
14:d4:eb:ff:9b:59:20:e4:3d:ff:90:b0:28:8c:23:33:9f:57:
e9:26:ad:5d:1e:87:0b:78:e2:a7:8d:20:1a:a7:81:d6:f3:b5:
c0:cb:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:26:16 2026 by rpki-client