Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: u+EoI4b/vTT+6CmXKOhvw0w8icEa1U49eld5iMO2CcQ=
Subject key identifier: 42:A6:60:D7:65:7D:5B:A0:C6:33:85:97:B5:B2:0E:1D:85:A8:70:DF
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 019FCFA83041B2EFD689B4C443EC4D71B1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1716
Signing time: Wed 05 Aug 2026 02:02:13 +0000
Manifest this update: Wed 05 Aug 2026 02:02:13 +0000
Manifest next update: Thu 06 Aug 2026 02:02:13 +0000
Files and hashes: 1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=)
2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=)
3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=)
4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: W/0wDK6QzqbBVRxmI9wVM2OQvns7gLanHRry/GmXwek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:a8:30:41:b2:ef:d6:89:b4:c4:43:ec:4d:71:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Aug 5 02:02:13 2026 GMT
Not After : Aug 6 02:02:13 2026 GMT
Subject: CN=42a660d7657d5ba0c6338597b5b20e1d85a870df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:a3:32:df:18:cf:1c:1f:93:26:ef:1d:1a:
be:de:8e:7a:40:9f:e2:51:37:ee:8e:a6:6d:d1:7a:
73:80:89:9a:a6:83:17:05:85:f2:91:04:0c:1b:a4:
98:db:ad:9e:71:76:5e:d1:05:c3:a0:8e:0b:0f:58:
ff:bd:17:62:19:22:78:ff:0e:3d:eb:f4:01:2d:e0:
f9:ab:8e:6f:ee:77:c4:40:f0:a1:b0:a8:7e:48:f4:
0b:8a:26:97:2e:e5:fe:40:9d:a1:d6:10:e8:ee:5f:
e1:03:01:80:34:29:8c:f5:90:91:36:ce:60:79:b7:
68:17:3d:55:31:6f:61:9c:cb:cb:67:d5:c3:c1:c6:
3e:1d:f1:43:26:8b:2b:12:07:1d:8b:c7:9f:62:8d:
fb:2d:06:e0:ae:6e:76:63:94:5e:54:ad:5d:e3:ab:
e0:ef:11:97:1a:d8:21:3b:d0:16:8a:bd:fd:6a:d7:
3f:98:03:49:bd:34:ba:9a:20:97:d4:2e:f3:38:e8:
9a:4d:7b:6f:1c:30:4f:59:c8:8a:75:99:d8:af:f7:
57:a3:94:fb:ae:af:7a:3b:81:71:96:81:df:c4:47:
30:b8:36:d3:92:bd:04:40:e5:6c:91:60:8e:21:95:
8e:67:8b:ba:43:f5:4b:82:0c:bb:04:18:82:ee:d2:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:60:D7:65:7D:5B:A0:C6:33:85:97:B5:B2:0E:1D:85:A8:70:DF
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7c:80:4f:77:59:9a:5e:ea:e3:50:3f:c2:44:6f:58:32:83:
b8:03:08:e6:c1:ba:cb:c9:bc:c6:be:cf:0e:fb:93:97:c7:85:
6c:45:0b:8a:f5:ea:58:03:2a:b9:f1:a9:cf:06:65:93:dc:c9:
81:ba:e2:cf:b4:e7:3c:df:a0:18:36:99:af:8e:f7:c1:67:1b:
67:82:47:71:aa:bd:b1:da:29:9b:c1:31:68:fb:6c:9a:81:46:
5a:38:ec:d5:38:7a:f1:95:cb:bc:ab:b0:e8:98:1e:0b:95:b8:
ae:ae:78:0e:b2:49:74:74:7f:9b:2f:66:66:e0:1a:42:37:19:
68:bc:d9:7e:e7:21:56:e4:6b:60:32:4e:f8:dc:ab:09:fd:76:
c6:56:a7:32:98:7e:f5:6c:dd:1a:04:4d:00:27:ea:a0:a7:4e:
af:0f:aa:f3:6d:a2:90:6e:72:9f:21:45:c5:4e:5f:04:74:cc:
1f:2e:02:43:5b:14:4c:0a:5f:df:07:4e:6f:65:51:b7:37:df:
28:9f:db:53:8f:38:c6:f3:e5:f1:fb:bb:6f:62:76:8f:23:56:
7d:a9:e1:a2:ca:ef:bf:85:f2:4e:81:9f:e1:9f:77:9d:72:3a:
80:91:5f:fe:85:da:4e:24:78:ef:64:af:6c:35:78:cc:37:0d:
7d:1e:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 11:22:10 2026 by rpki-client