Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: L0kxyRbUIRHelts8gomKXomzWPXRpIVOkcNdWu4lubg=
Subject key identifier: F1:56:5B:8A:6E:10:E7:DD:B2:FC:CD:D3:EE:09:BD:97:35:71:83:20
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 01A180ABC498DA9C0E3048E3CA545BF6CAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 05D5
Signing time: Wed 28 Oct 2026 04:01:42 +0000
Manifest this update: Wed 28 Oct 2026 04:01:42 +0000
Manifest next update: Thu 29 Oct 2026 04:01:42 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: 2LKUiSSXA7huhiOKQ6RGZ7UT4WpfUCSSW/wtQCsoY5U=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:c4:98:da:9c:0e:30:48:e3:ca:54:5b:f6:ca:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Oct 28 04:01:42 2026 GMT
Not After : Oct 29 04:01:42 2026 GMT
Subject: CN=f1565b8a6e10e7ddb2fccdd3ee09bd9735718320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:da:59:eb:c1:d2:71:e9:9f:c9:32:48:8d:
4c:a8:e9:b4:7e:de:66:5c:94:33:1c:52:3c:f7:b4:
2e:1c:ec:f7:8e:b1:f2:56:60:0d:bc:95:5b:d3:84:
f9:df:20:bb:a6:f1:4f:d1:52:f4:f9:25:a8:96:3f:
f9:f0:cc:10:5c:ef:90:a2:99:88:1a:1c:7d:36:c8:
c3:c7:d0:ab:c9:dc:2e:53:79:8c:21:2f:5c:ea:35:
99:dc:d3:25:aa:f7:53:9d:12:b8:48:a2:51:18:d5:
59:75:19:c5:8c:5a:95:90:27:0f:c6:1a:d7:a5:f2:
a6:5c:bf:1c:03:d0:b2:8a:d7:3f:ea:89:29:ca:02:
56:80:de:12:a0:45:72:be:59:5e:60:68:b1:b4:24:
bd:69:2a:e1:ea:3a:84:3f:a4:ee:d0:d9:eb:ab:42:
53:c2:0e:ef:9f:49:14:97:d9:08:ed:a4:d9:3a:08:
14:66:6f:e9:35:89:60:43:3a:1b:78:87:f2:b6:06:
75:16:24:15:c3:e5:7c:d5:ce:bc:19:62:3d:33:74:
73:99:9e:f6:53:b4:61:17:bb:9f:fc:a4:43:13:b5:
38:90:8c:fe:ee:4a:2e:cc:33:32:80:46:32:70:73:
d9:70:db:0e:a4:95:7b:5e:84:cf:7d:e1:6d:0a:59:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:5B:8A:6E:10:E7:DD:B2:FC:CD:D3:EE:09:BD:97:35:71:83:20
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:53:75:06:dd:ee:f5:54:5b:ed:c7:a0:59:fa:39:c5:13:de:
a8:db:3e:fc:c7:e2:a9:d0:55:23:1c:64:22:96:93:63:53:74:
0b:25:99:1f:7f:11:55:12:1f:81:c7:47:12:01:06:a5:ad:47:
b7:19:a2:e3:99:e0:61:50:65:9c:cd:1d:11:39:92:ee:cb:00:
1c:e0:d6:10:b1:28:99:90:e3:a8:4e:6c:55:c1:ba:d3:af:78:
54:ce:81:6a:1f:eb:52:c4:d8:4f:bd:99:fb:e4:f2:db:56:41:
1f:28:0a:16:ff:75:86:3d:c6:79:5a:b9:90:ff:00:47:4a:da:
51:84:3f:f0:e9:7f:38:14:63:ee:97:79:fe:a4:47:d2:70:00:
81:7e:83:37:db:92:67:3e:10:77:a8:fe:c2:6e:61:15:82:b8:
53:b8:8d:77:35:43:5b:cc:a3:ef:2d:fe:86:d7:e0:fd:0d:2d:
2b:11:bd:6c:5d:fa:7e:b5:3c:dd:c1:1c:f5:1b:9c:31:0d:a2:
b8:0f:b0:91:ca:52:7c:28:06:c6:89:16:e2:ab:89:c3:d8:f5:
ba:df:57:4c:f4:40:f9:fd:d4:c2:aa:aa:74:f0:3a:b0:e4:10:
5d:a1:9e:c6:b5:27:7c:54:57:57:c6:db:3e:ce:b2:27:15:33:
58:a8:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:36:23 2026 by rpki-client