Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: JVXqEKY5OORy9sVmBQBCldoH7LwiWGTwos1/c3X2Deg=
Subject key identifier: CF:74:A2:35:F4:D8:93:12:89:46:D7:A1:5A:70:FE:30:4B:D6:88:90
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 019D371B24F643933CE2B744BD4610FCF2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 07B0
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: rWrXsyVEhac6AwqeFMzKVJu3KC0jp40/rd44VNxOf2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:24:f6:43:93:3c:e2:b7:44:bd:46:10:fc:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=cf74a235f4d893128946d7a15a70fe304bd68890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:49:bc:ad:b8:4f:51:72:ae:f0:cf:1b:9f:
43:c5:14:2d:a7:db:8a:e0:78:a2:87:ae:dd:86:02:
9d:b0:12:a9:13:a2:6a:45:47:97:2e:27:4e:a8:d8:
85:80:98:c8:11:bf:dc:06:5a:6c:70:e5:62:59:85:
00:8a:ba:73:ce:34:21:e9:cd:c0:62:7d:0e:8e:91:
eb:46:be:48:13:f6:75:f5:7b:8c:7a:f4:16:a2:8c:
4a:7a:86:11:55:f6:37:d3:22:7d:8b:81:83:4d:c8:
8e:8f:cc:c9:a0:1f:cc:21:f1:96:fb:49:15:99:29:
51:a2:0f:b4:19:8f:24:35:7a:35:d3:be:b9:8e:aa:
2b:a3:44:9f:ea:ca:9c:1f:42:5e:36:3f:d6:8e:45:
bb:99:ed:cf:79:a0:f9:28:7b:a6:d5:f2:86:27:2b:
e8:94:0c:a8:3d:13:ea:66:9a:82:ab:69:cf:19:52:
d8:ee:31:d5:c8:8b:58:0a:52:64:42:01:17:86:5f:
a4:49:d7:ab:87:d4:95:6c:75:ed:a4:f6:b6:95:50:
25:ea:e8:f0:5b:e0:20:6b:5e:81:b4:06:d5:17:6f:
48:26:f1:59:39:26:66:20:93:92:75:50:ab:bd:d8:
22:5c:5b:93:31:af:e1:0c:65:41:cd:cb:d0:f9:b9:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:74:A2:35:F4:D8:93:12:89:46:D7:A1:5A:70:FE:30:4B:D6:88:90
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a9:ef:72:61:9a:0f:55:4b:f7:20:5d:33:05:f0:a2:dd:50:
67:36:7e:e2:d4:7c:15:b3:74:16:90:7c:fe:6f:61:be:da:bd:
fa:ee:f6:f0:d8:44:ec:f2:0e:61:74:67:5c:ed:ec:ea:c2:0e:
a7:a6:15:2d:1c:bd:c8:2c:3f:db:7e:c3:c7:60:53:ab:04:d8:
6f:fd:80:5b:4b:d0:ef:0e:a6:0b:7c:6d:03:e7:21:66:df:c5:
b1:99:eb:5d:02:cf:d3:71:4f:79:ba:d2:b6:cb:b3:94:6c:d8:
e3:d7:fa:b9:6e:6d:a8:0d:af:6d:f3:e3:bf:fd:d5:c8:7a:cd:
76:fa:67:f4:72:b6:81:6d:31:3d:b4:f1:d7:fe:a5:9c:7f:31:
dd:7f:d9:35:95:27:13:f0:03:6c:dd:6f:af:03:52:7e:4d:68:
14:2a:03:ea:e8:c6:ff:8e:01:4e:ad:a1:7a:d2:aa:e3:42:80:
77:44:b9:e9:f6:e9:ac:f2:91:6c:c6:16:2c:d6:e0:54:77:b0:
b3:93:a6:4a:a7:73:0b:24:95:4c:eb:8c:41:59:95:7c:e3:f8:
2e:15:1b:df:b7:4c:10:d6:70:75:b4:f5:91:1f:c3:53:68:b6:
77:81:8c:69:7f:7c:3f:1c:d9:40:85:d6:f9:29:78:12:ac:a6:
48:46:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:40 2026 by rpki-client