Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File: SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier: 2g6X7sQK6daUGIzgBSbDpudfmqC7OEQBlndIfqOUR+w=
Subject key identifier: E2:63:CB:8D:D1:86:A1:80:1D:E2:82:F6:21:C5:0B:B8:32:17:31:17
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer: /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial: 019D386558E8033E5534EF00A285B01BE580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number: 138A
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: AJvtgoEk1NQ157oo6Df9RSbbsZ7m/8xKFFwTXpDZ2QU=)
2: WOkGbyqq4VI_KoVl7cYkzt-fEXk.roa (hash: Ugqf20CmLTnvB2fFDNQ15zZbw8WaquPL+vAoe7z+8xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:58:e8:03:3e:55:34:ef:00:a2:85:b0:1b:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=e263cb8dd186a1801de282f621c50bb832173117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:ca:b8:3a:dc:b1:fe:d4:de:4f:fd:75:e4:
d9:3c:6b:9f:3f:cb:67:bd:eb:b8:2a:21:f0:0b:6d:
2e:b4:4a:27:c5:b7:3a:bf:23:ed:00:f8:f8:55:76:
08:41:79:5b:1d:05:77:f4:43:44:a3:6a:b8:49:11:
74:0b:ea:77:be:f2:1e:60:4a:03:1c:6b:d0:73:29:
28:28:9d:33:3e:09:73:0f:04:22:23:92:db:ad:98:
01:1a:d5:e1:56:d0:13:fd:50:66:14:f0:b8:b9:d9:
e3:a5:72:eb:a3:e6:ef:ca:6c:25:8c:7b:e9:7f:8e:
8a:e6:c7:5d:01:10:b0:31:ac:60:a0:41:c8:a0:0b:
ba:23:5e:bb:8b:59:45:d6:89:2e:6d:fd:6f:d4:37:
0e:81:b4:69:d5:cf:70:0b:e9:38:53:6a:c4:d9:02:
38:8a:82:d6:ee:06:91:28:85:e7:e2:01:29:94:e4:
09:14:b9:d6:a2:17:23:45:2f:79:bd:77:9f:1b:d2:
8a:1e:ad:78:05:93:7c:6c:68:bc:1e:61:8a:65:93:
2d:84:89:74:3e:d3:8c:c5:18:4f:34:31:2f:a3:4c:
ab:b4:f6:22:a1:d8:36:89:82:5b:8f:99:cc:d3:df:
f7:7e:00:2a:96:36:01:00:eb:e1:b7:3e:5b:3a:16:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:CB:8D:D1:86:A1:80:1D:E2:82:F6:21:C5:0B:B8:32:17:31:17
X509v3 Authority Key Identifier:
keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:92:ee:fc:b4:39:0d:07:ac:49:e1:c2:09:30:50:c5:28:83:
f2:fc:b9:03:40:52:4e:0c:67:94:c6:36:97:8f:dc:25:d8:82:
17:28:ae:f4:5f:61:26:ea:c6:7f:53:d5:5b:77:bd:98:fc:7e:
d6:78:69:6d:0b:cc:79:1f:6f:0e:1d:0c:7e:21:fc:93:5b:7a:
3f:c9:7c:94:b6:61:bf:74:34:da:5e:81:d1:5c:41:ef:29:8b:
30:bc:cd:ed:77:00:56:c8:1d:8d:46:b6:45:ab:75:e8:8a:e0:
79:4b:6f:a4:28:83:ee:90:b5:85:4f:39:be:fa:5b:2b:fc:f4:
cd:82:4f:25:65:a1:67:c2:81:12:2e:96:4d:a0:fc:32:45:76:
00:cd:e8:d6:31:1e:f0:45:90:aa:43:5f:7f:2f:2e:6a:cb:32:
32:55:89:c3:bc:c8:d9:06:7c:9a:69:ae:49:71:3d:8c:44:12:
41:f2:cb:ae:49:df:af:06:36:64:ed:79:bc:bb:f9:7e:c5:6b:
07:2d:bb:ce:61:be:5e:e2:a5:56:a9:f2:2d:c4:7c:1a:99:95:
1c:6d:66:38:07:f5:f0:70:60:36:2d:9c:65:4b:b5:23:67:31:
6f:1e:31:cf:56:6f:b6:0d:ee:91:7a:1e:07:5d:f1:a6:76:0d:
e6:e8:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:34 2026 by rpki-client