Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json)
Hash identifier: TEmL/iGcVHNhx17S4MZco14MAZzreOg/fMU//bCRmfs=
Subject key identifier: 01:C4:7F:A5:06:75:C8:77:1B:DB:82:59:32:80:60:CD:FD:59:FD:92
Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1
Certificate serial: 019D382E44828884CD9AFCB3B4DE7FDC2AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
Manifest number: 1062
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: YMG2y1nDpUGg3vVd4DYl1K1ulwK8abV9z6yZj8MlP90=)
2: YLBXJ11mEGO5PlbXThO83EcE_Ns.roa (hash: 35AN0IfH7ydkQxRJiaol/kYL6o8B/ZFyI8+hr+xzEtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:44:82:88:84:cd:9a:fc:b3:b4:de:7f:dc:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=01c47fa50675c8771bdb8259328060cdfd59fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:a7:2c:ba:19:f6:d4:12:8c:f5:ca:ce:5d:
a1:79:29:05:ad:ad:86:6a:0c:23:87:61:23:fc:d0:
fa:18:49:27:77:f5:62:4d:b9:28:af:78:0d:4b:f0:
c6:f1:6f:f1:e7:9a:62:77:99:f1:fc:67:11:ed:fa:
25:23:01:28:0f:6b:ce:17:68:34:9b:33:a5:fe:a2:
df:e5:97:ea:66:b9:1d:cd:ad:14:30:eb:ea:fd:c9:
ae:ad:9b:f7:71:06:f0:4b:03:a0:ff:11:2e:f9:dd:
20:2d:95:22:5c:0c:34:e8:40:10:29:df:dd:eb:3d:
30:30:22:db:92:31:dd:96:f8:e9:80:28:9f:f5:cc:
7a:20:65:01:4b:df:0b:35:41:50:7d:98:c0:f2:a6:
aa:ca:03:9d:e6:58:d8:e5:6f:1e:1d:72:01:02:7a:
ba:a0:fb:59:1a:10:eb:3e:30:5b:f1:ef:13:57:20:
60:e4:24:43:4b:28:19:ce:a0:40:15:ee:fa:ab:e8:
5c:92:9c:43:a0:8e:5a:70:3a:81:e8:c6:02:56:ba:
93:d7:55:3d:9f:a1:af:ba:71:9c:35:dc:46:71:c4:
be:d4:4e:07:ef:87:50:2a:05:8a:82:8e:a2:ed:14:
77:b2:b3:40:06:b6:ee:58:67:93:4a:63:ff:e8:0b:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:7F:A5:06:75:C8:77:1B:DB:82:59:32:80:60:CD:FD:59:FD:92
X509v3 Authority Key Identifier:
keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0e:86:e4:43:9c:d1:85:27:00:bb:8b:c9:85:cd:b2:ca:43:
eb:ee:19:37:cd:d4:8f:2e:5a:0f:e1:7a:b2:79:db:b9:a6:37:
85:1e:ff:d2:6d:b7:c5:be:09:cf:b6:0e:4f:a4:e3:85:69:83:
fd:2b:3b:aa:0d:37:5d:8a:7d:94:62:4a:1a:2f:49:bd:1d:b5:
7a:7f:d2:eb:5e:f3:29:b5:d9:05:16:9d:00:e6:97:28:05:06:
bf:aa:00:55:57:34:9e:a4:9c:8f:3d:4d:37:e3:5a:0d:b9:34:
ee:84:d5:4f:15:9e:4e:92:8d:51:3b:f1:ff:dc:ff:e6:84:ef:
fe:7d:e9:a8:cb:61:ba:fc:c3:38:3d:08:e5:2b:49:88:d7:a6:
cb:20:2f:06:30:cc:40:a2:6d:03:27:55:44:f3:f1:52:ad:55:
c0:1e:33:15:87:67:21:7f:82:b8:94:d3:fc:5a:84:18:00:04:
b9:09:d0:97:2d:44:55:ac:88:ff:f1:38:31:11:22:13:d6:55:
54:ab:4f:77:e3:98:19:71:91:9f:a1:0f:2c:56:08:a8:46:2a:
c7:00:b0:99:55:2b:4f:73:6f:9d:24:1d:99:d9:be:c9:ff:6f:
45:88:f1:41:84:36:92:51:ec:cd:d3:dd:f2:f8:6b:fe:0f:90:
65:36:dc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:50 2026 by rpki-client