Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: zyF1b1HunpcWMbPaEnZ4OjHliY/RIbS5OSUbap/w7IA=
Subject key identifier: 1A:5B:03:72:D0:95:4B:66:7E:0D:E2:89:E5:DC:30:28:1C:39:F9:5C
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019D27729FF722C1DC5D1ED340D210C42B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 03CD
Signing time: Thu 26 Mar 2026 00:01:56 +0000
Manifest this update: Thu 26 Mar 2026 00:01:56 +0000
Manifest next update: Fri 27 Mar 2026 00:01:56 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: 9zSHGnhf1kgWtKURc9P2JtUgc2WsPLsjUQueB57FBT4=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:9f:f7:22:c1:dc:5d:1e:d3:40:d2:10:c4:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Mar 26 00:01:56 2026 GMT
Not After : Mar 27 00:01:56 2026 GMT
Subject: CN=1a5b0372d0954b667e0de289e5dc30281c39f95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:f1:f0:f4:35:0e:33:b4:64:83:ce:cc:c3:
be:18:42:2c:d1:36:7b:d0:b7:27:8f:d6:3d:66:8c:
cb:63:6e:3c:b6:01:ef:85:37:07:ff:6e:3d:07:27:
6a:98:71:c4:0b:ae:b9:d8:76:09:73:13:1f:1f:e8:
ca:4c:a8:87:3d:c1:a3:8e:cf:ad:20:26:61:d5:08:
61:24:e6:5e:c3:a0:1a:22:9b:97:30:b9:a1:17:3f:
d6:ee:de:c8:2c:68:c4:e7:6a:07:20:f9:29:0f:ae:
1a:74:b1:f8:ad:d9:0d:f9:b3:9a:c7:d5:c6:95:2b:
ff:f2:4d:f1:6b:2b:5b:d7:5e:08:92:0f:5c:5f:17:
1b:36:66:d5:00:8e:f4:68:fb:9f:60:60:2b:12:90:
01:ea:3f:ee:80:7a:25:6d:45:c0:49:b1:f4:a5:c6:
0f:49:cb:22:c4:70:b8:29:80:66:ab:2d:7b:23:c6:
b8:3e:a2:83:c8:a9:9f:31:a3:b5:ab:f8:b8:70:ad:
0b:53:1b:20:d7:62:6a:80:5e:7a:6e:82:9a:9b:78:
0e:73:e6:4c:17:12:e7:24:d9:a7:44:3e:05:1c:8d:
d5:78:65:bb:80:17:d1:12:38:41:46:cc:ee:45:1f:
34:a7:96:65:f2:40:9f:0c:15:96:7e:cd:74:72:e5:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5B:03:72:D0:95:4B:66:7E:0D:E2:89:E5:DC:30:28:1C:39:F9:5C
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1e:a0:c6:35:d4:1c:7f:96:e7:5e:fe:14:c9:7d:27:70:a7:
12:2f:f1:f6:96:91:99:f9:e7:16:4b:c2:1c:82:18:f6:b3:f8:
71:64:bb:71:89:3d:ef:e1:6d:e6:80:27:35:a8:cd:7b:2a:8a:
54:e2:6b:dd:24:c6:74:9e:a1:d6:d3:aa:7c:b1:68:c6:5b:2e:
81:04:ec:64:e2:ea:10:33:fb:de:48:09:8f:97:e4:58:4e:73:
0c:82:e7:6d:fc:21:6b:70:50:75:d5:ba:6f:f7:69:b9:bc:e5:
c0:3c:ac:f7:22:cd:fc:20:f6:b0:32:bd:b6:cc:cc:33:71:45:
a7:c4:81:ed:3d:aa:b8:a9:b2:3e:cf:63:3c:6f:b4:09:ec:a5:
54:8f:14:79:be:36:6f:67:49:58:e8:08:98:2d:00:2c:9c:02:
a6:ce:21:a7:1d:5b:bc:03:6d:f2:89:32:7b:90:44:bc:1d:5d:
53:f5:ee:fa:79:a4:0f:a6:c2:a0:54:d5:d9:ec:9d:9a:22:29:
ac:d9:f6:cc:0e:e9:b0:93:0e:d3:b5:25:89:fd:3e:f9:55:62:
0a:0a:90:f2:ce:27:29:fa:6b:86:af:6d:87:c7:46:3d:64:e4:
95:a2:4b:8d:e5:3b:73:cd:47:48:56:85:ab:ee:e4:5e:0b:76:
99:18:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:06 2026 by rpki-client