Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: V2JnWBwLEJKlVUYOmhXRSTj4gutLkG0Eh25FLJaZP7M=
Subject key identifier: 51:DA:62:D6:1D:F6:77:46:1A:FA:17:06:5A:62:1F:79:5A:E0:EF:AF
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019DA4F8C9CD5380048FBF5853F52CAF8D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 040E
Signing time: Sun 19 Apr 2026 09:01:01 +0000
Manifest this update: Sun 19 Apr 2026 09:01:01 +0000
Manifest next update: Mon 20 Apr 2026 09:01:01 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: RNBj7X3QRY6Nu4a3CDts8KPagmZrDCI0+UCwg88SW6o=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:c9:cd:53:80:04:8f:bf:58:53:f5:2c:af:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Apr 19 09:01:01 2026 GMT
Not After : Apr 20 09:01:01 2026 GMT
Subject: CN=51da62d61df677461afa17065a621f795ae0efaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:d5:f3:0b:3d:60:3f:ea:cb:13:30:4b:7f:
e3:f9:8c:3e:cc:c9:11:bd:a5:f1:32:62:92:3b:08:
1a:66:15:ab:e1:20:35:ea:4a:ce:aa:31:e8:b1:93:
ee:06:9e:7d:80:c7:d5:7e:3a:af:d6:f4:12:72:82:
ee:f7:47:2e:53:44:22:26:81:6d:f7:8c:e9:30:3a:
59:6c:da:e3:c8:23:05:6d:cb:cc:53:00:87:35:82:
cd:e5:32:13:06:cd:da:6d:83:da:19:70:bb:63:3e:
9f:96:16:35:08:c2:52:4e:08:31:44:49:97:00:fe:
61:01:eb:c1:be:93:e6:36:22:eb:dd:f7:3b:36:8c:
6a:f2:72:f6:14:05:22:50:24:a1:a9:93:70:40:68:
b4:41:4b:15:02:12:8b:25:af:f8:26:8a:16:53:e3:
8c:4e:4a:67:6e:e9:9b:ac:20:7a:2a:91:60:01:25:
6d:7e:c3:e4:1f:ea:a7:69:3f:c1:17:75:f2:2e:f9:
55:bd:62:b5:cb:2a:75:4a:79:d0:1c:b7:9b:ab:b7:
e2:08:f8:04:62:db:76:14:77:31:25:47:6c:4f:17:
9e:c3:9d:30:03:7d:b2:fc:5a:60:c1:d0:4e:44:07:
29:31:c9:92:8c:b3:df:47:ce:29:d1:1b:a4:6b:10:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DA:62:D6:1D:F6:77:46:1A:FA:17:06:5A:62:1F:79:5A:E0:EF:AF
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d5:fc:4a:e1:30:12:79:04:77:7d:da:94:99:76:de:bb:2a:
67:3e:0e:7e:36:2d:ce:d4:cb:f9:c9:0f:af:49:05:e7:55:d6:
7b:90:db:9d:bc:9b:e6:a2:0d:16:66:90:6f:dc:4e:e8:70:9b:
2c:ce:5f:54:bb:fd:ef:a9:03:6d:0a:8d:a7:d8:25:d1:d1:1a:
42:10:e8:d7:05:7a:8c:0b:0c:f0:28:9c:5b:2c:6e:96:0a:45:
35:1f:c2:aa:4b:d8:6e:0b:89:3b:b7:7c:5f:68:11:7f:35:81:
c5:7a:13:58:55:9b:91:b2:4a:46:5b:51:39:a9:b1:f1:f6:28:
39:74:f2:dd:d7:51:ac:d5:84:cb:04:46:5c:5a:f5:3f:05:1c:
87:6c:f7:36:b1:eb:5e:e9:aa:9f:f9:5e:3c:ee:b9:11:36:ce:
54:30:21:8e:25:f3:7b:72:57:6e:5d:30:d6:1b:77:13:ad:3e:
41:4b:9f:21:17:c3:01:eb:de:80:b7:86:f9:96:16:92:3f:6c:
97:ae:05:f1:a6:bb:96:5f:a0:35:e1:86:7c:e9:51:d2:0d:bb:
34:21:f0:17:23:90:c3:28:6e:9d:7b:75:e1:62:13:24:63:1e:
3b:8c:66:29:ca:5c:e2:a0:bc:77:5d:d5:aa:f3:dd:4b:56:6e:
db:cd:50:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+MnNU4AEj79YU/Usr40VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh
NzRmMzYwHhcNMjYwNDE5MDkwMTAxWhcNMjYwNDIwMDkwMTAxWjAzMTEwLwYDVQQD
Eyg1MWRhNjJkNjFkZjY3NzQ2MWFmYTE3MDY1YTYyMWY3OTVhZTBlZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtrV8ws9YD/qyxMwS3/j+Yw+zMkR
vaXxMmKSOwgaZhWr4SA16krOqjHosZPuBp59gMfVfjqv1vQScoLu90cuU0QiJoFt
94zpMDpZbNrjyCMFbcvMUwCHNYLN5TITBs3abYPaGXC7Yz6flhY1CMJSTggxREmX
AP5hAevBvpPmNiLr3fc7Noxq8nL2FAUiUCShqZNwQGi0QUsVAhKLJa/4JooWU+OM
TkpnbumbrCB6KpFgASVtfsPkH+qnaT/BF3XyLvlVvWK1yyp1SnnQHLebq7fiCPgE
Ytt2FHcxJUdsTxeew50wA32y/FpgwdBORAcpMcmSjLPfR84p0RukaxCivQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHaYtYd9ndGGvoXBlpiH3la4O+vMB8GA1UdIwQY
MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt
NmI1MjM5Nzc5ZDhhLzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh
LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9X8SuEw
EnkEd33alJl23rsqZz4OfjYtztTL+ckPr0kF51XWe5Dbnbyb5qINFmaQb9xO6HCb
LM5fVLv976kDbQqNp9gl0dEaQhDo1wV6jAsM8CicWyxulgpFNR/CqkvYbguJO7d8
X2gRfzWBxXoTWFWbkbJKRltROamx8fYoOXTy3ddRrNWEywRGXFr1PwUch2z3NrHr
Xumqn/lePO65ETbOVDAhjiXze3JXbl0w1ht3E60+QUufIRfDAevegLeG+ZYWkj9s
l64F8aa7ll+gNeGGfOlR0g27NCHwFyOQwyhunXt14WITJGMeO4xmKcpc4qC8d13V
qvPdS1Zu281Q6g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:53:22 2026 by rpki-client