Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: uMFZzQubDcbgkNka+W1jG/w2JcSsLX8f4XgK6N+pt5o=
Subject key identifier: 60:02:59:83:60:96:FD:2E:1C:04:0F:B3:99:76:5B:A8:D7:08:B0:84
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019CABD97952D27EE6030EABC8AA263E026D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 038D
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: hMaMVtWVnfk9XOvLUrPySLzN7bTA6ZbRuji84Lrrq5A=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:79:52:d2:7e:e6:03:0e:ab:c8:aa:26:3e:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=600259836096fd2e1c040fb399765ba8d708b084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:6f:9d:cc:7b:89:77:7d:d2:1b:bb:1f:a7:
f5:31:6e:6c:22:77:b3:eb:30:47:5f:29:4b:fe:14:
59:9a:54:cc:89:af:ba:3b:57:ba:fe:73:c8:81:26:
8e:6e:3f:1a:e6:7a:a6:6d:ab:c3:97:a6:61:e4:b5:
be:df:56:2d:b6:01:b0:85:62:5e:93:9f:99:17:eb:
85:73:48:88:ee:f9:dc:e9:11:26:bd:56:88:8f:40:
d0:60:6d:97:7c:c9:50:7e:d6:81:be:4c:93:8f:9b:
bd:ed:2e:e6:2a:7d:06:a4:72:74:a6:aa:8e:03:bf:
77:d0:ae:14:e4:ed:e6:5a:78:80:83:40:dc:13:65:
3d:ec:1c:db:e8:9e:25:8d:72:a3:67:6c:48:97:bb:
7f:c9:7a:20:4f:21:61:15:3c:66:2c:e1:01:91:b4:
7d:bd:c4:12:29:12:af:92:78:b6:53:50:cb:b8:0a:
14:f0:ec:38:66:b4:40:54:ec:43:c5:95:ee:62:c1:
61:65:cf:89:a8:51:3f:39:07:a1:0b:f6:32:33:24:
45:09:6d:d4:71:f8:99:74:dd:98:e9:f4:84:ce:75:
e6:67:9c:a5:78:68:ab:98:0f:81:43:94:f6:6f:da:
ce:81:7f:24:60:31:c4:11:0f:33:b5:9b:d4:34:88:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:59:83:60:96:FD:2E:1C:04:0F:B3:99:76:5B:A8:D7:08:B0:84
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bf:fa:34:89:01:c6:ce:37:9f:1f:4b:53:ef:a3:76:fa:d7:
db:de:77:77:f4:cd:49:29:1b:85:b9:b3:9e:a9:8d:34:e2:99:
fc:c1:90:dc:74:22:9f:49:15:99:7e:3b:e2:a6:2e:b2:a4:73:
72:f2:1c:e8:ae:70:3a:2e:13:8a:10:9f:74:02:45:05:91:bf:
07:7a:63:1a:fb:5d:19:f6:d0:a7:df:14:b3:18:96:7e:fc:0a:
f3:44:16:25:5e:3a:d7:b3:3b:0c:16:ac:c6:36:0b:87:1a:6f:
f3:01:59:42:89:44:3b:b8:b6:1d:cb:ca:6d:d7:32:8c:2a:a9:
de:4f:dc:de:10:d7:05:4d:f7:a3:55:2e:31:5a:0d:41:09:02:
a6:8d:bb:57:c2:d1:22:19:ff:9c:ee:0c:e8:87:fe:99:f3:b9:
2c:b7:da:f3:59:d6:5d:49:72:13:ac:c2:e5:d6:79:34:12:6e:
9d:73:07:7f:ac:99:f8:68:46:2b:76:b6:2e:e5:60:04:9f:93:
ce:ef:18:a4:cd:12:79:be:73:67:7b:ca:ea:f3:a4:ac:f7:c7:
77:6c:ac:76:9b:12:86:77:f5:1d:da:69:3e:e0:c8:c5:15:9c:
e8:94:06:9d:cd:47:ae:97:e9:75:78:54:03:e0:41:07:9a:55:
5f:ee:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:45 2026 by rpki-client