Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: +HtJEQ6VoCO7BRU8twLUomKfGTV4cBjfd5nd8CU/K2k=
Subject key identifier: DD:F4:75:DC:C8:42:C1:15:AA:50:83:FB:AA:FF:6B:BC:C7:01:9F:F3
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 019D25BA09778B356D238F8F256890650F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 07A7
Signing time: Wed 25 Mar 2026 16:00:42 +0000
Manifest this update: Wed 25 Mar 2026 16:00:42 +0000
Manifest next update: Thu 26 Mar 2026 16:00:42 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: /s473jht4mn+6t5vmpIoB2JdRZ2aBZJ0qUjhhjqZ+LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:09:77:8b:35:6d:23:8f:8f:25:68:90:65:0f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Mar 25 16:00:42 2026 GMT
Not After : Mar 26 16:00:42 2026 GMT
Subject: CN=ddf475dcc842c115aa5083fbaaff6bbcc7019ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:e7:b2:a4:3f:e4:55:a6:de:d0:5b:f0:41:
ca:72:b4:ec:ea:bb:8c:b7:21:47:e3:a6:a4:bf:77:
69:02:05:db:f9:cb:ba:90:52:b1:05:a7:37:e5:7f:
2c:ab:26:a9:4d:0f:27:9a:c7:3d:ed:32:c2:61:90:
23:e8:fa:11:4f:fe:b7:66:5b:10:7f:b6:33:d1:21:
a2:3e:cc:56:e8:13:65:67:f9:ad:14:90:bf:a8:99:
a8:dc:8f:24:75:00:0f:f9:de:ba:48:11:a3:5a:21:
3f:06:0e:46:0e:ea:42:97:ac:bc:65:79:08:5e:2c:
af:85:66:ed:2a:1c:b0:e2:20:61:ab:88:a6:82:ca:
9c:04:54:d9:0f:20:87:49:48:f6:29:be:8f:be:a0:
8f:67:e5:14:2b:43:d6:f0:e1:dc:5f:50:04:33:94:
32:c4:bc:43:21:41:96:6d:9a:6e:64:85:26:e7:c0:
04:26:56:01:43:1b:d9:c6:63:79:7b:83:27:6e:c4:
de:55:d6:d5:a0:70:f9:1a:db:15:02:1f:cc:0d:7d:
75:31:d1:2c:0b:e5:89:b6:64:0a:99:60:0d:47:7c:
95:84:e2:f3:6d:07:26:2f:a7:08:9f:a2:f2:49:bf:
ca:32:ee:d0:8c:3b:7a:0b:32:4b:d4:73:5d:06:22:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:75:DC:C8:42:C1:15:AA:50:83:FB:AA:FF:6B:BC:C7:01:9F:F3
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:60:d3:c7:69:59:17:14:4b:3f:2f:64:68:cc:22:e5:63:
e1:49:fe:22:33:93:af:48:b0:0d:c3:04:ca:41:02:99:a4:bc:
52:df:51:e4:0a:a9:6e:04:79:8d:0b:66:4e:a1:7f:63:e2:00:
87:cb:23:95:76:8b:f6:9c:33:32:a3:a5:e1:ee:51:3a:9a:08:
d4:0e:1b:67:7d:5a:0a:f8:2b:02:59:b7:6a:d7:a8:b5:2c:1f:
ca:3d:59:92:20:b7:9e:f5:9d:71:7d:dc:81:e7:a3:06:ce:40:
7b:97:8f:07:f4:d7:52:9d:60:95:f1:b8:31:fa:bf:0d:28:84:
2a:5d:f1:b2:98:73:50:eb:d9:ec:83:0c:61:b4:5d:c0:70:df:
59:d3:7b:c1:bc:2d:0d:8c:02:c3:24:a3:d9:99:a1:10:86:47:
96:fd:f3:02:5c:e8:e5:59:20:95:98:6e:9c:01:fb:13:49:6f:
7f:9b:44:59:7c:69:51:2a:c0:21:2e:97:12:6c:75:77:06:28:
6f:d8:f1:96:22:be:66:7b:e4:87:f0:67:3b:3d:11:24:5a:89:
cf:67:91:f1:3a:a6:4a:75:8e:c9:4e:73:c2:a5:ad:90:86:83:
86:88:07:b8:6d:48:3e:12:98:b7:61:3d:60:34:e0:bb:0f:3a:
d5:67:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:33 2026 by rpki-client