Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: sGOm0VxncnCgVIufM3zt1Njhh3Cgxa22egLada5eM7w=
Subject key identifier: 28:BF:44:73:9A:47:9A:E1:93:85:3F:53:01:C2:A7:BD:5D:13:53:F6
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019CB091B7C6C2D743169684C0FD86DB3D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 0357
Signing time: Mon 02 Mar 2026 22:01:05 +0000
Manifest this update: Mon 02 Mar 2026 22:01:05 +0000
Manifest next update: Tue 03 Mar 2026 22:01:05 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: If6HYhcLnADwcyiplFvun8jxWrezGcUiI46q8o6DDwo=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:b7:c6:c2:d7:43:16:96:84:c0:fd:86:db:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Mar 2 22:01:05 2026 GMT
Not After : Mar 3 22:01:05 2026 GMT
Subject: CN=28bf44739a479ae193853f5301c2a7bd5d1353f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:50:da:5f:2f:70:b4:61:67:9a:92:44:55:
e9:23:4b:0b:f9:98:55:06:ca:74:66:95:fd:0b:f2:
fb:94:2f:cd:96:ac:60:95:e3:53:98:c6:fc:58:9f:
2d:98:da:06:43:92:b3:55:06:a7:6b:6e:4c:fa:59:
52:f4:36:a4:b0:fe:9e:37:cc:90:75:97:8c:ed:ae:
53:12:b7:a9:3b:88:a8:fb:b8:ba:9f:5d:fd:22:45:
7e:8b:5e:b7:ee:f3:f7:1e:79:d5:2b:42:27:19:88:
fd:26:21:76:3b:e6:08:4a:0e:4a:28:eb:d7:b1:ec:
ef:8f:3d:30:02:24:70:82:6f:91:a1:48:d6:01:4f:
2f:d7:ab:20:ce:73:e1:28:79:bc:5e:84:b4:7c:07:
1c:6c:6b:eb:ad:a4:ba:c4:98:8f:32:a2:4f:3a:fe:
7d:58:39:e2:7b:51:90:d2:a0:19:72:c7:e4:4c:7a:
9e:a8:ef:7c:8a:0e:c0:da:7a:98:7f:b8:0e:ec:70:
94:c8:84:05:90:69:e2:5c:a9:e4:ef:7b:80:d0:b6:
bb:94:6b:2b:cd:7d:aa:f2:ef:90:06:b7:c1:7c:47:
5b:14:f6:c0:7d:de:57:02:64:af:53:9e:30:90:9c:
0c:be:70:83:2f:57:b3:2c:eb:49:1a:6f:db:89:43:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:44:73:9A:47:9A:E1:93:85:3F:53:01:C2:A7:BD:5D:13:53:F6
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cf:ec:62:3f:a6:4d:ed:bf:bb:a9:16:99:2a:90:a4:d6:63:
4a:33:a5:f1:03:68:27:26:03:32:1a:5f:fb:f4:29:91:c4:da:
c4:f5:03:93:eb:a3:1a:64:0f:8a:41:29:0f:5e:d9:34:57:1d:
67:fb:c9:86:8c:a5:21:51:dc:b8:89:00:1d:87:54:e1:cd:5e:
2a:1a:ef:8f:45:03:18:11:ff:bb:a7:1d:7a:82:27:04:20:cb:
ca:41:6f:e4:33:cd:8e:fc:0a:88:64:85:6c:e9:dc:b4:23:aa:
53:98:63:02:8e:23:e3:99:d2:d9:71:3b:06:7a:57:ac:7e:4e:
0a:41:fd:65:d5:10:e4:06:66:07:03:0a:8f:98:b8:79:ec:4a:
77:73:a6:04:e1:2b:bc:db:b2:75:f6:6f:96:92:4a:65:df:92:
d0:3a:35:f0:6d:d8:5c:c4:a5:a5:b5:a4:0f:4c:51:d9:b3:d0:
53:d2:fa:b4:0d:73:9f:86:92:fa:cf:c3:8e:07:3a:3a:25:fc:
4c:e4:30:57:17:d5:29:68:9c:37:ca:87:bd:17:e6:4c:a1:37:
61:f1:d0:f9:69:18:a8:de:b1:9d:56:f7:45:e2:d4:33:01:bb:
e2:35:d9:4e:21:d7:ee:be:f5:1c:93:f7:a3:80:40:e0:e7:58:
78:30:be:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywkbfGwtdDFpaEwP2G2z06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjM5OWIxMjkwY2Q0MTlhNzhiZDJmYjMxMWUzYmM3ZGY5
ZjVmMWYwHhcNMjYwMzAyMjIwMTA1WhcNMjYwMzAzMjIwMTA1WjAzMTEwLwYDVQQD
EygyOGJmNDQ3MzlhNDc5YWUxOTM4NTNmNTMwMWMyYTdiZDVkMTM1M2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTdQ2l8vcLRhZ5qSRFXpI0sL+ZhV
Bsp0ZpX9C/L7lC/NlqxgleNTmMb8WJ8tmNoGQ5KzVQana25M+llS9DaksP6eN8yQ
dZeM7a5TErepO4io+7i6n139IkV+i1637vP3HnnVK0InGYj9JiF2O+YISg5KKOvX
sezvjz0wAiRwgm+RoUjWAU8v16sgznPhKHm8XoS0fAccbGvrraS6xJiPMqJPOv59
WDnie1GQ0qAZcsfkTHqeqO98ig7A2nqYf7gO7HCUyIQFkGniXKnk73uA0La7lGsr
zX2q8u+QBrfBfEdbFPbAfd5XAmSvU54wkJwMvnCDL1ezLOtJGm/biUPWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi/RHOaR5rhk4U/UwHCp71dE1P2MB8GA1UdIwQY
MBaAFDEjmbEpDNQZp4vS+zEeO8ffn18fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYt
Mjg4NDEwMzc3NmM4LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYtMjg4NDEwMzc3NmM4
LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8/sYj+m
Te2/u6kWmSqQpNZjSjOl8QNoJyYDMhpf+/QpkcTaxPUDk+ujGmQPikEpD17ZNFcd
Z/vJhoylIVHcuIkAHYdU4c1eKhrvj0UDGBH/u6cdeoInBCDLykFv5DPNjvwKiGSF
bOnctCOqU5hjAo4j45nS2XE7BnpXrH5OCkH9ZdUQ5AZmBwMKj5i4eexKd3OmBOEr
vNuydfZvlpJKZd+S0Do18G3YXMSlpbWkD0xR2bPQU9L6tA1zn4aS+s/Djgc6OiX8
TOQwVxfVKWicN8qHvRfmTKE3YfHQ+WkYqN6xnVb3ReLUMwG74jXZTiHX7r71HJP3
o4BA4OdYeDC+9A==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:02 2026 by rpki-client