Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: FTEddtP4nZx+VzzGohEoNrM9d4Z0+++f6T07LgKMN3I=
Subject key identifier: CC:BD:77:CE:6F:BE:CB:FF:AF:91:6F:11:FF:1E:11:6D:20:E5:DD:0B
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019CED82E8F4DB8CBD5536E1D74740FE22FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 03AF
Signing time: Sat 14 Mar 2026 18:01:45 +0000
Manifest this update: Sat 14 Mar 2026 18:01:45 +0000
Manifest next update: Sun 15 Mar 2026 18:01:45 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: evVErWRtbpNoqaJt0QZVoWg4Bx66EJUtCu+TUaFmgNw=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:82:e8:f4:db:8c:bd:55:36:e1:d7:47:40:fe:22:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Mar 14 18:01:45 2026 GMT
Not After : Mar 15 18:01:45 2026 GMT
Subject: CN=ccbd77ce6fbecbffaf916f11ff1e116d20e5dd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:78:cf:38:55:cb:ba:0a:a5:e7:ff:1f:fc:
77:8a:81:7e:25:ef:23:40:89:fe:dc:5d:cf:01:17:
46:52:4e:a1:a3:22:a2:7d:43:3a:6c:04:4c:04:22:
dd:d7:d3:ff:4b:66:7a:bc:2f:e6:bb:8e:97:12:eb:
82:95:17:57:01:71:6b:e8:d6:51:e3:51:25:6a:d6:
1d:8a:26:6b:33:fb:dd:c6:a6:ed:28:11:5f:29:9e:
67:ba:c0:3f:86:fa:56:30:1f:5f:8e:79:31:d7:5a:
0d:3e:30:ef:85:e3:29:f9:b8:87:6b:71:08:3e:e0:
75:9b:7c:74:21:2d:a5:3a:cb:b3:b2:ff:c7:87:ee:
13:01:e6:e7:00:f4:27:df:c6:6d:1e:5a:d0:fd:a8:
26:45:51:77:2a:06:d4:a3:89:31:eb:6b:47:59:7d:
c4:bf:a2:14:29:64:33:97:e1:96:5b:ca:51:60:e6:
47:f0:57:61:3d:19:44:0e:5f:70:5d:2d:c7:cf:6a:
32:f5:a2:0c:ad:fc:66:63:7d:57:0a:f2:e3:43:4c:
5e:c6:10:67:72:b5:c9:b6:84:d8:b6:52:a2:bc:cc:
10:25:24:d3:1c:86:82:92:db:69:b2:94:1c:83:09:
41:1c:4a:12:c1:e6:f7:bd:4d:b5:5c:50:a5:6f:ae:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:77:CE:6F:BE:CB:FF:AF:91:6F:11:FF:1E:11:6D:20:E5:DD:0B
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5d:ac:39:1f:89:59:67:ae:0d:3c:5e:fa:19:05:08:d1:38:
8c:5b:9e:c4:96:9b:01:f4:70:d6:22:e5:67:7a:85:f1:df:a4:
61:7c:bb:86:4f:0c:60:1d:11:69:25:44:af:3a:73:5c:18:1b:
9b:fb:c8:38:4d:c8:41:a8:79:f2:18:fb:32:1b:d9:67:d3:b3:
74:19:14:49:11:05:ab:1a:a0:59:b6:54:af:f8:7f:b3:91:1b:
38:83:c6:c1:32:55:92:78:f4:f6:f3:c3:45:31:1c:50:b0:36:
5c:5f:88:1c:df:30:63:83:1b:73:7f:82:37:01:a2:af:31:7a:
2a:e4:5d:ff:f6:f3:42:b6:e4:76:c6:c7:bb:ea:7b:5e:ed:49:
0c:e7:e3:f1:8e:c3:5c:03:2e:c1:12:a9:81:a4:57:f1:0e:8c:
66:74:53:64:d3:a0:d5:44:3b:75:73:97:b5:ac:f5:e6:99:46:
d0:a9:1f:ae:c3:cd:3d:7f:8e:53:ea:55:33:1b:8b:07:38:6a:
b2:10:ab:85:8c:0a:c9:68:4b:14:7a:bc:58:0e:bf:6d:03:9c:
c0:06:0f:3d:91:ff:78:50:f2:37:3a:fb:d4:66:52:ff:3a:bc:
b9:b7:79:1d:1a:89:93:6a:10:4d:5c:b1:c2:c1:69:80:b5:c4:
78:01:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:42:29 2026 by rpki-client