Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: zZOVnc2JlN+3BNiRvdaCK1oDO1kLQccxYSaTjOzAQcY=
Subject key identifier: 89:C6:B2:69:48:65:BA:7A:D4:13:28:F3:59:42:AE:6C:B8:2D:8E:00
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019CAD59D9D69919EAD9D7CB42DAEB06C933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0383
Signing time: Mon 02 Mar 2026 07:01:12 +0000
Manifest this update: Mon 02 Mar 2026 07:01:12 +0000
Manifest next update: Tue 03 Mar 2026 07:01:12 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: 3eRolTc4L1KRhWKKMQeZPO0yPUAy2DNYZWjYKXL6iOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d9:d6:99:19:ea:d9:d7:cb:42:da:eb:06:c9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Mar 2 07:01:12 2026 GMT
Not After : Mar 3 07:01:12 2026 GMT
Subject: CN=89c6b2694865ba7ad41328f35942ae6cb82d8e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:39:93:ad:f4:7d:a1:dc:2e:ea:5d:47:3e:
f1:63:9f:5c:90:66:e3:2a:05:47:18:e1:17:ac:87:
06:34:7d:2c:ee:64:94:13:de:d3:0a:a7:db:49:42:
13:b0:81:74:5f:be:75:99:6f:42:0a:ac:13:07:f6:
f4:00:48:66:25:d3:be:7d:bb:dd:8b:4a:94:48:01:
eb:25:b1:d6:40:42:53:0f:35:7b:34:be:11:6f:d5:
3a:be:7d:f7:41:2d:32:c6:1d:7b:61:fd:d7:04:6b:
66:03:76:45:af:02:2d:e9:c7:b9:ea:04:f8:37:ff:
92:58:c3:37:95:57:e2:ed:77:d1:1e:79:00:4f:3c:
af:2b:a9:c9:42:1f:43:3a:90:dd:29:03:74:db:46:
82:32:96:c2:10:5d:13:a0:51:e1:46:b4:92:cb:e1:
4b:20:5b:7e:86:b2:5e:f1:ee:76:fc:76:16:89:31:
58:f5:23:0e:23:bf:f9:ef:17:c0:05:5d:c4:b5:64:
6e:60:f7:c1:42:cb:0b:c6:06:14:92:59:26:78:d5:
40:ec:e2:de:e7:5f:71:25:36:0a:d3:b5:7c:9a:3e:
96:44:ba:e2:f8:c3:16:9e:7d:f7:96:b5:de:2a:f4:
aa:b1:03:4f:2e:76:d3:ca:a1:78:4e:b0:98:e2:a3:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:B2:69:48:65:BA:7A:D4:13:28:F3:59:42:AE:6C:B8:2D:8E:00
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:7e:d0:d0:71:dc:80:d4:5f:8d:6f:51:aa:46:76:3c:9f:
86:49:44:7d:10:6c:27:8d:b4:cc:ca:05:35:58:94:0b:dd:4b:
bb:a6:40:be:fc:e4:5b:60:f9:25:92:97:33:35:47:b6:e7:10:
a6:1a:6f:d3:d1:de:b5:3b:c4:aa:ee:4b:4c:4b:b4:f7:22:c2:
6d:78:0b:b2:c1:a6:1c:5d:a3:30:03:27:22:e6:c9:88:83:3a:
7b:75:39:01:f4:c1:81:11:45:a2:2b:d1:2e:2b:f8:a1:51:04:
a5:90:d1:5c:41:5f:16:6b:a3:2c:a0:dc:ab:8a:d4:29:f5:2e:
d5:ec:5d:1b:ca:ba:71:a2:7c:86:34:f7:c9:69:01:f7:e3:3f:
f4:a7:ed:e3:b9:be:d5:41:7d:6d:42:0e:8c:10:25:8e:c0:8c:
fd:7b:e3:50:75:41:d8:39:85:1a:08:e5:fc:1a:90:ac:e9:18:
ef:03:4c:37:f1:82:23:09:6a:02:d9:bd:84:25:e8:0c:a0:f5:
7f:d7:be:83:3c:7e:06:db:cc:28:bb:90:05:c2:c4:67:12:c7:
82:6c:64:64:f8:f0:d2:0a:06:9f:bf:71:14:32:d2:29:5e:b5:
78:89:a5:f8:55:e2:15:bf:16:b5:c6:a2:4d:d1:2c:ea:e5:36:
94:57:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:39 2026 by rpki-client