Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: J46yVh6V4VMhKIMO+PDBkEccOUOLGHhXv6XmnNmpOAY=
Subject key identifier: 8D:FD:B9:42:17:67:46:0D:AB:30:D6:85:1D:0B:2F:D1:91:AB:7E:54
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 01A0897A4A41EE1CC1DB9ACC23E57F2612B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 0555
Signing time: Thu 10 Sep 2026 04:01:27 +0000
Manifest this update: Thu 10 Sep 2026 04:01:27 +0000
Manifest next update: Fri 11 Sep 2026 04:01:27 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: AFDls7F0CCWraW/0eCc1lIQChZuq2csycQV8JBFsRCs=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:4a:41:ee:1c:c1:db:9a:cc:23:e5:7f:26:12:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Sep 10 04:01:27 2026 GMT
Not After : Sep 11 04:01:27 2026 GMT
Subject: CN=8dfdb9421767460dab30d6851d0b2fd191ab7e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:17:3e:98:a2:87:02:db:4a:77:ba:4f:f5:
f2:57:1a:61:b3:8d:f7:92:a8:45:95:cc:fa:a2:0a:
8d:66:db:15:fb:11:93:e5:af:e2:3c:5e:ef:2b:17:
73:5c:ad:b9:6e:96:ef:9a:74:d2:2c:c0:f0:7e:a4:
f8:f7:1e:0d:da:7f:f6:22:78:45:2e:0a:ce:47:40:
1e:8a:3e:f8:c8:8a:a0:e2:c0:db:21:91:fa:ef:d9:
c7:ff:05:1e:07:39:fc:90:6c:19:1e:05:f4:c0:7b:
a8:7b:8f:0c:da:28:85:65:90:ef:4e:6f:da:41:f0:
92:96:3c:4e:e9:47:fc:a9:68:c7:28:ef:9a:b7:f6:
b1:44:fa:bc:b0:bc:f1:89:63:d7:42:7b:fd:5c:2d:
d9:9c:53:7d:f6:46:45:23:87:52:66:7e:b4:3d:a8:
7b:d7:3d:15:2a:2d:c4:4e:c0:ed:68:aa:31:79:25:
d9:1a:f1:fe:f3:5e:20:70:36:03:18:cb:c4:15:00:
a2:d3:75:bd:7d:1c:57:63:85:ae:dc:ee:07:f0:9b:
e0:73:8e:8e:46:68:f3:ec:b4:66:61:80:d1:8b:d6:
e0:e7:3f:15:20:76:89:8b:b8:df:fb:7e:40:4a:69:
f0:25:f1:6e:ea:46:66:92:01:85:fa:e3:a8:05:3e:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:B9:42:17:67:46:0D:AB:30:D6:85:1D:0B:2F:D1:91:AB:7E:54
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:bf:a7:1c:61:aa:2d:b8:45:e2:33:80:ba:7b:60:75:4c:cd:
a5:2b:9e:5c:24:80:e3:c7:5e:c8:2d:d6:34:fe:6a:4a:92:35:
e3:c6:ae:9b:3c:d1:99:d0:ea:5c:43:3a:31:86:ab:d4:ef:ec:
bd:02:ae:66:be:0d:04:7d:6a:7b:f8:e4:8c:af:64:5d:c3:7a:
6f:8c:ef:c2:ce:96:2e:d6:31:a5:c6:95:b0:d9:ed:80:67:ba:
72:98:ac:2c:98:32:9b:ac:ca:26:71:7b:44:ec:c2:34:26:d4:
cc:30:30:7a:9d:04:48:03:84:96:bc:7e:d6:99:ca:54:61:21:
3f:88:36:c2:d2:5a:8d:80:f4:9a:75:68:5a:04:12:ff:a9:aa:
88:9a:e3:3a:d2:65:d9:e2:41:eb:01:a4:27:7f:6c:62:ba:6f:
d6:ab:69:4a:75:d6:fc:17:2b:c1:bd:31:57:8e:9d:79:7d:28:
b8:5d:cb:4c:fc:aa:1b:ff:b3:c4:a8:70:52:1a:8b:83:c5:73:
e5:8b:26:ca:21:d1:da:9a:6e:b9:f8:1c:08:65:6f:0f:41:c6:
dc:2b:c5:03:f3:44:4c:7c:f8:8a:33:9d:49:f5:27:2d:38:04:
be:4d:d4:a1:51:6d:8b:57:18:95:b0:a2:79:5c:45:d3:02:f4:
bc:c6:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:49:06 2026 by rpki-client