Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: jMXr6J84AqHXeoV4ru0HV07UUSJiN1cHqd14AuSLZps=
Subject key identifier: 31:F4:51:03:6C:7F:D1:0D:D2:49:4E:D8:03:98:B8:45:7C:36:25:54
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 019CAA5850799B1EF131970F525E11E556D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 1575
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=)
2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=)
3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=)
4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: gW2Ub/V3QHCq9lQSrrUBO0mQmOWyFj1r0HsQQMjbG1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:50:79:9b:1e:f1:31:97:0f:52:5e:11:e5:56:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=31f451036c7fd10dd2494ed80398b8457c362554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:0f:f9:c4:7d:7e:51:01:9e:dd:3f:c1:ae:
4b:26:77:31:b1:68:f8:7f:fc:cd:5c:f5:90:39:8b:
3e:29:17:2f:b8:d2:2d:2a:c9:4f:39:26:75:98:56:
c0:50:f7:24:6e:55:ea:3f:6c:05:af:e7:a0:6f:5b:
04:17:6b:45:9d:b9:aa:11:0b:0b:f6:be:ff:c6:4a:
8f:ae:47:d3:18:e7:9b:57:55:d0:96:24:9c:f2:1c:
7d:ee:f6:61:c1:c0:ee:40:32:c1:fb:3d:67:44:77:
21:44:94:f1:f9:dd:c9:11:d9:c7:58:3b:59:9c:71:
c9:19:a3:57:60:f5:ed:a3:c1:b5:be:7e:d1:f5:f5:
97:dc:34:76:b5:63:67:3d:96:31:44:4d:e2:25:75:
db:af:9a:07:cc:c6:29:4b:09:df:e4:ea:36:85:ad:
2d:4b:97:3d:3a:c3:f1:bf:60:ad:0d:ae:50:93:f4:
47:46:02:8f:dc:bd:c9:78:7f:3c:fc:de:f7:d8:e9:
b0:08:5e:f9:b4:6c:6b:7b:68:3d:9a:1e:e7:ca:e3:
48:99:33:a0:bf:17:40:ee:dd:16:62:4b:2e:d8:86:
4b:a3:64:e7:e5:c9:69:1d:bb:57:4c:a1:f9:fb:da:
83:c0:18:76:4e:ff:08:74:94:4a:dc:56:ed:68:a4:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:51:03:6C:7F:D1:0D:D2:49:4E:D8:03:98:B8:45:7C:36:25:54
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:c4:59:90:2e:20:18:8d:ef:b6:af:f4:f8:e6:ad:b2:e2:
a8:b8:ac:0a:24:3d:4f:c8:e4:17:09:66:c8:9c:60:0f:c2:8e:
5a:fd:9a:4b:87:cd:5f:64:07:b6:5d:8a:56:ad:4a:4c:f9:30:
f7:a5:ca:d6:48:d6:8b:05:b2:1a:49:4f:00:dd:3e:29:62:fb:
c1:fa:a1:67:6f:3c:cf:9f:71:cd:6b:fd:54:69:36:c7:00:4c:
48:75:49:44:8a:eb:b8:c3:c0:e2:8c:8f:20:f8:95:b5:5d:7d:
46:89:35:d8:a4:21:bb:cc:fd:46:18:b7:aa:e3:15:df:bc:36:
03:43:34:6f:80:4c:51:55:d9:ca:73:12:d3:23:83:37:cf:8f:
23:cc:f7:8e:7e:c6:64:42:45:c3:4f:ee:2f:60:19:8e:1c:75:
a2:db:36:45:7c:a8:23:3d:d0:02:6d:2b:f8:6c:5a:3e:a3:40:
24:89:8f:3f:b3:bd:95:ee:41:2c:e4:58:8b:f7:af:80:b9:a0:
c7:83:92:00:86:b5:b6:be:f3:2c:f3:83:15:7b:25:0f:2d:f4:
b2:db:76:b9:6c:e0:ec:ba:1e:38:9d:f0:2f:02:f9:67:c5:77:
13:65:e8:e4:87:c4:a1:a6:6c:40:09:0f:80:64:7c:0f:e7:da:
b1:ef:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:45 2026 by rpki-client