Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: rQKLoQSFOyrH89eIZJ2DGmSDiMAGbj0u/ZxEGl9EWcE=
Subject key identifier: FA:58:93:92:B9:59:AD:98:33:A1:1C:F0:B0:31:1D:68:E9:7C:08:9B
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 019D32634AC1EB540D7746A39D298545A3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 105F
Signing time: Sat 28 Mar 2026 03:01:00 +0000
Manifest this update: Sat 28 Mar 2026 03:01:00 +0000
Manifest next update: Sun 29 Mar 2026 03:01:00 +0000
Files and hashes: 1: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: CKIyT40mZkbfIq/F/NnomScv+vLLn75RFRoCklfAvkQ=)
2: YLBXJ11mEGO5PlbXThO83EcE_Ns.roa (hash: 35AN0IfH7ydkQxRJiaol/kYL6o8B/ZFyI8+hr+xzEtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:4a:c1:eb:54:0d:77:46:a3:9d:29:85:45:a3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Mar 28 03:01:00 2026 GMT
Not After : Mar 29 03:01:00 2026 GMT
Subject: CN=fa589392b959ad9833a11cf0b0311d68e97c089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:6a:12:79:8f:41:24:f2:d4:6f:63:50:e1:
dc:16:bf:62:53:91:2f:37:a2:ca:74:44:0a:07:d9:
fb:45:12:2a:ae:d3:55:dd:f9:b6:2a:d9:0e:37:31:
7c:a9:f0:05:a9:98:ab:d6:d5:b0:62:b3:8c:42:9c:
0f:63:0b:07:72:8a:1c:b8:e9:f6:49:be:e2:9c:61:
bd:39:6c:20:f6:d2:27:af:6e:8c:10:ca:a0:9f:75:
8c:29:04:e7:47:8a:44:f1:18:06:30:bc:1a:32:2f:
f6:f8:b6:16:e1:f1:25:77:f6:a7:31:ac:6b:df:f0:
25:58:ba:49:27:d8:49:ea:ae:ce:ec:af:bc:ff:77:
56:7b:de:57:f1:b2:8c:02:7d:7d:6f:82:94:f3:8f:
40:93:09:6c:89:d2:18:8d:b3:c7:04:72:aa:36:d5:
46:60:89:d8:1d:7d:27:d7:00:68:70:6a:25:2b:6c:
4d:ec:38:ce:f9:8e:9f:3b:69:28:8b:c7:5a:e4:8d:
3d:fc:91:54:06:39:c5:13:51:0d:25:48:ef:01:bb:
de:17:a0:23:2e:dd:b9:f0:ad:24:8b:28:98:91:75:
dc:83:2b:d0:e9:c1:4d:e5:dd:b6:70:ff:01:ab:6e:
91:7d:17:01:ce:29:05:96:f7:5c:df:f3:57:21:69:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:93:92:B9:59:AD:98:33:A1:1C:F0:B0:31:1D:68:E9:7C:08:9B
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:ba:28:50:ea:1f:b3:dd:59:6c:e8:f7:e3:69:60:c0:26:
31:9b:92:4c:31:d1:39:fb:44:e6:77:f6:f7:f3:81:9f:f1:67:
3d:ed:61:14:1c:17:33:13:28:bd:a9:31:e1:06:3d:a1:fe:bf:
f2:37:7d:34:ec:16:b7:e0:35:2b:65:99:23:47:e6:6d:0c:49:
6d:7f:3d:2f:5e:a7:a4:cf:3e:a1:76:74:6e:5f:c0:43:65:6b:
79:54:94:1e:7f:1b:0e:5b:19:bc:16:7c:e5:ca:54:1e:a7:9f:
32:33:af:f8:00:0e:64:35:d6:94:51:33:17:65:6a:92:65:6f:
d9:64:8d:34:d4:ca:cd:19:84:de:6c:8b:35:c0:b5:0b:05:9a:
01:83:6a:99:a5:76:1b:73:c7:27:38:c1:24:31:4f:9e:3a:77:
6b:2f:55:37:45:ef:3e:ef:b9:2d:2c:60:50:2c:bc:6e:6c:ff:
01:98:11:db:c6:78:f1:13:82:e4:09:f8:d1:ad:6f:5c:2c:8a:
6f:1f:27:19:57:b2:75:03:0b:20:e6:88:6f:e2:12:71:70:6d:
d2:f9:e5:8b:87:38:88:61:d0:d8:08:f2:37:9c:18:31:52:0d:
80:81:4a:c4:24:7b:90:f4:a9:18:50:60:7e:c2:ea:80:8b:16:
1b:81:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:13 2026 by rpki-client