Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: A9WIWSS7KiJF+gnGzKLJ9v24ZzVjXllDhXi8PrC8XmM=
Subject key identifier: 03:85:E8:2F:FA:0C:1D:2A:66:C9:3D:FD:5C:90:F8:C2:50:BC:92:51
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019CE55AFA190D6082EAD7A0CB95514B51EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 03A0
Signing time: Fri 13 Mar 2026 04:01:10 +0000
Manifest this update: Fri 13 Mar 2026 04:01:10 +0000
Manifest next update: Sat 14 Mar 2026 04:01:10 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: 9gr89so1bzgt2EhyiTAjUpazVNirK+Cx9YFZE9qrfVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:fa:19:0d:60:82:ea:d7:a0:cb:95:51:4b:51:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Mar 13 04:01:10 2026 GMT
Not After : Mar 14 04:01:10 2026 GMT
Subject: CN=0385e82ffa0c1d2a66c93dfd5c90f8c250bc9251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:f8:f1:7f:ef:3f:dd:10:ef:5e:00:da:1e:
76:67:5d:55:f0:a7:fa:67:6e:21:29:2f:a3:4a:b8:
df:04:e1:8c:e1:b8:b0:51:2e:b3:06:1d:e9:2f:84:
74:80:48:f9:b4:6b:9b:e0:77:11:9f:a5:db:34:b8:
58:8c:33:be:e4:19:13:b2:8c:00:b6:50:26:6e:8f:
a8:9f:fa:d7:81:6d:42:e9:38:bb:94:97:86:51:e4:
c9:fc:dc:25:2d:32:01:dc:43:dc:db:49:5e:b3:e8:
7a:f3:27:8e:c8:62:a3:4e:9a:76:70:43:9d:65:5c:
03:e7:a7:fd:65:83:6a:0c:26:98:e4:11:5b:e7:8c:
43:4d:c6:9d:33:99:33:7d:86:94:eb:08:3a:7a:47:
d8:00:fb:da:e9:38:90:fc:48:c5:4e:89:3f:69:57:
ab:fa:4b:4e:bf:45:4e:d4:2b:e3:77:fd:1f:cf:4c:
2e:90:61:39:39:0d:3a:d8:64:78:8f:4b:ff:68:8b:
8a:b5:05:4b:db:e3:50:b2:a9:27:a6:ac:01:00:2b:
32:b3:dd:bb:d3:d1:12:1c:15:cf:9c:2d:31:c7:bb:
60:7f:61:9e:f4:92:c9:45:0f:43:e0:8b:d5:2e:d9:
f5:5b:ad:71:1f:a3:fd:12:a3:99:57:cf:53:06:af:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:E8:2F:FA:0C:1D:2A:66:C9:3D:FD:5C:90:F8:C2:50:BC:92:51
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2a:90:ec:11:4e:c9:d0:86:4a:80:47:f7:ca:09:c9:fd:16:
bf:67:8c:35:1f:0b:90:2f:65:f6:c1:bd:87:b1:ae:c3:33:43:
4d:2f:78:a5:e7:8c:f6:a6:15:e5:ed:e9:22:2f:1e:8c:d7:28:
69:e6:fb:89:e6:d2:08:f0:52:04:e9:77:e9:88:c1:ea:05:29:
b5:29:ee:6e:ee:b7:46:95:bd:02:76:d9:68:9b:58:51:75:d7:
ad:a9:6a:3f:28:35:84:70:29:65:da:d8:95:25:6c:57:6c:54:
ec:e9:3c:26:a4:cb:2b:fd:dd:21:7d:d1:5e:44:13:b3:96:94:
28:40:6e:20:4b:b4:92:9c:82:69:fc:36:a1:f3:94:61:69:45:
ec:0e:a7:a0:55:50:de:d6:45:f9:34:d7:72:40:9f:d4:4a:71:
8d:4b:0f:ad:c2:cd:55:a8:20:1a:62:f7:c0:39:b3:63:93:4c:
c9:7f:8c:29:f1:cb:7a:0d:0f:4d:d4:82:e4:49:16:1f:6d:d9:
e5:8d:07:13:e3:a3:3a:4c:fc:88:60:79:34:e2:a7:9c:3e:96:
7f:39:e8:3f:bc:1c:7d:2e:b3:d3:63:f2:28:e7:67:7e:ac:8e:
d8:40:5e:b8:f7:3d:4c:b6:da:e9:b4:97:70:51:61:ce:ae:7f:
a3:3c:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:52:42 2026 by rpki-client