Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: wtnXQreldU0jF40kPl07AbfvJhyYq5oJ/zUT7skLGwA=
Subject key identifier: 07:7F:9A:A4:47:05:90:90:07:73:80:E7:C2:9D:32:6F:32:15:2A:B4
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019D37C05396BC7F6E720CC7DC47C7C9BDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 039D
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: IHhx0I2fDaJZLB+3FXmanW80G08a598HMkZkFbqPNnE=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:53:96:bc:7f:6e:72:0c:c7:dc:47:c7:c9:bd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=077f9aa447059090077380e7c29d326f32152ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:51:a3:9c:76:e2:00:da:aa:40:ea:ce:98:
40:88:8e:50:bc:fe:82:9b:ce:13:a8:b5:c1:e3:b9:
03:af:9a:f2:a9:fb:14:af:14:c4:c1:45:5c:a3:4b:
b2:c8:d7:0d:83:d0:6f:f0:db:19:0b:b7:96:69:69:
51:32:50:8f:97:30:fa:81:c9:ea:10:1c:ef:b7:2a:
05:75:7e:9a:9e:14:a8:47:9c:cc:89:8d:99:0e:4b:
c1:af:7c:76:e0:58:ee:54:a8:c8:36:ec:06:7b:e8:
0e:5c:a3:1c:70:d5:d7:11:db:e7:39:ee:8c:66:12:
38:72:0d:22:31:87:4a:b4:cd:37:50:0f:e0:8c:b5:
d6:5b:d0:18:a8:5f:a1:cb:2c:ec:25:92:13:ac:9f:
64:21:3a:68:f7:b9:7d:cd:a3:93:d2:ca:0a:65:04:
c3:58:ac:f9:f4:f6:e5:cf:8f:6b:f8:11:ef:0e:36:
d6:54:64:34:a6:a6:22:39:2f:eb:9a:a6:64:6e:8c:
7f:50:52:b1:1b:fa:21:99:ce:79:35:23:65:e4:45:
ea:c8:41:0b:e3:9d:a4:6b:00:93:fd:a0:1d:c8:00:
fb:59:b3:8e:94:8e:f1:91:ce:05:76:2a:6b:3c:5f:
bb:f2:50:39:04:c3:56:f4:98:43:25:36:8e:ad:83:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:9A:A4:47:05:90:90:07:73:80:E7:C2:9D:32:6F:32:15:2A:B4
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9d:69:f9:19:ef:ed:a4:7c:2e:2b:bc:ad:31:c2:9c:82:d9:
ef:98:02:5b:83:ab:b4:98:1f:de:ba:d7:76:37:54:11:7a:e1:
bb:55:0e:a8:91:ca:d1:5f:18:be:f2:cb:e3:9d:db:ab:95:15:
a3:5f:60:39:d3:96:04:5d:95:c2:ad:f8:77:c5:62:86:07:16:
31:b7:a0:93:60:01:bf:39:c0:f1:c4:c7:bd:e2:46:7b:1f:03:
80:e9:75:5e:cb:2f:aa:9a:0f:e0:91:c4:e6:d0:21:86:cf:ee:
74:81:0b:f0:e9:c6:f9:dd:24:70:67:fc:a0:79:b8:0a:7e:41:
34:c4:dc:35:fa:61:fb:2d:f2:a0:00:4c:8d:30:10:7e:ef:c8:
e0:ca:2d:0c:b5:de:7d:30:99:59:28:48:a0:1e:91:15:76:b1:
56:8e:c5:00:6a:7a:16:8a:7d:9b:a3:21:6b:30:47:d4:ff:6a:
8f:4d:89:c8:bf:23:41:66:4c:55:4b:20:b7:25:fd:90:ac:72:
bd:29:e2:90:ce:b8:fe:c2:c1:83:47:34:35:4e:c0:ac:03:a5:
87:82:0c:f8:5c:aa:a2:c0:d2:62:19:3f:f2:79:f5:4a:a1:61:
54:a0:d7:f2:6e:3c:b3:46:4f:7d:21:8c:ef:8e:81:b2:82:19:
f0:cf:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:24 2026 by rpki-client