Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: HJjrEC3gpA+tLL/aLIJV+frk6z6679HuBGqxbmshtCY=
Subject key identifier: 44:98:4A:C1:3E:47:F7:2F:AD:DD:A9:7B:B8:3A:1D:CE:25:14:FE:8B
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019F8F7F294776D1C0B6F7B09F1B21CF6DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 050C
Signing time: Thu 23 Jul 2026 15:01:43 +0000
Manifest this update: Thu 23 Jul 2026 15:01:43 +0000
Manifest next update: Fri 24 Jul 2026 15:01:43 +0000
Files and hashes: 1: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (hash: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs=)
2: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: We7nIW1p3zQDFvew+qQML9gAGqg6lsUzEm1IXLM9bkA=)
3: fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (hash: pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:29:47:76:d1:c0:b6:f7:b0:9f:1b:21:cf:6d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Jul 23 15:01:43 2026 GMT
Not After : Jul 24 15:01:43 2026 GMT
Subject: CN=44984ac13e47f72faddda97bb83a1dce2514fe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:a6:9a:4c:80:43:2f:85:fb:ae:4d:67:40:
29:9c:10:90:04:eb:6e:53:24:5d:bc:bc:58:ae:f2:
e1:31:27:30:fe:d3:f4:b8:7d:35:e5:92:c7:2b:ff:
7f:ab:06:44:44:e0:aa:5f:24:c3:c0:de:84:e4:99:
f9:ba:a7:75:77:e8:71:7e:2e:ed:06:bf:9a:ed:ec:
25:45:5a:d7:87:5f:fb:60:3b:91:0f:7f:f8:0d:5b:
83:8a:a5:3d:c6:ba:e6:7f:a0:11:5b:5b:ca:c8:51:
a7:3d:0b:7d:06:8a:6c:a2:64:4a:05:b7:48:fb:14:
5f:d6:8a:e4:51:8b:8d:7b:c2:ed:5b:48:b4:41:11:
9c:5e:f8:59:f7:78:91:39:86:c8:66:9b:9f:0f:f6:
4e:e4:31:3f:f4:ca:de:31:4c:72:6a:d5:61:b7:e6:
71:49:40:83:5b:1c:4b:58:34:9f:b1:e4:0f:c8:e8:
3e:25:f3:3e:35:69:5f:66:a9:95:aa:43:6f:83:1f:
e4:69:13:5a:05:17:ce:98:82:de:60:98:55:e6:48:
82:14:cd:3a:d2:31:87:6e:13:5c:7d:60:57:c5:b1:
3b:b8:24:30:ff:d2:38:35:78:6f:8e:e9:cf:13:a2:
3a:1d:d3:fb:fe:a1:c0:a4:4c:d6:1e:0d:a5:4a:70:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:4A:C1:3E:47:F7:2F:AD:DD:A9:7B:B8:3A:1D:CE:25:14:FE:8B
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:92:8b:36:97:48:bb:e4:fb:20:3a:03:35:e6:f7:49:9a:54:
63:d6:cb:3e:90:14:ce:9f:5c:b3:b3:4b:7b:89:13:26:e1:f8:
11:67:5b:20:ba:67:74:1e:3b:f4:ad:44:44:a4:d0:cc:cd:8e:
39:8c:15:b7:41:85:19:9a:7a:bb:98:a0:5c:91:60:32:aa:97:
9b:6a:c6:12:22:d3:d6:b1:46:3e:cd:99:92:c9:10:31:22:54:
0f:82:95:73:93:e2:42:37:7e:c4:31:a9:4b:16:19:70:f9:90:
6b:a8:b6:2d:90:cb:45:50:ad:02:55:4f:70:fe:3a:bb:e7:50:
be:b4:08:ff:9a:b2:d7:a3:ae:99:61:62:80:12:ed:5b:5a:0d:
de:32:e5:8e:f0:ee:82:f5:ac:f2:5e:76:99:5f:42:97:d8:a3:
b4:c3:14:81:50:8d:df:37:7e:50:72:bd:9c:5c:30:fc:ac:be:
db:68:37:4f:7e:b1:ca:32:5a:e4:70:66:a0:8c:41:aa:ec:5a:
cf:02:73:2c:11:c4:39:ae:79:fd:f6:c3:a5:11:57:f9:d0:45:
90:b2:c1:76:96:ba:24:7f:c1:1e:3a:da:9c:2c:25:4f:f0:62:
82:b7:16:8d:03:ee:90:e3:64:03:e4:96:fa:ba:47:8e:39:67:
3f:d7:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:25:10 2026 by rpki-client