Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: n9WVSsK0UyrIVueWqjtIQAAe22c0EfCaMZss8rSrRfk=
Subject key identifier: 42:13:88:8A:EB:CE:54:1F:80:6E:5E:66:90:A7:F5:EA:07:DD:7D:44
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019F11F7D3F67216C333979A212AAF010CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 04CB
Signing time: Mon 29 Jun 2026 06:01:22 +0000
Manifest this update: Mon 29 Jun 2026 06:01:22 +0000
Manifest next update: Tue 30 Jun 2026 06:01:22 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: 7pN6i/ijox+K3udbt03NuzNTpoW98fs1zce695XOnDU=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:d3:f6:72:16:c3:33:97:9a:21:2a:af:01:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Jun 29 06:01:22 2026 GMT
Not After : Jun 30 06:01:22 2026 GMT
Subject: CN=4213888aebce541f806e5e6690a7f5ea07dd7d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:59:ef:30:a4:44:15:39:41:a4:29:f8:9c:
32:a7:84:67:01:86:6f:8e:43:c9:bd:48:73:3f:96:
9d:8b:76:36:39:5c:f4:bf:0f:db:8c:93:a3:3a:3c:
9c:1c:23:36:bd:13:6e:18:db:07:12:08:cb:df:dd:
b1:e2:e2:58:b0:11:c2:ea:f7:1b:03:21:80:f4:e7:
23:b5:2f:26:07:91:33:a0:7e:33:21:21:01:d6:1e:
da:db:ff:96:7d:05:86:78:98:9c:49:55:58:5e:3c:
5e:b5:7a:67:1a:9f:72:dc:90:6e:d7:ca:a4:61:63:
f5:15:ca:c3:d2:d5:b9:15:3b:4a:68:bf:4e:0e:a0:
6a:d0:52:36:f1:c4:28:ac:58:04:49:dd:4e:c1:08:
95:43:3e:e7:d0:49:18:9f:f5:77:7d:55:1e:88:62:
59:e9:76:39:85:3d:6a:15:6b:24:38:2b:ab:bf:8b:
c3:54:6a:12:53:18:f0:26:8a:63:6c:af:32:14:b2:
cc:b8:43:32:4c:01:71:21:f6:5a:47:f6:14:d5:d9:
be:24:33:1f:42:fe:e8:ce:29:c7:21:49:a7:39:db:
cd:3a:a2:0c:60:25:42:e8:80:94:95:b7:f9:85:1c:
8a:78:63:56:82:2b:ef:4f:54:98:f7:52:fa:79:a8:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:13:88:8A:EB:CE:54:1F:80:6E:5E:66:90:A7:F5:EA:07:DD:7D:44
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:15:e8:af:4d:ef:d7:bd:48:58:fe:ef:23:04:25:69:d0:81:
87:ee:eb:d5:fd:ad:85:8d:b7:a1:bb:36:20:9a:0d:91:a3:9e:
40:a8:6b:2e:2d:f4:38:f9:e3:d1:91:b9:a1:ba:c6:f2:12:0b:
f7:78:71:42:ae:db:e7:fb:99:f6:1e:0a:2e:66:38:6f:6f:3c:
5a:24:ef:e5:0a:33:14:1b:c6:25:9e:3d:a6:cd:67:75:e6:3b:
f2:39:57:56:c6:61:ab:20:17:31:94:a2:bf:ef:41:f0:e5:77:
fa:42:d1:c1:4b:b5:fd:6a:6e:d6:5f:08:96:90:3f:bd:53:e6:
fd:22:e2:ec:cf:64:5c:6a:5b:59:e8:21:0f:89:63:4a:57:78:
20:2d:a5:aa:88:c0:f2:f2:a1:3c:ee:71:fb:81:1b:9d:0c:39:
cd:f1:50:3f:84:ec:d1:a2:c3:38:14:e7:9d:44:e3:6e:b8:2d:
92:6c:f6:7e:06:56:51:44:bd:13:5b:c3:0f:95:68:d8:d2:14:
d3:50:0e:c0:9f:ad:c9:9b:0d:08:da:36:85:4e:c7:ad:48:08:
ca:36:ef:b2:bb:e5:0c:74:fb:6a:ae:fc:6d:95:6d:d6:dc:67:
91:5c:eb:97:cd:ac:67:ef:ea:33:c7:52:e4:eb:f3:2c:de:76:
c4:f6:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:42 2026 by rpki-client