Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: LleOAcRX6sm5x/q5X6GBftcPD7+zN9YXRYvhXDAYFN0=
Subject key identifier: F5:85:2B:A1:20:83:85:68:AC:24:DC:26:30:BF:6A:1D:94:10:FB:E6
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019EC2C9F4DB6191397DB1E4FA53B435FB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 04A2
Signing time: Sat 13 Jun 2026 21:01:15 +0000
Manifest this update: Sat 13 Jun 2026 21:01:15 +0000
Manifest next update: Sun 14 Jun 2026 21:01:15 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: uF3nizgcv8mRcvLWPpvLuKGDMWed+MuJlT5T4pCXo0g=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:f4:db:61:91:39:7d:b1:e4:fa:53:b4:35:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Jun 13 21:01:15 2026 GMT
Not After : Jun 14 21:01:15 2026 GMT
Subject: CN=f5852ba120838568ac24dc2630bf6a1d9410fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:2d:bf:a2:8e:85:14:2a:0a:70:11:44:36:
7c:04:0e:ee:26:5c:03:3a:c5:3e:79:d4:b8:fc:1e:
76:c4:24:14:c4:9d:05:23:29:27:bc:f0:60:56:a5:
dd:e6:40:44:eb:14:65:9f:ec:23:8e:c7:67:80:06:
d1:c7:14:ba:e0:01:97:15:28:e6:c9:25:7f:13:48:
0f:c8:3a:9c:b7:f9:fe:21:81:33:da:9a:12:fa:75:
80:e4:cc:7f:24:4b:4c:ca:e5:ae:f4:e1:93:59:94:
db:01:24:8f:f3:65:bf:bf:8c:fb:df:bb:88:53:58:
ee:f7:9a:13:0b:ef:ea:13:40:21:f5:32:19:f6:78:
83:19:6d:cb:b0:4f:2d:9b:47:f8:84:88:ec:11:b3:
d2:a0:cb:77:7c:af:2e:98:f4:1f:0b:2a:b6:a4:eb:
a3:01:ba:50:04:1d:8e:00:8a:a0:9b:af:2b:7a:b7:
af:a6:ed:37:ff:5e:ff:2c:fa:3c:2a:8d:e4:3c:23:
73:3e:61:d9:42:bc:71:7d:c0:3d:15:32:bd:26:8d:
a5:b2:16:d0:4d:4b:be:54:72:bf:2c:c6:98:d2:81:
f9:37:0d:07:84:3a:27:2e:63:43:2c:a0:8b:f4:8f:
57:67:b9:b0:09:54:b3:4e:ee:eb:ab:49:94:93:99:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:85:2B:A1:20:83:85:68:AC:24:DC:26:30:BF:6A:1D:94:10:FB:E6
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:08:dc:c1:7c:75:a2:49:65:cb:33:35:29:ee:0a:1b:cd:51:
47:72:7a:4a:4e:ce:d7:b7:61:b6:ca:3e:e9:da:df:38:f9:70:
cb:db:bf:1c:21:f9:d0:31:0a:52:d5:55:d8:3f:ca:58:66:a1:
c8:e2:f2:a7:df:04:92:94:02:57:1c:a8:6c:d2:79:20:54:60:
ab:00:09:32:52:c0:01:5b:73:da:fc:09:07:ca:1f:9c:88:6c:
7f:81:a2:80:4a:d5:08:b5:a4:6d:11:db:a6:03:22:9c:39:38:
ae:ff:d0:d3:ad:09:8b:8e:3d:ff:14:ab:7b:42:b0:06:1e:85:
fd:44:7f:41:73:58:a6:39:6d:20:e4:16:23:fb:dd:91:32:ef:
84:6f:cd:63:74:36:a2:0f:b4:19:4f:fb:f9:95:39:30:82:18:
a5:fa:6b:ed:05:05:73:be:d1:d7:58:10:66:dc:a8:a9:81:13:
67:2a:e4:06:fa:57:5a:fe:51:ef:ec:f4:e8:ef:74:26:e7:5a:
53:8e:69:a2:78:0d:ec:37:94:9a:df:82:b1:f9:72:f2:38:0e:
92:78:05:b4:ea:9c:37:76:ee:94:fa:c5:57:27:d2:6f:4e:ad:
af:b2:c6:02:e1:9f:9c:73:c5:fb:30:36:5c:3a:b5:6b:4f:cb:
d2:56:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:35 2026 by rpki-client