Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: 92kUIZGNiWlUbwXazmidxACth+oMZJjyTKGUbpJ2qEE=
Subject key identifier: C4:23:4A:4F:29:8D:10:D2:4C:9B:F4:C8:18:76:F3:00:D8:F2:8C:29
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 019FA907A3C10E0D9B141354598C9F006705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1702
Signing time: Tue 28 Jul 2026 14:01:17 +0000
Manifest this update: Tue 28 Jul 2026 14:01:17 +0000
Manifest next update: Wed 29 Jul 2026 14:01:17 +0000
Files and hashes: 1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=)
2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=)
3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=)
4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: zaOjQWs4kKZ51dTjKsCWYpOzIxMpQ7TfnQKfUbFjQ/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:a3:c1:0e:0d:9b:14:13:54:59:8c:9f:00:67:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Jul 28 14:01:17 2026 GMT
Not After : Jul 29 14:01:17 2026 GMT
Subject: CN=c4234a4f298d10d24c9bf4c81876f300d8f28c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:63:51:6b:da:f7:db:34:72:6c:c7:a9:03:
73:94:f7:0c:ac:a5:12:72:92:3c:16:98:d4:ff:2a:
fa:0a:7a:f0:43:33:09:8c:48:c7:74:4f:db:3c:67:
d8:c5:9d:a4:d5:49:b1:ff:0b:95:32:ab:3f:a7:d6:
fc:fd:5d:fd:a2:28:b3:e9:40:af:f3:89:7c:d8:2c:
7a:b1:06:8c:83:e9:8f:be:b6:fe:fb:6f:e0:0e:83:
b0:11:69:e2:fe:04:c2:9b:78:99:ec:2b:b2:65:95:
de:3c:c1:53:4d:d6:84:1d:0e:86:38:43:53:9e:eb:
5c:ef:4b:2c:0e:e7:ad:fc:75:10:a2:46:d1:77:50:
bd:ef:80:57:42:c5:f4:a8:4f:c8:0b:1b:bd:26:44:
f2:49:ab:c9:27:c6:ca:09:4f:56:29:9c:95:d6:e6:
2a:45:67:b8:0c:c2:97:66:80:1c:00:92:58:43:8a:
19:dc:05:c4:bd:db:03:8d:f4:4e:43:d3:d1:ce:e7:
65:45:03:1a:65:55:d7:c2:8c:a4:7d:4b:bd:e8:d7:
0b:c3:16:68:a8:bb:a7:9d:dd:2d:76:24:a2:14:64:
c3:03:01:c0:d5:ea:cc:4d:b5:31:68:e0:e7:3d:5e:
9b:7b:7d:57:1f:d7:40:5c:35:85:51:71:6b:4c:05:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:4A:4F:29:8D:10:D2:4C:9B:F4:C8:18:76:F3:00:D8:F2:8C:29
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:de:7d:55:96:8c:35:ed:bf:9e:b6:f8:cc:b4:f6:84:f3:7b:
0d:ed:81:26:af:3a:09:a1:8f:4f:34:55:39:31:e5:56:1f:cd:
1e:a5:84:44:aa:84:78:ee:38:c8:60:ba:33:3f:ba:54:88:59:
ac:1c:18:df:4a:14:b1:11:36:ee:cc:2a:06:f6:04:a5:a2:ca:
e2:44:2f:44:05:5f:62:6e:58:12:67:fb:84:5d:af:7d:ee:8c:
fb:97:71:d7:ca:fa:a1:4b:1a:c1:e9:18:93:a3:6b:54:67:0b:
81:e6:15:57:15:a7:e7:49:73:53:53:50:4d:bd:90:05:58:88:
f5:e7:ba:0c:a7:98:03:74:24:11:db:c2:8e:bd:c4:e1:92:b1:
6a:cd:5f:a0:93:2c:11:f3:e9:93:5f:a1:78:4b:cf:05:3e:a2:
11:59:1e:c8:f5:4b:db:05:1e:59:05:6f:06:0a:b8:73:34:1b:
07:d9:0b:52:50:cc:13:30:32:12:e8:90:2a:bf:9a:d2:89:08:
b2:a9:6a:ba:89:73:4b:a7:82:18:47:13:e2:ad:fc:4c:89:d9:
02:3d:49:7a:50:68:90:05:d4:78:b8:66:ef:66:df:00:6e:f0:
3c:67:8e:bf:d2:ac:78:e7:77:54:e3:65:cc:fd:28:61:50:9b:
cf:92:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:46 2026 by rpki-client