Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: /4DMVHD7pWBdLJPX1Up9KsAcpppSnunpl+vlrBZzA9Y=
Subject key identifier: D0:19:E4:AE:31:C7:03:EA:B3:EE:41:BF:4A:F8:BD:CD:E2:E8:AE:56
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 01A0BCC2406221752D6031250571B8228066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 05A8
Signing time: Sun 20 Sep 2026 03:00:42 +0000
Manifest this update: Sun 20 Sep 2026 03:00:42 +0000
Manifest next update: Mon 21 Sep 2026 03:00:42 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: i9Ub9pV1os/rz05jfpg1P+w1NoSh0v8O0PkuPCadmpU=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:40:62:21:75:2d:60:31:25:05:71:b8:22:80:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Sep 20 03:00:42 2026 GMT
Not After : Sep 21 03:00:42 2026 GMT
Subject: CN=d019e4ae31c703eab3ee41bf4af8bdcde2e8ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:b6:2a:89:b0:d7:cd:8b:7f:35:0d:de:18:
c6:ad:2c:ad:56:74:3c:34:e4:98:49:ac:d8:f0:7d:
05:e4:13:d9:0e:8c:fa:85:92:8f:0b:0f:28:38:85:
d1:5b:09:a0:26:a7:02:a9:59:d2:16:30:f4:84:3f:
f8:d3:33:99:2c:59:23:d1:1e:76:f8:f3:4e:0e:f5:
81:ea:06:b0:15:af:f4:0e:59:8c:52:a9:9c:6e:c2:
0b:b7:52:9e:c3:80:29:b6:2f:80:81:e4:2d:d1:fa:
2a:c1:bb:c9:0b:df:6c:9f:92:51:b1:62:87:c3:41:
18:00:09:c0:5a:66:b2:74:62:ed:66:59:0d:66:7d:
8b:64:87:c3:2c:37:d4:67:20:5a:1b:45:c9:1b:ae:
9e:2a:2d:99:d0:cb:77:64:2c:4d:cc:d6:87:c8:b6:
ed:9b:4b:1b:fb:de:8d:89:09:5b:51:b8:32:c0:7c:
f9:43:8e:cf:44:a1:db:3a:a9:6c:d8:a3:48:67:15:
7f:0c:53:39:8d:62:1f:be:38:2c:61:df:ad:d8:da:
c7:ef:99:88:42:57:92:30:33:95:e7:fe:87:ae:49:
62:9e:ed:66:b8:df:42:31:b8:e8:5d:b6:c8:cc:29:
10:27:df:3d:a3:d7:54:2c:ab:54:cf:1d:fc:06:a8:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:E4:AE:31:C7:03:EA:B3:EE:41:BF:4A:F8:BD:CD:E2:E8:AE:56
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1c:e3:b7:f1:be:b1:e4:ee:06:7e:70:fa:84:cb:e3:91:48:
a5:6f:65:2c:74:3d:f2:71:43:7c:71:8a:e0:d3:35:69:f3:e1:
4f:af:c3:f3:c8:65:6a:12:bb:6c:99:df:54:4f:7b:6f:a5:6e:
2a:a4:03:63:60:55:81:56:b8:f7:6c:be:51:3c:8d:59:3f:5c:
b4:d0:ff:4b:68:8c:74:aa:f6:dd:c7:4f:c6:c6:bc:3c:8e:d1:
25:77:6a:90:63:79:43:fe:83:90:fa:e8:e3:ef:e7:50:7e:7b:
2f:06:cb:48:7e:83:9c:6b:62:64:f8:6b:dd:d9:bb:c5:d3:55:
59:aa:c7:8c:4d:ac:46:52:a5:98:30:8d:89:41:b1:d3:0b:ce:
92:dc:d7:57:86:82:3e:26:cd:3a:45:1a:c3:5a:9e:b5:dd:10:
4f:b2:d1:8b:b9:3a:15:f9:40:98:ce:4d:a0:da:ed:86:19:bf:
46:19:ec:5a:7a:a5:17:73:d9:d0:c1:ef:88:f6:fe:5b:45:6b:
ec:f7:3a:81:6a:17:8b:d2:cd:e3:a1:1f:a6:03:d3:94:81:39:
d5:aa:13:6b:da:25:18:5d:ba:05:ea:61:93:7b:e2:76:cb:e4:
65:87:58:a9:8f:ac:f9:26:f4:59:30:f1:ba:c1:d5:ee:ad:e7:
9f:16:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:59:38 2026 by rpki-client