Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: SsEM232NxghV0m8FjFpyPfM9wv6eqDJPl7Yw+0zWhp8=
Subject key identifier: 20:3B:19:D3:86:57:5E:A1:93:1E:94:50:52:23:FF:2E:53:35:BD:99
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 01A17D73B53027F92169D0A922A6A97CB06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0601
Signing time: Tue 27 Oct 2026 13:01:37 +0000
Manifest this update: Tue 27 Oct 2026 13:01:37 +0000
Manifest next update: Wed 28 Oct 2026 13:01:37 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: URT7eOfdB/uWjLh2i6EfnqaRw1b6RLGbEQgAy6HZ90s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:b5:30:27:f9:21:69:d0:a9:22:a6:a9:7c:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Oct 27 13:01:37 2026 GMT
Not After : Oct 28 13:01:37 2026 GMT
Subject: CN=203b19d386575ea1931e94505223ff2e5335bd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:cf:88:32:4f:28:0a:a3:4f:79:a0:91:ef:
91:b4:e3:e5:6a:58:42:c6:e3:6f:1c:0f:43:47:88:
66:11:98:b7:aa:7a:76:47:bf:9b:01:b7:41:3c:9f:
cb:59:b3:7c:93:e8:e3:6e:62:f1:fd:8b:ea:8b:35:
de:e9:7f:da:5a:99:75:59:4f:0b:5c:14:c8:56:0c:
8d:5d:37:c7:e5:5f:c0:99:4f:32:23:1b:1a:76:b8:
97:19:02:6c:ad:b4:cf:9f:51:58:7d:7b:3a:d0:61:
91:df:af:8e:00:ba:9c:81:39:d3:c7:70:17:4f:28:
19:18:2f:f0:a3:dd:3c:9c:49:8d:a0:47:ab:1f:01:
df:ab:fb:f6:71:0f:ce:b9:5b:7c:d2:2b:c7:aa:a4:
93:73:a4:d2:5d:24:8d:61:c9:83:e2:0d:3d:4e:b9:
85:23:40:a9:f8:4b:2b:79:0c:94:d9:36:94:cc:cd:
c0:48:b8:79:be:04:87:a3:07:22:9b:1c:76:a0:44:
68:f6:f3:8a:d2:df:d6:33:45:20:a0:e9:c0:a8:6d:
e6:06:fc:df:b3:9d:15:5a:4f:ba:ff:bc:fb:80:b0:
c9:e4:93:2e:53:d6:69:09:bd:1f:af:fa:09:60:11:
dc:75:b0:ea:c5:48:97:17:ac:a5:f6:23:f1:98:2c:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:19:D3:86:57:5E:A1:93:1E:94:50:52:23:FF:2E:53:35:BD:99
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:df:11:d9:33:97:61:ae:13:72:46:ec:d6:94:ac:59:65:04:
5a:95:5b:9f:ab:28:b2:6d:c0:8f:0a:88:57:7e:03:94:29:c4:
14:a5:d9:b9:9a:a0:c0:cc:b4:56:fe:1d:6d:01:4f:20:34:6a:
73:f7:e4:89:70:a5:29:fc:17:43:88:e3:16:2b:20:e2:7f:70:
a3:ae:c6:ae:07:95:6e:1a:ab:36:aa:ef:1b:bd:30:05:26:81:
7d:84:e4:b4:53:59:7e:21:27:2a:28:e1:90:3a:8a:79:86:4c:
89:9c:55:2d:40:4a:d9:61:b8:2d:f2:09:08:91:01:1b:78:26:
cd:1c:07:d4:a9:cf:08:ec:0b:64:4f:ad:22:73:35:16:fd:d4:
17:2c:96:57:36:36:1a:cc:29:fa:77:1e:6e:18:0a:a8:6e:c5:
a7:6a:89:b2:0a:d8:a0:c2:c0:de:4c:87:3c:a2:fc:1f:ee:a1:
00:dc:a5:ce:a3:b8:f1:24:66:9a:51:99:ed:b3:dd:b7:1a:d0:
ea:c9:f5:20:54:c4:59:4f:5c:01:77:93:56:ca:29:28:4a:6c:
1f:e0:bb:2e:49:a5:a7:29:8a:cf:b0:92:99:d6:7f:5d:e5:25:
5e:e6:f7:7a:65:f0:ea:a6:d2:f5:bb:32:39:7a:c5:e0:91:94:
0b:34:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:19:23 2026 by rpki-client