Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: wqq7SXfQZrPxYvzRc7cvztL0E3jVKeW5mEhv9BMKfhk=
Subject key identifier: 28:70:0D:D2:8A:5F:94:A9:35:DD:E6:A4:93:5C:9A:4B:72:2D:CC:4B
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019D9AE3572F9B5779C19ACF3EABFCEDB41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 03FE
Signing time: Fri 17 Apr 2026 10:01:23 +0000
Manifest this update: Fri 17 Apr 2026 10:01:23 +0000
Manifest next update: Sat 18 Apr 2026 10:01:23 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: 24SjkvbC5Scbe2520JrHnoNiFCsgCtA/dxYAkN3ZTO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:57:2f:9b:57:79:c1:9a:cf:3e:ab:fc:ed:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Apr 17 10:01:23 2026 GMT
Not After : Apr 18 10:01:23 2026 GMT
Subject: CN=28700dd28a5f94a935dde6a4935c9a4b722dcc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:b3:42:e5:78:a0:e9:35:40:c3:15:a8:25:
3e:a6:21:1b:07:e4:0c:12:65:f6:12:3b:91:89:d5:
81:3f:70:43:5b:f3:b7:60:f0:8a:b0:a5:9f:9b:76:
5e:ec:be:44:36:97:47:c2:ec:36:bd:68:bc:a9:b8:
de:a6:a2:d1:62:65:5c:4c:fb:de:0f:e3:ce:72:ea:
b2:ef:ca:c6:e1:3d:cb:80:4d:4d:de:f6:af:8a:bb:
eb:2a:97:50:1d:55:81:88:7f:00:33:d2:ca:2d:88:
b6:4c:f8:3e:39:f6:d4:1f:b4:bd:bf:d6:b6:e8:c4:
bc:b7:98:c3:ed:82:e2:71:a5:ed:81:c6:33:0c:06:
73:27:44:7e:ec:04:1d:51:da:4c:76:c2:b1:13:5e:
75:ca:34:e7:a6:d1:4f:0f:cd:23:25:9f:0e:f4:d8:
59:40:f5:29:4d:be:53:13:3a:bc:d5:11:89:5e:cf:
d9:6e:12:dd:d5:d2:b4:9d:b2:40:35:d0:c2:ba:40:
87:f6:2b:7b:18:87:84:54:d0:85:14:64:c8:3e:2c:
1d:e5:0b:30:df:25:ac:cd:5e:eb:05:dd:a3:d4:47:
77:0e:34:b8:ba:08:72:7a:43:a7:c7:8b:d4:99:6d:
66:e9:fb:ee:c4:79:97:47:cd:fc:3b:59:74:2d:a0:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:0D:D2:8A:5F:94:A9:35:DD:E6:A4:93:5C:9A:4B:72:2D:CC:4B
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:30:41:45:ce:c9:63:2b:7c:35:0e:54:29:47:af:20:7d:52:
55:2c:4c:68:ef:af:78:1d:e5:f9:4b:c6:6a:23:cf:dd:69:87:
d4:f4:4d:c8:4c:65:0d:8b:bb:85:04:a9:aa:b5:e5:83:d0:f8:
5f:a0:6b:04:c7:72:e1:fc:b8:f7:47:d4:33:ef:02:32:c5:eb:
fe:9a:12:73:5f:eb:71:cd:42:ce:8c:d6:a6:84:9a:1e:cb:a5:
fc:ab:cd:af:7f:b0:7d:ae:00:bf:4e:0a:50:bc:78:9c:3d:59:
ec:e4:9c:7e:6c:73:76:55:b5:e4:0f:a8:78:c1:80:11:ac:5e:
7c:5f:41:a8:d1:0d:b7:81:74:ed:63:3c:67:3d:66:1e:78:d5:
92:a0:5b:e8:9a:c0:a5:d0:d3:d7:9c:3b:e7:8d:03:e6:91:9a:
0d:0d:29:a6:d9:2d:9c:7d:03:21:e8:6e:85:1b:d3:78:40:dd:
c0:03:2d:8f:f8:ad:55:17:fc:36:4f:b6:17:d9:58:1e:f0:6f:
f7:7d:df:84:39:9e:9e:60:6a:e8:f7:b7:c9:bc:ac:03:85:eb:
ad:84:da:a7:33:c6:1e:c4:09:99:71:53:d5:7f:f8:2e:51:fe:
74:90:05:32:ba:db:8b:3e:d0:53:66:43:8d:60:b9:c6:d5:88:
9b:7f:3c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a41cvm1d5wZrPPqv87bQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0
MjQ5MzgwHhcNMjYwNDE3MTAwMTIzWhcNMjYwNDE4MTAwMTIzWjAzMTEwLwYDVQQD
EygyODcwMGRkMjhhNWY5NGE5MzVkZGU2YTQ5MzVjOWE0YjcyMmRjYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3uzQuV4oOk1QMMVqCU+piEbB+QM
EmX2EjuRidWBP3BDW/O3YPCKsKWfm3Ze7L5ENpdHwuw2vWi8qbjepqLRYmVcTPve
D+POcuqy78rG4T3LgE1N3vavirvrKpdQHVWBiH8AM9LKLYi2TPg+OfbUH7S9v9a2
6MS8t5jD7YLicaXtgcYzDAZzJ0R+7AQdUdpMdsKxE151yjTnptFPD80jJZ8O9NhZ
QPUpTb5TEzq81RGJXs/ZbhLd1dK0nbJANdDCukCH9it7GIeEVNCFFGTIPiwd5Qsw
3yWszV7rBd2j1Ed3DjS4ughyekOnx4vUmW1m6fvuxHmXR838O1l0LaByJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChwDdKKX5SpNd3mpJNcmktyLcxLMB8GA1UdIwQY
MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt
ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk
LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzBBRc7J
Yyt8NQ5UKUevIH1SVSxMaO+veB3l+UvGaiPP3WmH1PRNyExlDYu7hQSpqrXlg9D4
X6BrBMdy4fy490fUM+8CMsXr/poSc1/rcc1CzozWpoSaHsul/KvNr3+wfa4Av04K
ULx4nD1Z7OScfmxzdlW15A+oeMGAEaxefF9BqNENt4F07WM8Zz1mHnjVkqBb6JrA
pdDT15w7540D5pGaDQ0pptktnH0DIehuhRvTeEDdwAMtj/itVRf8Nk+2F9lYHvBv
933fhDmenmBq6Pe3ybysA4XrrYTapzPGHsQJmXFT1X/4LlH+dJAFMrrbiz7QU2ZD
jWC5xtWIm388cQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:32:52 2026 by rpki-client