Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: R0jkphn6JeCjf0458notb7VGmfK3sbdqTXDSTQvM6RQ=
Subject key identifier: 1A:BE:96:68:0E:B9:A4:59:2C:18:5E:6A:FA:7B:4A:19:BD:ED:EE:BC
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 01A0C6D84FEC4B9336C950BEAD86EE78BDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1796
Signing time: Tue 22 Sep 2026 02:00:59 +0000
Manifest this update: Tue 22 Sep 2026 02:00:59 +0000
Manifest next update: Wed 23 Sep 2026 02:00:59 +0000
Files and hashes: 1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=)
2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=)
3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=)
4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: JbBM0EozvOTAaSJJsvXH214VcXR4X2cv11r8KIs7VnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:4f:ec:4b:93:36:c9:50:be:ad:86:ee:78:bd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Sep 22 02:00:59 2026 GMT
Not After : Sep 23 02:00:59 2026 GMT
Subject: CN=1abe96680eb9a4592c185e6afa7b4a19bdedeebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:cd:7f:29:3d:40:6b:9e:b2:84:4e:4a:26:
ad:be:ee:72:f3:fd:0f:a5:5d:d8:e1:5c:02:d2:eb:
a1:88:fd:eb:1f:11:3d:18:08:3c:c0:c0:f5:35:76:
0d:df:85:d3:eb:a2:e7:1d:0c:21:63:a4:22:24:c1:
40:13:ab:50:ba:6b:6e:f0:64:3a:a8:ea:94:88:85:
c5:16:3c:f5:f9:f5:05:08:35:05:36:dc:3a:91:ed:
b1:97:a5:9f:6d:47:0d:85:d1:01:55:b8:9c:4d:e4:
6a:50:4d:e4:9e:d8:85:4d:ab:86:1c:2a:1f:ab:e2:
39:e6:c0:3d:ab:8b:34:67:c7:fd:98:f7:3c:7b:5d:
55:cb:90:14:53:dd:77:fd:b9:64:13:17:a1:ec:b3:
9a:89:23:05:31:27:8b:fb:7e:55:76:34:c4:f5:3f:
86:4e:fe:b7:9b:d4:f0:f2:21:36:81:64:68:48:c9:
eb:66:a4:ff:f0:0b:e5:e7:d8:a1:03:d6:fa:83:9d:
b6:3f:21:0f:a1:f0:8b:f3:00:36:a6:88:b7:39:0c:
0f:48:e0:4b:3e:27:0a:20:39:c6:23:d2:b3:20:a3:
23:ef:98:8b:bd:85:a9:e7:10:47:d1:6d:c6:7c:b8:
ae:ed:08:7a:33:72:7a:37:57:67:81:03:09:7b:db:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:96:68:0E:B9:A4:59:2C:18:5E:6A:FA:7B:4A:19:BD:ED:EE:BC
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a8:b2:6e:25:b6:30:da:25:d4:b2:06:cf:44:be:a4:fe:db:
6c:c0:dc:71:7a:c0:50:6c:7f:47:35:f0:5e:4c:50:c5:ce:10:
a2:35:de:6f:77:2e:29:bb:98:c7:85:63:3d:d9:3e:a8:c4:2c:
7d:6b:c7:9e:14:52:31:53:16:c3:e2:02:6e:50:06:66:0c:65:
1d:6f:ee:a9:e2:98:74:55:58:07:48:c6:05:5b:c9:31:2e:3c:
4f:f1:db:dc:05:2a:bf:c0:c6:fd:ec:a4:26:0b:bd:63:2d:05:
a3:13:7a:0c:c0:6a:ac:2c:35:5f:ad:0e:0d:21:2f:bb:d4:69:
00:ae:98:43:be:56:44:19:bc:0a:3c:b7:c7:4a:d7:d5:6b:c7:
e1:b1:8d:e4:1c:e1:05:6c:fe:2d:20:89:35:e4:80:5c:bc:e3:
82:d3:09:f5:ac:ed:b2:08:bc:45:02:fc:c4:e9:0f:fc:7d:7f:
d2:de:51:ea:3e:ef:4a:fe:86:29:ff:52:29:25:a2:c3:9b:10:
b6:a9:1d:37:e0:25:c8:e9:40:72:fd:91:28:1e:5f:12:61:e1:
6c:f1:5f:67:cd:d1:68:5d:7f:fa:ff:1b:06:87:a6:92:9a:f0:
51:bc:c2:76:35:89:2b:da:fb:2f:9f:ae:d8:0f:8d:14:b7:e2:
80:b1:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:00:48 2026 by rpki-client