Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: K/ZLxWewS1i0CjyBtpfPTnMAo5FrTa7G5LA6Enje7Pg=
Subject key identifier: 88:7D:28:B5:AF:BA:29:05:ED:12:22:97:8F:E7:50:88:DD:D6:F7:E9
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 01A08C0CCBD092EF70079DFD61764C94402F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0584
Signing time: Thu 10 Sep 2026 16:00:43 +0000
Manifest this update: Thu 10 Sep 2026 16:00:43 +0000
Manifest next update: Fri 11 Sep 2026 16:00:43 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: TJps7WyZehuwwWKHMY/nI/2TLC6/4MmEvdBUDtaaZqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:cb:d0:92:ef:70:07:9d:fd:61:76:4c:94:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Sep 10 16:00:43 2026 GMT
Not After : Sep 11 16:00:43 2026 GMT
Subject: CN=887d28b5afba2905ed1222978fe75088ddd6f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:df:e4:4f:2e:5a:15:ac:51:39:76:80:32:
0a:3b:0c:55:1b:c8:56:af:cf:39:7e:bb:54:4f:5f:
73:07:c0:95:c2:fd:75:3d:1d:5c:65:43:5c:09:de:
f1:87:e6:cc:43:ff:c4:86:a5:f3:af:fb:10:36:ee:
2a:3c:34:a5:f2:b1:fb:c8:7f:a3:da:5b:68:22:11:
8c:f0:ac:06:80:eb:60:e6:1c:58:49:23:27:a9:96:
b7:70:2b:fa:6c:4e:3e:74:4a:0b:6f:6e:f3:51:0a:
69:b6:85:a1:6c:26:79:46:00:38:b7:f1:f2:6d:59:
6d:f4:31:bb:e1:8b:e6:77:02:d8:fb:47:dc:f5:45:
9e:20:76:8e:f8:25:fe:54:9c:6c:1f:72:9d:6d:1f:
4a:ac:3b:ba:85:de:de:20:48:5c:94:74:74:ce:19:
cc:44:0b:97:2c:95:93:8e:4b:3c:aa:4e:67:a0:d4:
95:90:6a:32:6c:0e:d5:46:49:6f:01:59:8e:5f:0a:
7f:18:18:2a:55:55:0f:92:d7:84:ab:8e:f2:80:4a:
68:37:88:36:0b:0b:c0:de:89:80:6d:db:dd:0d:2f:
5e:7c:81:ee:54:3e:d5:2b:95:c3:f3:d9:5d:de:63:
ac:2d:a9:7e:ba:a1:20:17:41:ca:f6:41:c2:e7:bc:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7D:28:B5:AF:BA:29:05:ED:12:22:97:8F:E7:50:88:DD:D6:F7:E9
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:40:1c:5f:0f:02:ab:85:32:9b:75:db:1a:42:51:a3:98:
4f:01:be:dc:d4:b5:e7:32:55:12:81:80:fc:28:3a:25:59:a8:
55:de:47:cb:b2:21:c9:6d:70:13:06:d7:51:bf:49:bb:e3:38:
b4:74:6d:ce:14:d7:1c:0f:95:49:24:08:0d:e8:a2:e5:6c:3f:
04:8e:78:ae:7b:25:82:c2:82:d7:22:d7:1c:7e:14:5f:8d:cf:
d8:85:69:e0:a6:ad:7f:07:75:5d:a9:64:ba:42:6c:24:d6:43:
e2:4e:b4:bd:b6:e9:8d:3d:5c:16:4e:de:4b:9b:fd:3f:d7:93:
28:da:54:2d:71:54:a7:4a:7f:3c:d9:8d:b0:7a:f6:4e:a6:6b:
ec:2b:cb:13:ba:91:16:74:4f:31:cc:03:af:bb:ee:0e:63:1b:
7e:31:40:f5:e5:6c:5d:e9:f3:58:26:fa:7e:47:e2:66:80:b0:
39:ac:86:62:df:37:12:2d:17:90:28:e7:ee:d2:ca:23:cb:3d:
c1:de:30:9c:36:66:20:10:30:11:a6:60:0a:84:67:67:a0:b5:
01:e2:92:6f:5c:dd:a1:d9:ea:c0:e6:91:09:0e:ae:0d:46:45:
42:44:9d:8f:de:9c:bb:cf:07:d4:cf:0b:c3:37:17:16:3d:05:
7a:9c:3c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDMvQku9wB539YXZMlEAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0
MjQ5MzgwHhcNMjYwOTEwMTYwMDQzWhcNMjYwOTExMTYwMDQzWjAzMTEwLwYDVQQD
Eyg4ODdkMjhiNWFmYmEyOTA1ZWQxMjIyOTc4ZmU3NTA4OGRkZDZmN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWTf5E8uWhWsUTl2gDIKOwxVG8hW
r885frtUT19zB8CVwv11PR1cZUNcCd7xh+bMQ//EhqXzr/sQNu4qPDSl8rH7yH+j
2ltoIhGM8KwGgOtg5hxYSSMnqZa3cCv6bE4+dEoLb27zUQpptoWhbCZ5RgA4t/Hy
bVlt9DG74YvmdwLY+0fc9UWeIHaO+CX+VJxsH3KdbR9KrDu6hd7eIEhclHR0zhnM
RAuXLJWTjks8qk5noNSVkGoybA7VRklvAVmOXwp/GBgqVVUPkteEq47ygEpoN4g2
CwvA3omAbdvdDS9efIHuVD7VK5XD89ld3mOsLal+uqEgF0HK9kHC57wxDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh9KLWvuikF7RIil4/nUIjd1vfpMB8GA1UdIwQY
MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt
ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk
LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQdAHF8P
AquFMpt12xpCUaOYTwG+3NS15zJVEoGA/Cg6JVmoVd5Hy7IhyW1wEwbXUb9Ju+M4
tHRtzhTXHA+VSSQIDeii5Ww/BI54rnslgsKC1yLXHH4UX43P2IVp4Katfwd1Xalk
ukJsJNZD4k60vbbpjT1cFk7eS5v9P9eTKNpULXFUp0p/PNmNsHr2TqZr7CvLE7qR
FnRPMcwDr7vuDmMbfjFA9eVsXenzWCb6fkfiZoCwOayGYt83Ei0XkCjn7tLKI8s9
wd4wnDZmIBAwEaZgCoRnZ6C1AeKSb1zdodnqwOaRCQ6uDUZFQkSdj96cu88H1M8L
wzcXFj0Fepw8Rw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:38 2026 by rpki-client