Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: mngim9hsCY3t3v3vXEHU6xARVXXxCxUS2OPhOaIW490=
Subject key identifier: BF:3F:D1:EE:ED:B6:C9:75:4C:D1:16:4E:47:C3:6C:A5:92:82:22:40
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019DCF07A68FFF6D7B277BA551BAA8981278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0419
Signing time: Mon 27 Apr 2026 13:01:18 +0000
Manifest this update: Mon 27 Apr 2026 13:01:18 +0000
Manifest next update: Tue 28 Apr 2026 13:01:18 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: MrOrGNiWyfpTlKcYdvYOdaqvrDX273kkpgdzRH0RVNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:a6:8f:ff:6d:7b:27:7b:a5:51:ba:a8:98:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Apr 27 13:01:18 2026 GMT
Not After : Apr 28 13:01:18 2026 GMT
Subject: CN=bf3fd1eeedb6c9754cd1164e47c36ca592822240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:b1:a0:79:d7:1f:06:8f:f7:c7:d5:9b:cf:
34:8a:5d:a1:56:00:b3:7a:17:eb:11:3a:35:77:a3:
dc:f0:96:02:e5:db:28:de:70:2f:5e:a5:3e:1b:aa:
7d:90:e3:1d:4f:8d:bb:a7:6c:16:6d:df:60:e4:44:
b2:9a:de:6c:1d:75:5e:d6:10:3d:b4:7d:68:b6:95:
cc:d8:74:5c:30:e3:2e:74:0e:f4:9a:d7:b5:1d:35:
ac:b6:d3:c3:8e:68:f0:8c:67:40:84:f8:f2:eb:9a:
1c:ba:93:f5:cf:15:3a:4f:55:e2:4b:09:58:5e:9e:
9e:a6:6c:b3:7c:9b:4d:60:b1:10:34:f8:22:34:c7:
5d:93:18:1f:39:ce:8f:e0:9f:9b:c7:dc:3c:e5:06:
6e:06:62:11:de:d2:e0:34:a8:24:09:ba:b2:99:53:
d1:e6:73:ec:b9:2a:a5:06:dc:cc:96:8e:7e:d0:40:
11:db:ba:60:ee:cc:14:96:8d:8f:42:a7:e1:5c:20:
5d:ad:ea:78:eb:68:77:c3:7d:0e:68:dc:4f:ae:fd:
ef:9a:dc:d0:df:e3:2b:a0:23:8d:18:68:ec:b7:91:
69:f9:00:85:4d:69:09:bd:b7:c9:41:3a:36:a0:7e:
fd:5a:73:60:6a:79:b3:fe:b9:dd:e0:40:94:f8:de:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:D1:EE:ED:B6:C9:75:4C:D1:16:4E:47:C3:6C:A5:92:82:22:40
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a1:ca:3b:35:cb:fc:35:a7:57:88:65:91:c2:cf:c4:b4:e1:
e6:90:22:85:d0:ff:f2:a0:ce:36:21:df:15:89:11:b5:df:88:
b2:d6:de:36:3e:e7:d5:4a:3b:46:de:3c:55:53:e2:d7:a4:57:
34:ef:a2:57:37:cd:6b:84:b8:7a:c6:8f:3a:ba:25:2f:ab:43:
43:8b:6d:32:1e:9e:2c:ea:c3:22:91:67:87:0f:82:0e:76:a6:
c7:7f:e4:ea:d6:12:73:ee:3a:5c:e7:5b:98:34:7a:b3:09:2c:
84:0f:2f:16:da:77:4b:7e:02:3b:1f:cc:1d:bc:77:53:b3:99:
ab:34:c0:85:23:07:88:95:ee:33:e3:8d:ef:7b:d8:51:5e:34:
65:68:26:d8:72:58:70:5a:f9:f6:25:e5:76:1f:de:3c:00:c7:
f8:8a:c2:8b:18:74:b0:d1:9e:2c:82:9e:f8:3c:ae:d5:cb:58:
06:1e:55:62:31:1e:ba:f6:d2:cc:49:b4:c0:5b:dd:58:d5:35:
0b:4c:3d:b5:a5:2a:a8:5f:bd:30:d7:76:c8:1f:a3:77:93:77:
87:18:35:30:f5:d3:4e:e6:92:66:bc:1e:97:30:bb:47:35:9e:
90:c9:80:c6:07:40:06:b5:2a:a6:5c:53:a5:7d:db:c0:3c:28:
94:33:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:28:49 2026 by rpki-client