Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: w30Wr7jvQ9jkmV6fTSImQEHwhA7m3RCgQtoQGh6MGmw=
Subject key identifier: D4:39:63:7F:DF:67:63:A9:4A:C1:CC:5F:DC:D1:76:96:D2:B1:14:4E
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 019D10B3C5443393C4CF7D6BBC39FC95F71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 15AA
Signing time: Sat 21 Mar 2026 14:01:49 +0000
Manifest this update: Sat 21 Mar 2026 14:01:49 +0000
Manifest next update: Sun 22 Mar 2026 14:01:49 +0000
Files and hashes: 1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=)
2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=)
3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=)
4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: Qr/bJYNCfJzNR+yCplHv2gd5tB61AKwsg9YCCb6YgXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:b3:c5:44:33:93:c4:cf:7d:6b:bc:39:fc:95:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Mar 21 14:01:49 2026 GMT
Not After : Mar 22 14:01:49 2026 GMT
Subject: CN=d439637fdf6763a94ac1cc5fdcd17696d2b1144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:3c:3c:7c:46:fa:95:13:35:8c:df:25:35:
57:7b:e8:ce:fc:86:c1:d1:90:e4:88:8f:1c:3a:b8:
92:88:60:86:71:d6:79:c3:7e:5a:c2:6f:58:b6:3f:
e4:6d:e9:a3:d4:71:17:3b:f9:d0:54:a8:33:a8:57:
c5:e7:6a:14:bb:49:fb:61:89:25:49:fe:40:40:1b:
0c:b6:e0:e7:62:75:3d:3c:57:12:37:7a:da:34:e2:
ed:b5:85:61:88:ff:3b:69:e3:77:db:b6:33:7a:04:
f9:c7:4b:0f:af:68:ec:e6:29:c5:51:6e:6b:58:43:
0c:8f:d7:0c:84:1c:8a:4d:8d:33:32:45:5e:96:2d:
9b:52:18:ca:76:e9:f9:bb:65:34:2d:e8:1d:89:b9:
97:03:5c:09:4a:05:b5:2c:f3:12:c0:68:b3:ce:82:
4c:fc:e5:54:a5:ab:b2:19:af:3e:a7:7f:a6:74:01:
74:72:cf:5b:e0:b4:dc:3e:fd:1f:2c:91:a9:4b:15:
8d:02:d2:0a:94:0e:dd:2d:1f:10:5c:d6:97:e8:c0:
80:85:9d:5f:40:ae:d7:bb:f1:6c:ae:95:fa:86:6c:
05:24:9f:2c:42:ea:0d:2b:b4:de:69:7e:bd:25:f4:
b3:bb:60:e1:86:02:f7:46:4c:33:9a:71:43:7a:fd:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:63:7F:DF:67:63:A9:4A:C1:CC:5F:DC:D1:76:96:D2:B1:14:4E
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:59:f7:5e:a8:b5:a4:56:03:46:06:0c:cf:99:71:c9:5f:6f:
72:e5:93:2e:2d:ed:2b:21:d2:82:d5:79:e5:7d:f4:76:8e:7a:
ab:97:a7:35:80:04:2c:1f:ba:54:fe:c7:11:9a:da:5a:f0:bc:
b5:8e:11:6d:b4:68:c9:92:68:ff:66:66:7d:00:a5:4e:f4:a0:
36:69:e6:98:b0:56:c6:17:b7:65:d2:0a:a1:f7:c7:8c:38:c7:
42:b8:5b:a4:bf:b9:93:f1:e9:a4:25:37:6c:13:df:90:e0:47:
1e:b8:d0:43:7e:6e:5e:80:fa:7e:7e:1f:f3:dd:db:29:6d:47:
3c:e6:d9:18:25:46:67:29:4a:87:48:28:a3:62:8d:3c:db:f1:
26:5e:e7:c0:54:c4:4c:af:22:0c:4b:dc:e3:81:02:bc:89:a7:
01:9f:83:94:76:4c:bc:74:70:99:8a:9c:3b:f2:76:9d:4d:e1:
68:8c:44:52:35:df:8e:c8:13:35:05:cb:37:42:33:4e:d3:93:
5e:13:af:4f:19:f1:20:c4:fc:dc:7c:81:87:a3:ec:02:6f:40:
b4:71:94:e8:1a:3b:ca:77:ab:b1:a3:8d:bd:3c:47:71:22:98:
3b:cf:69:b6:b1:7f:3c:f2:49:a1:15:fe:81:4b:34:f7:d7:04:
42:99:41:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0Qs8VEM5PEz31rvDn8lfceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew
M2UzYjEwHhcNMjYwMzIxMTQwMTQ5WhcNMjYwMzIyMTQwMTQ5WjAzMTEwLwYDVQQD
EyhkNDM5NjM3ZmRmNjc2M2E5NGFjMWNjNWZkY2QxNzY5NmQyYjExNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoo8PHxG+pUTNYzfJTVXe+jO/IbB
0ZDkiI8cOriSiGCGcdZ5w35awm9Ytj/kbemj1HEXO/nQVKgzqFfF52oUu0n7YYkl
Sf5AQBsMtuDnYnU9PFcSN3raNOLttYVhiP87aeN327YzegT5x0sPr2js5inFUW5r
WEMMj9cMhByKTY0zMkVeli2bUhjKdun5u2U0LegdibmXA1wJSgW1LPMSwGizzoJM
/OVUpauyGa8+p3+mdAF0cs9b4LTcPv0fLJGpSxWNAtIKlA7dLR8QXNaX6MCAhZ1f
QK7Xu/FsrpX6hmwFJJ8sQuoNK7TeaX69JfSzu2DhhgL3RkwzmnFDev1+rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ5Y3/fZ2OpSsHMX9zRdpbSsRROMB8GA1UdIwQY
MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt
MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0
LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGln3Xqi1
pFYDRgYMz5lxyV9vcuWTLi3tKyHSgtV55X30do56q5enNYAELB+6VP7HEZraWvC8
tY4RbbRoyZJo/2ZmfQClTvSgNmnmmLBWxhe3ZdIKoffHjDjHQrhbpL+5k/HppCU3
bBPfkOBHHrjQQ35uXoD6fn4f893bKW1HPObZGCVGZylKh0goo2KNPNvxJl7nwFTE
TK8iDEvc44ECvImnAZ+DlHZMvHRwmYqcO/J2nU3haIxEUjXfjsgTNQXLN0IzTtOT
XhOvTxnxIMT83HyBh6PsAm9AtHGU6Bo7ynersaONvTxHcSKYO89ptrF/PPJJoRX+
gUs099cEQplB4Q==
-----END CERTIFICATE-----
Generated at Sat Mar 21 20:06:11 2026 by rpki-client