
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: 9MQMUhNa9todUXdUNlvfEbIG1Pums0d9vBMOWHk+yMA=
Subject key identifier: D0:F4:9F:38:63:ED:65:95:E6:1B:3D:C0:41:B2:01:45:60:E5:26:0E
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019EBBEC3EB50B3A6D2CD28AECA982760378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 0466
Signing time: Fri 12 Jun 2026 13:01:22 +0000
Manifest this update: Fri 12 Jun 2026 13:01:22 +0000
Manifest next update: Sat 13 Jun 2026 13:01:22 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: DG1hV3eyhrKlAn2a0jEHSauE+npYu3vdG86vY4z4Ny0=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:ec:3e:b5:0b:3a:6d:2c:d2:8a:ec:a9:82:76:03:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Jun 12 13:01:22 2026 GMT
Not After : Jun 13 13:01:22 2026 GMT
Subject: CN=d0f49f3863ed6595e61b3dc041b2014560e5260e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:49:15:43:38:c9:6c:11:95:04:03:c9:f5:
98:f7:98:d9:52:84:6d:b5:0d:19:c6:66:82:e2:d4:
0f:a3:26:a5:86:c1:f1:a9:c2:37:95:49:2c:65:b5:
f7:b5:81:d6:9f:9f:e6:85:db:c5:7d:b0:92:1d:22:
c5:54:b4:c5:58:71:1c:32:ea:3d:f6:7a:d2:96:61:
8a:43:01:73:80:b0:b7:cd:e0:89:55:e5:8a:53:83:
92:3e:93:0a:29:5c:6f:6f:d9:02:12:1f:06:e6:ed:
ba:31:c9:8d:86:b0:27:d7:a1:6a:7f:b7:a4:7b:d9:
42:27:e3:40:c5:cb:43:b4:fb:4a:d4:0f:cd:e9:33:
9e:e9:ef:cc:83:b9:bd:ee:f4:b7:21:6a:3c:13:a2:
3c:77:41:52:ec:d9:9e:b6:ac:a6:18:25:86:3f:04:
ba:ef:ed:42:a0:5f:ab:62:49:d5:fd:92:ff:15:7e:
d6:4d:8f:cd:29:07:de:5d:48:a2:c1:9f:39:fe:56:
7c:76:c8:d4:20:f2:0a:ee:01:8e:1c:c2:7f:44:03:
fb:ea:28:e7:1e:f2:d8:4f:35:d1:2c:cb:e8:c1:80:
a5:5c:d6:b9:84:df:c9:37:80:09:c9:67:4b:7a:22:
42:7f:d8:47:6f:6d:b4:5a:5f:b3:57:03:48:d6:4b:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:9F:38:63:ED:65:95:E6:1B:3D:C0:41:B2:01:45:60:E5:26:0E
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b1:d9:f4:90:cb:fc:a6:d8:ce:3b:82:9d:c4:e7:10:2c:83:
e8:67:0f:a1:57:b5:6f:52:10:38:35:2b:a0:8b:18:11:d7:76:
00:25:18:80:d6:2f:16:5b:81:05:f2:b4:84:a1:7d:4a:f1:0d:
04:56:22:c4:e0:e6:88:0c:36:a5:cb:95:58:1c:eb:e6:ad:f1:
8a:df:3b:68:da:b3:69:ae:61:be:64:c0:d6:d0:92:f3:8b:b8:
3b:9c:59:7c:89:b5:c6:3b:b2:7b:d9:2c:98:89:19:69:01:9c:
8b:e1:f6:b3:34:75:3f:17:97:a1:24:31:ea:d4:bf:59:1f:ec:
52:3c:3d:10:b4:c2:d0:44:79:23:24:48:3d:e6:8c:48:ab:b5:
21:cc:b3:bd:99:3e:29:1b:ca:6b:09:de:d6:5f:04:dc:20:0c:
17:1a:ae:51:f6:a3:5b:3d:f5:dc:62:e7:42:80:5b:0b:f5:d8:
69:e7:ab:9c:52:bc:49:16:0d:09:91:ee:2f:fd:62:21:15:ab:
7b:dc:ee:9d:c7:80:2e:bb:b5:f8:32:89:bc:95:98:9e:d2:cb:
c3:65:6f:1b:4c:51:8e:ed:53:a5:c0:42:91:13:bf:1a:c5:fd:
60:1b:d6:60:3f:0c:20:c5:bc:1e:e0:f0:ae:d0:1d:cc:d1:1b:
02:4c:d6:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ677D61CzptLNKK7KmCdgN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjM5OWIxMjkwY2Q0MTlhNzhiZDJmYjMxMWUzYmM3ZGY5
ZjVmMWYwHhcNMjYwNjEyMTMwMTIyWhcNMjYwNjEzMTMwMTIyWjAzMTEwLwYDVQQD
EyhkMGY0OWYzODYzZWQ2NTk1ZTYxYjNkYzA0MWIyMDE0NTYwZTUyNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz5JFUM4yWwRlQQDyfWY95jZUoRt
tQ0ZxmaC4tQPoyalhsHxqcI3lUksZbX3tYHWn5/mhdvFfbCSHSLFVLTFWHEcMuo9
9nrSlmGKQwFzgLC3zeCJVeWKU4OSPpMKKVxvb9kCEh8G5u26McmNhrAn16Fqf7ek
e9lCJ+NAxctDtPtK1A/N6TOe6e/Mg7m97vS3IWo8E6I8d0FS7NmetqymGCWGPwS6
7+1CoF+rYknV/ZL/FX7WTY/NKQfeXUiiwZ85/lZ8dsjUIPIK7gGOHMJ/RAP76ijn
HvLYTzXRLMvowYClXNa5hN/JN4AJyWdLeiJCf9hHb220Wl+zVwNI1ksRtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND0nzhj7WWV5hs9wEGyAUVg5SYOMB8GA1UdIwQY
MBaAFDEjmbEpDNQZp4vS+zEeO8ffn18fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYt
Mjg4NDEwMzc3NmM4LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYtMjg4NDEwMzc3NmM4
LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7HZ9JDL
/KbYzjuCncTnECyD6GcPoVe1b1IQODUroIsYEdd2ACUYgNYvFluBBfK0hKF9SvEN
BFYixODmiAw2pcuVWBzr5q3xit87aNqzaa5hvmTA1tCS84u4O5xZfIm1xjuye9ks
mIkZaQGci+H2szR1PxeXoSQx6tS/WR/sUjw9ELTC0ER5IyRIPeaMSKu1IcyzvZk+
KRvKawne1l8E3CAMFxquUfajWz313GLnQoBbC/XYaeernFK8SRYNCZHuL/1iIRWr
e9zunceALru1+DKJvJWYntLLw2VvG0xRju1TpcBCkRO/GsX9YBvWYD8MIMW8HuDw
rtAdzNEbAkzW3Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 16:00:44 2026 by rpki-client