Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: EMO3MfnEoPav6k/E4oJlwd7NOuCHqU009E8ZjADKgJY=
Subject key identifier: 6A:54:D5:35:30:99:D5:F6:E6:43:98:98:1F:F8:97:77:28:E3:55:B2
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 01A03F3BAD085B479C97A07DC8B59CD1E19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 0567
Signing time: Wed 26 Aug 2026 18:01:10 +0000
Manifest this update: Wed 26 Aug 2026 18:01:10 +0000
Manifest next update: Thu 27 Aug 2026 18:01:10 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: fRaShm9WtJK0xdacQa86l7jjhnfjaLiialI07yIELkM=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:ad:08:5b:47:9c:97:a0:7d:c8:b5:9c:d1:e1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Aug 26 18:01:10 2026 GMT
Not After : Aug 27 18:01:10 2026 GMT
Subject: CN=6a54d5353099d5f6e64398981ff8977728e355b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:09:9b:b5:4a:04:c9:16:61:df:c8:37:7c:f7:
3f:ae:b3:97:39:1b:6a:0a:e3:cb:4f:3e:82:ad:f1:
ad:5e:8d:4b:d3:ab:72:44:1f:4c:b8:51:3a:35:a0:
ed:c9:38:82:4a:a3:3e:5c:65:4f:dc:b2:2c:80:0b:
22:0a:f0:f6:ed:80:97:35:49:a9:fa:62:08:4a:1d:
c0:24:84:e1:64:1d:47:b9:2a:77:5a:0f:40:cf:0a:
de:93:56:05:f1:0d:a0:77:98:4d:96:2d:6d:5c:85:
7d:51:2e:4b:a6:af:f2:fe:1a:ff:22:fc:97:a5:57:
a2:02:63:b3:f1:81:90:13:fa:df:89:26:da:f3:37:
77:45:82:9b:fa:7b:88:87:f8:aa:00:fa:9c:7d:62:
a5:ca:4f:b9:a4:5b:c0:8e:f3:30:13:fa:bc:01:e5:
69:4e:51:0b:e2:49:14:e2:77:18:90:a0:04:87:34:
ad:09:41:82:26:b3:67:a6:9a:dc:5d:16:d0:0d:e8:
cb:dc:c5:6f:fa:2e:07:cf:46:5c:76:8b:6d:44:ad:
ae:81:c6:3c:ef:f9:01:2f:29:f4:39:38:3c:9b:b3:
4d:c4:8a:2f:61:26:18:64:2c:85:d8:d8:0b:20:c2:
82:0d:97:e3:33:19:f4:88:24:97:d5:4d:50:34:fd:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:D5:35:30:99:D5:F6:E6:43:98:98:1F:F8:97:77:28:E3:55:B2
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cf:74:91:3b:d8:b5:ed:e7:65:b9:a2:c1:7a:d0:77:00:fd:
8b:b0:83:b9:d6:9b:91:e4:0c:ea:1e:76:96:1f:2f:61:a9:12:
14:38:f3:e3:fe:03:28:e1:57:57:3f:bf:21:c7:7b:3f:e0:c4:
01:f7:e5:ea:de:1f:f6:bc:a8:d1:38:bf:58:a7:df:76:00:87:
a5:e3:69:f6:78:2f:23:1e:ae:ba:07:25:97:69:da:ec:c8:a8:
32:6a:ff:9c:fd:9d:4f:20:b5:a9:d2:1e:51:b3:79:b3:ab:3b:
81:a6:22:01:24:87:1a:f7:d9:5d:2f:e6:df:1d:b0:a7:46:24:
15:3f:29:42:f2:f0:48:43:11:01:47:3b:41:9a:2a:b6:f3:b6:
2c:b5:f5:c8:6a:a3:fd:cc:a8:cf:aa:ea:2a:e4:e1:a3:be:a9:
78:a1:64:2b:f1:bb:3b:d8:bd:10:f0:3a:7d:55:ec:14:b3:7b:
9f:a8:bf:55:30:72:e1:a5:15:0c:c9:a7:00:eb:ac:3e:50:63:
63:35:90:50:67:df:5c:c4:39:7b:bb:90:ea:74:ab:0d:61:7c:
47:2b:67:2c:57:0a:be:d6:61:db:81:a5:f5:a2:29:5c:e9:32:
6b:0d:49:c5:1f:02:39:e4:bc:80:40:63:92:e9:8f:62:a5:fd:
cf:75:cb:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O60IW0ecl6B9yLWc0eGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh
NzRmMzYwHhcNMjYwODI2MTgwMTEwWhcNMjYwODI3MTgwMTEwWjAzMTEwLwYDVQQD
Eyg2YTU0ZDUzNTMwOTlkNWY2ZTY0Mzk4OTgxZmY4OTc3NzI4ZTM1NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AmbtUoEyRZh38g3fPc/rrOXORtq
CuPLTz6CrfGtXo1L06tyRB9MuFE6NaDtyTiCSqM+XGVP3LIsgAsiCvD27YCXNUmp
+mIISh3AJIThZB1HuSp3Wg9Azwrek1YF8Q2gd5hNli1tXIV9US5Lpq/y/hr/IvyX
pVeiAmOz8YGQE/rfiSba8zd3RYKb+nuIh/iqAPqcfWKlyk+5pFvAjvMwE/q8AeVp
TlEL4kkU4ncYkKAEhzStCUGCJrNnpprcXRbQDejL3MVv+i4Hz0ZcdottRK2ugcY8
7/kBLyn0OTg8m7NNxIovYSYYZCyF2NgLIMKCDZfjMxn0iCSX1U1QNP37gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpU1TUwmdX25kOYmB/4l3co41WyMB8GA1UdIwQY
MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt
NmI1MjM5Nzc5ZDhhLzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh
LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg890kTvY
te3nZbmiwXrQdwD9i7CDudabkeQM6h52lh8vYakSFDjz4/4DKOFXVz+/Icd7P+DE
Affl6t4f9ryo0Ti/WKffdgCHpeNp9ngvIx6uugcll2na7MioMmr/nP2dTyC1qdIe
UbN5s6s7gaYiASSHGvfZXS/m3x2wp0YkFT8pQvLwSEMRAUc7QZoqtvO2LLX1yGqj
/cyoz6rqKuTho76peKFkK/G7O9i9EPA6fVXsFLN7n6i/VTBy4aUVDMmnAOusPlBj
YzWQUGffXMQ5e7uQ6nSrDWF8RytnLFcKvtZh24Gl9aIpXOkyaw1JxR8COeS8gEBj
kumPYqX9z3XLig==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:34 2026 by rpki-client