Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: 2Zrk0JEXGjCuf1SQ4fdkxCGePjBfNPwbgjz7Cs7dEnM=
Subject key identifier: D6:8E:1A:8C:A1:68:65:7F:C7:4D:4E:36:25:51:F5:56:27:D4:FC:84
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 019D27E0311D27DB61417DEC9C53FF876AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 15B6
Signing time: Thu 26 Mar 2026 02:01:37 +0000
Manifest this update: Thu 26 Mar 2026 02:01:37 +0000
Manifest next update: Fri 27 Mar 2026 02:01:37 +0000
Files and hashes: 1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=)
2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=)
3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=)
4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: mRpqAxekK+0VW15wkaD4y4+MOvq0qF2/M35pnICnE3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:31:1d:27:db:61:41:7d:ec:9c:53:ff:87:6a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Mar 26 02:01:37 2026 GMT
Not After : Mar 27 02:01:37 2026 GMT
Subject: CN=d68e1a8ca168657fc74d4e362551f55627d4fc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:2c:fb:1e:91:bf:d3:94:72:6e:2a:72:3e:
be:12:5c:9d:3f:d0:2f:15:da:61:de:15:f1:21:47:
13:be:3b:ce:39:a9:3a:d1:05:41:03:49:0f:71:49:
1d:c0:fb:90:bb:7e:9c:d0:76:bc:a0:50:83:0f:2c:
3a:0e:58:b3:06:d0:bd:ab:10:3f:96:57:ab:91:8f:
5d:69:8a:fb:76:8b:68:ab:51:cc:c0:b9:a1:3d:2a:
2c:cc:77:58:c9:3d:f7:27:a6:c9:fc:a5:5d:d5:20:
51:e2:8f:c0:ec:71:21:db:70:26:12:a3:d3:af:69:
a4:78:b6:3b:85:bf:7b:fd:45:75:4a:5c:c4:4f:6a:
dd:ca:7a:c6:ae:57:5c:8e:64:da:79:e5:56:b7:f9:
96:db:a8:e7:9a:d9:7d:ff:63:89:7c:0f:28:25:84:
f9:8d:0f:2b:bc:d3:ee:82:6c:18:27:f3:fd:4e:f1:
27:9e:34:5d:54:93:28:26:29:b1:98:e3:36:99:80:
72:85:8f:3e:13:e6:ba:b1:a1:c3:99:59:d8:1b:32:
02:11:91:dc:5c:f3:c2:7e:b9:d2:16:57:11:45:9c:
d3:e5:7c:b8:b2:76:a1:ed:a5:65:6d:cf:2b:ed:0a:
ec:42:5d:1d:84:00:a4:d7:ad:d2:ff:7b:ce:00:40:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8E:1A:8C:A1:68:65:7F:C7:4D:4E:36:25:51:F5:56:27:D4:FC:84
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:60:4e:7f:75:ad:13:76:48:99:4e:fb:7a:2b:9f:77:98:03:
cc:ae:a9:b8:6b:fe:84:bc:49:f5:2e:1d:70:dd:3a:95:09:86:
f6:34:25:9e:9a:3c:c9:aa:ee:bb:9f:15:34:25:b8:9b:47:ad:
8f:9e:eb:52:9c:bd:b8:82:bf:36:65:58:7b:91:75:4c:de:84:
80:6b:8d:24:e8:53:2d:7a:da:e7:f7:ac:52:67:d7:09:ac:5f:
b9:ed:8a:ee:3a:3d:a4:ca:14:d6:b5:fc:40:2b:ba:0d:1c:2b:
a9:67:56:79:7f:7d:f6:99:8a:9e:42:e2:bf:56:0a:1c:f8:28:
53:aa:b5:66:2e:47:70:28:98:5a:fe:7a:5b:4d:b9:62:77:e4:
45:21:68:e2:e5:37:f2:53:25:e8:d2:f9:25:6c:80:bd:fb:6f:
4e:70:1d:8a:0e:f5:81:7a:cb:12:19:2b:d7:e9:2a:d1:57:02:
ba:38:1c:96:d6:ec:1f:82:2d:e2:ff:86:96:9f:1e:c4:5f:37:
87:69:a9:2d:a8:ae:57:31:27:e2:ac:79:be:4c:73:c2:26:6c:
3d:fc:82:02:02:ca:ee:3b:af:4b:f4:12:52:69:88:2d:a1:3a:
63:b9:b7:05:0b:de:9a:8b:af:3a:96:0f:5d:a6:9f:6d:00:ff:
22:86:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:36 2026 by rpki-client