Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: VDyhMvw/8ZD9B0nGhTiAAdKbiQZm2a591nNWbhgBg4E=
Subject key identifier: 0B:C6:8E:AF:1C:90:5C:E5:E1:C5:5E:21:3A:B1:85:A5:52:5C:D7:64
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019D38D3B1009D1323D34E0AD39E86B21FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 03D6
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: Rh01piAwyn4sceQyLyeyT8lgiVP7+HffzPSPyET7wLg=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b1:00:9d:13:23:d3:4e:0a:d3:9e:86:b2:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=0bc68eaf1c905ce5e1c55e213ab185a5525cd764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:63:9e:82:f7:04:2e:1b:f2:1e:74:ce:45:
88:54:82:46:16:34:3f:f3:b8:7c:76:d0:77:db:42:
3e:0f:81:04:c7:f8:13:3f:85:1b:63:82:ba:5d:9c:
82:10:d5:6a:67:b6:c1:ac:54:ad:30:b3:4e:b1:69:
ef:4d:66:6d:1c:07:52:c5:36:e5:82:99:87:96:f8:
bc:60:08:fe:a9:7c:18:31:89:23:4a:ba:8a:5c:07:
e8:9a:32:0b:35:a7:91:76:fe:24:cc:48:48:1d:75:
51:b6:34:d2:a8:66:83:6b:98:b5:42:eb:bb:e7:02:
45:52:4a:91:09:87:c2:20:db:55:2a:e3:bc:59:cd:
0c:5f:5d:be:97:b5:5a:07:76:f6:5a:a5:77:e7:3d:
02:34:32:0b:09:e7:ec:12:cc:f3:55:4c:1e:0a:06:
83:f2:36:d1:9a:dd:42:10:5b:42:dc:94:9d:d8:12:
91:c6:ce:67:72:75:70:96:b0:80:a6:0f:6e:df:49:
92:21:8f:41:1e:13:c2:f7:03:b2:26:cb:9c:9a:6b:
f0:1c:32:9c:7a:34:c8:e9:80:2e:fc:ce:64:e8:a7:
e9:82:a1:29:53:aa:aa:62:13:b0:64:c3:fd:44:57:
8f:bb:b0:c5:74:98:3a:df:9d:91:50:94:07:f7:f4:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:8E:AF:1C:90:5C:E5:E1:C5:5E:21:3A:B1:85:A5:52:5C:D7:64
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:66:11:cf:3a:b3:9f:86:36:bf:b7:87:71:9d:36:6c:e6:e3:
b0:73:b1:cd:cb:f6:68:89:c0:1f:87:79:93:01:39:c5:33:d2:
a8:44:43:b3:da:73:b8:d3:64:6b:4c:36:4b:ec:44:cf:49:10:
98:50:d8:c1:0e:1e:ea:9a:cb:9f:47:39:5e:94:27:67:ae:a1:
3c:7c:13:d5:35:e4:60:f9:94:23:fd:c8:b7:30:49:de:17:3e:
60:f5:8a:28:fd:cf:cb:cf:3f:59:aa:8b:12:6c:5e:71:e8:38:
83:79:eb:2b:19:09:dd:ac:9a:47:03:5d:27:84:f1:06:a1:1c:
a8:ec:2c:43:29:ca:f8:d4:b6:4c:e0:ad:28:63:25:d6:e6:e4:
9b:c1:00:da:e6:2f:a2:e9:ff:b4:15:b8:53:a1:dd:6e:7b:79:
88:1f:e3:29:7c:69:8a:5d:39:53:a0:f6:fa:17:16:25:d0:12:
5c:c7:db:10:0f:02:23:9c:59:cf:6e:18:65:fc:0d:a1:6e:4a:
7e:1a:07:98:b4:c5:9c:da:5f:fa:7d:2e:2a:4c:e4:4b:c8:67:
cc:7a:f7:07:4b:a0:d3:e8:9a:07:4c:b0:3b:9b:ca:0d:63:3a:
6e:c8:e1:c8:76:b9:a2:08:d0:59:95:7d:38:de:b9:6a:0b:e8:
ef:e1:a1:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0407EAnRMj004K056Gsh/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh
NzRmMzYwHhcNMjYwMzI5MDkwMTMwWhcNMjYwMzMwMDkwMTMwWjAzMTEwLwYDVQQD
EygwYmM2OGVhZjFjOTA1Y2U1ZTFjNTVlMjEzYWIxODVhNTUyNWNkNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw5jnoL3BC4b8h50zkWIVIJGFjQ/
87h8dtB320I+D4EEx/gTP4UbY4K6XZyCENVqZ7bBrFStMLNOsWnvTWZtHAdSxTbl
gpmHlvi8YAj+qXwYMYkjSrqKXAfomjILNaeRdv4kzEhIHXVRtjTSqGaDa5i1Quu7
5wJFUkqRCYfCINtVKuO8Wc0MX12+l7VaB3b2WqV35z0CNDILCefsEszzVUweCgaD
8jbRmt1CEFtC3JSd2BKRxs5ncnVwlrCApg9u30mSIY9BHhPC9wOyJsucmmvwHDKc
ejTI6YAu/M5k6KfpgqEpU6qqYhOwZMP9RFePu7DFdJg6352RUJQH9/THyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvGjq8ckFzl4cVeITqxhaVSXNdkMB8GA1UdIwQY
MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt
NmI1MjM5Nzc5ZDhhLzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh
LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWYRzzqz
n4Y2v7eHcZ02bObjsHOxzcv2aInAH4d5kwE5xTPSqERDs9pzuNNka0w2S+xEz0kQ
mFDYwQ4e6prLn0c5XpQnZ66hPHwT1TXkYPmUI/3ItzBJ3hc+YPWKKP3Py88/WaqL
Emxeceg4g3nrKxkJ3ayaRwNdJ4TxBqEcqOwsQynK+NS2TOCtKGMl1ubkm8EA2uYv
oun/tBW4U6Hdbnt5iB/jKXxpil05U6D2+hcWJdASXMfbEA8CI5xZz24YZfwNoW5K
fhoHmLTFnNpf+n0uKkzkS8hnzHr3B0ug0+iaB0ywO5vKDWM6bsjhyHa5ogjQWZV9
ON65agvo7+GhZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:14 2026 by rpki-client