Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: FcCqWfkF4/ljRuwGaAxXeHbLWK6PxVt5VXD9th5ooUk=
Subject key identifier: 49:95:CC:7C:D8:86:41:0B:A9:BF:79:80:7B:F4:64:87:96:37:2F:70
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019E284BA5C0B853B3920900602A4F9B5B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 0452
Signing time: Thu 14 May 2026 21:01:46 +0000
Manifest this update: Thu 14 May 2026 21:01:46 +0000
Manifest next update: Fri 15 May 2026 21:01:46 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: OWoXlEJ7S+Vr0T3pyj+rsr4sS2jmPrOmNpvBxV1NKfY=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:a5:c0:b8:53:b3:92:09:00:60:2a:4f:9b:5b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: May 14 21:01:46 2026 GMT
Not After : May 15 21:01:46 2026 GMT
Subject: CN=4995cc7cd886410ba9bf79807bf4648796372f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:aa:c7:b5:55:5c:80:14:e7:0d:f6:63:61:
38:38:fd:7e:f8:41:be:83:46:e3:b9:b9:34:68:a4:
8a:21:b0:fe:f5:95:16:2b:a1:8a:30:3b:11:0d:80:
34:6b:46:4a:17:3a:2d:50:73:d5:41:bc:4b:e8:56:
56:bd:95:38:14:6e:4f:d8:97:7c:dd:ae:a9:13:5e:
80:f6:35:de:b5:9e:62:fe:a1:9c:38:87:30:3e:c7:
88:f2:82:f7:2b:1f:f1:27:a5:0a:22:eb:3f:87:e5:
52:c9:1a:7c:3d:df:33:34:76:81:c3:8f:1d:3a:f8:
1b:86:3d:7f:f8:58:3a:13:13:49:6d:5e:62:fd:d6:
55:24:4e:df:fb:4d:0c:55:1d:95:c3:07:a6:5f:06:
64:23:fa:9d:14:54:0a:d5:c4:a6:1f:7a:cc:be:75:
b7:3f:1b:8a:8b:36:0b:e2:54:41:d5:90:2f:31:46:
b7:cd:19:74:24:1d:f0:27:60:f3:d8:03:5c:88:22:
ee:1d:dd:3b:04:71:60:4e:a7:92:f1:4a:aa:ff:33:
aa:1d:e3:ca:ef:c9:67:6f:f2:41:7f:c8:10:4c:70:
18:e7:ed:c3:6c:8a:e8:98:bb:4d:99:fc:00:c0:e9:
23:9e:64:46:b0:5d:9f:15:ac:97:fc:ad:e5:78:06:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:CC:7C:D8:86:41:0B:A9:BF:79:80:7B:F4:64:87:96:37:2F:70
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ae:09:a9:24:d0:34:d6:c1:59:69:05:14:16:76:eb:bb:fc:
50:3a:2e:f6:49:d1:b8:d0:46:6f:69:a6:99:fd:13:1d:4a:2b:
b2:08:e3:01:d9:2d:81:03:5e:8f:8e:a3:80:75:c2:ce:8f:6c:
67:d4:b5:8f:21:d4:93:b0:c6:be:91:9b:72:02:24:9b:4d:e8:
02:9f:dc:53:d0:a4:21:55:5f:f8:7e:16:47:28:04:84:05:89:
17:9e:6a:4b:79:32:d4:42:8f:f8:12:4d:67:8d:39:9f:5a:02:
45:bb:73:d5:d6:d7:dc:e2:74:2f:0d:84:29:0d:7f:79:6a:9e:
4d:40:e0:7c:f4:4e:c0:8c:da:a6:6f:04:10:ea:79:48:da:8a:
be:b1:86:8f:34:93:2d:a3:a5:e9:fd:b0:8e:18:40:e8:52:d3:
a8:e7:ef:a9:b1:04:fd:54:80:4f:13:de:26:6b:a2:5b:f1:61:
cb:2d:d8:cc:1a:84:50:b9:7b:9d:02:b6:13:a7:56:15:0e:30:
f7:cb:2f:21:65:ed:a8:80:8f:d7:74:b1:2b:79:86:f9:7f:77:
c9:96:63:f8:55:7d:68:95:2e:69:41:b3:a2:c0:5f:20:53:26:
16:ca:ef:d5:ab:ac:af:48:1d:98:ed:26:f8:3f:8c:82:e2:29:
f2:19:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:53 2026 by rpki-client