
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: z7+cwEKnHZJF2uTJc2Z561yEUL2G8ZFX3eA0I5a8EVE=
Subject key identifier: 57:68:B4:8A:18:FE:D1:29:7B:C0:4A:58:70:A4:26:16:3B:30:FC:43
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 01A0CBC7BB5A67F3E515BEEAEABEEBAC5F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 05A5
Signing time: Wed 23 Sep 2026 01:00:59 +0000
Manifest this update: Wed 23 Sep 2026 01:00:59 +0000
Manifest next update: Thu 24 Sep 2026 01:00:59 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: /3Gil1pxR47RcAK2/U2E3oIA2w0a8q4BHLt0JZENeb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:bb:5a:67:f3:e5:15:be:ea:ea:be:eb:ac:5f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Sep 23 01:00:59 2026 GMT
Not After : Sep 24 01:00:59 2026 GMT
Subject: CN=5768b48a18fed1297bc04a5870a426163b30fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:7f:6b:91:10:ee:e1:9b:5a:de:b1:b0:63:
d9:4c:12:df:8e:cc:4f:c5:78:eb:8b:9a:79:e3:f2:
3a:b0:b1:bf:0e:d9:83:45:b2:ef:6c:74:4d:a9:dc:
8c:24:6c:69:18:d5:2a:02:9f:d1:b1:80:c1:60:72:
57:fa:2e:a2:5c:fe:3f:fa:fc:b6:26:d7:45:4e:2d:
16:bf:eb:c8:0c:af:66:35:0a:18:05:fb:45:45:21:
e3:2e:31:30:60:ca:fb:53:e5:d1:5d:e4:4c:cc:a8:
90:88:ec:2b:74:29:4f:28:a7:30:79:56:3b:26:02:
bc:b3:2a:60:04:a8:28:bb:12:dc:b4:48:f8:03:26:
c9:eb:fc:53:8c:ab:7a:88:23:06:86:31:62:8c:7d:
a4:92:ae:06:4c:33:01:d8:8f:fb:93:c0:c3:f1:fc:
58:2c:a9:e5:00:68:45:b6:b9:35:14:51:82:40:08:
ad:da:0b:0e:04:92:55:ec:da:cf:21:54:33:29:cf:
c7:7b:77:57:3a:eb:2b:c0:5f:b0:f2:0f:26:0f:81:
36:56:31:d8:96:ec:96:4f:68:10:d4:51:8c:00:72:
a6:7b:ba:61:45:d7:bd:89:45:67:f7:fc:fe:f1:90:
0d:72:33:8d:3e:34:05:c3:7f:14:5a:b8:82:5d:14:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:B4:8A:18:FE:D1:29:7B:C0:4A:58:70:A4:26:16:3B:30:FC:43
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8b:f6:da:56:92:79:b8:ca:aa:44:0d:f7:6f:4e:7b:b1:40:
36:3e:01:4d:3f:28:08:f6:83:f9:62:85:ae:5a:7c:8c:2d:e6:
8e:d9:b5:97:20:b8:56:31:5c:8d:16:28:a3:3f:82:94:54:e3:
a1:cd:4c:17:1c:93:c3:7f:a8:6e:1c:00:47:b2:08:e8:c5:ac:
bb:bf:03:01:be:4a:42:fb:78:f2:80:ab:c0:d2:bf:40:2b:4c:
6e:00:df:1e:f8:23:12:dc:a2:6a:24:8e:cc:e9:b9:37:cc:30:
15:59:07:ca:d9:a7:e1:78:25:39:1b:32:e3:9f:ce:8a:65:ad:
d6:81:d2:41:94:f6:fa:a0:e4:ce:24:c1:59:73:d6:d7:f5:90:
7d:38:64:03:db:06:f8:d0:fe:1d:22:d3:23:66:ec:7f:e1:41:
9b:ce:08:b4:86:61:66:21:12:ce:27:ab:e2:54:96:93:44:c3:
89:83:64:21:4b:3c:de:76:6d:d4:c3:20:4c:2c:9d:a5:3f:7a:
88:b5:68:29:29:7d:a6:4c:19:98:73:0a:93:4e:96:63:0f:0e:
c5:91:d7:45:59:81:d8:19:1d:e5:08:cc:fc:33:ae:a6:6d:ac:
18:b6:40:0b:c5:7d:61:2d:27:ba:df:eb:20:3f:db:35:81:87:
56:ad:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:05:41 2026 by rpki-client