Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: ccwG/jEvWkouzcisCx0SyCo3X9o6U3VQwvee3/eXRw8=
Subject key identifier: FD:90:E2:3A:AD:88:67:9D:DB:BF:2B:FF:AB:D3:71:46:38:88:8C:80
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019F92ECB5AD4128080CA55A50818361D875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0503
Signing time: Fri 24 Jul 2026 07:00:14 +0000
Manifest this update: Fri 24 Jul 2026 07:00:14 +0000
Manifest next update: Sat 25 Jul 2026 07:00:14 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: tC2wquKJhyc66pdJiuW3Uu9tSlD75LdJ6ob7vQLvypU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:b5:ad:41:28:08:0c:a5:5a:50:81:83:61:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Jul 24 07:00:14 2026 GMT
Not After : Jul 25 07:00:14 2026 GMT
Subject: CN=fd90e23aad88679ddbbf2bffabd3714638888c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:55:5f:c9:23:d5:6b:f8:6a:ec:59:3c:68:
fb:9f:8b:55:bf:ea:f3:80:d1:5e:78:3f:4e:d7:71:
68:19:f1:6a:52:c7:46:64:18:1f:cb:0f:a8:23:c6:
62:23:d2:12:50:82:6e:e6:88:8e:c6:f4:1c:ea:dd:
4a:6c:8b:2e:7f:10:78:02:fb:cc:cd:38:b2:64:d0:
90:5f:b9:63:98:a5:45:fd:5a:85:39:06:07:ae:49:
2a:2f:93:28:71:41:aa:e5:3e:15:dc:5c:40:dc:55:
e6:54:97:d0:1d:ca:5b:de:00:11:86:48:e4:ae:58:
69:1f:5e:dd:46:6d:38:b5:5e:0e:7e:a5:22:71:42:
11:51:e7:d5:99:66:ff:92:7f:1e:13:56:11:6a:4b:
84:76:9e:ff:26:b5:d7:e5:0b:a7:4c:33:cf:82:2a:
b6:a6:78:8f:e1:06:98:d6:a6:36:90:8a:36:c0:72:
4c:42:51:9d:22:a5:15:5a:be:2e:e5:96:d3:67:cf:
40:14:0b:9a:74:81:c1:5a:6a:83:44:cb:70:3d:09:
7c:a9:fc:5d:9e:ae:53:e0:98:11:c8:22:06:c7:7a:
31:8b:5d:e4:6d:cb:92:74:f5:2e:5e:4a:5a:68:b4:
7f:4e:14:a3:df:d2:0e:66:3d:56:d4:52:f8:14:6f:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:90:E2:3A:AD:88:67:9D:DB:BF:2B:FF:AB:D3:71:46:38:88:8C:80
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f5:71:c7:fc:0a:51:cb:2d:fd:6b:80:7e:eb:2c:03:5a:d5:
d2:dc:91:12:d9:77:3c:85:d5:96:21:27:ef:da:d7:fd:50:30:
25:e4:36:31:91:15:04:dc:79:1d:d9:af:5b:9f:35:a0:5b:af:
a9:82:ac:d7:1e:9d:84:06:26:8d:c6:79:76:f3:db:c5:10:33:
e9:17:16:65:4d:33:cd:68:40:7e:a4:07:42:4b:9b:67:ac:b9:
ed:ba:85:4e:e9:49:ff:df:da:97:99:89:27:30:49:8c:6f:e3:
0e:9a:99:77:a9:e1:a0:9d:a9:be:2e:77:d2:d0:4f:1b:82:ae:
85:e0:2e:aa:f8:20:74:dc:bb:c1:6d:f4:03:0d:de:5e:e1:80:
62:60:ec:d8:0f:6a:8d:08:e9:b5:a3:90:89:cf:b5:bb:68:b8:
90:5e:26:34:9f:c6:4e:33:ca:fc:c2:41:09:dc:df:d4:f7:22:
c9:7a:7b:ea:de:4d:e3:f8:57:6e:a4:d3:64:5a:cd:16:d0:c1:
80:a8:89:1d:aa:b1:07:c1:2a:94:6a:d1:54:8b:f7:58:2d:39:
e9:2b:18:9a:d9:3f:45:3e:a8:91:63:55:2a:9a:e3:4a:cc:96:
b9:64:67:75:be:83:4c:35:33:10:b0:0a:de:5b:ee:2b:44:dd:
f7:e0:7f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7LWtQSgIDKVaUIGDYdh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0
MjQ5MzgwHhcNMjYwNzI0MDcwMDE0WhcNMjYwNzI1MDcwMDE0WjAzMTEwLwYDVQQD
EyhmZDkwZTIzYWFkODg2NzlkZGJiZjJiZmZhYmQzNzE0NjM4ODg4YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQpVX8kj1Wv4auxZPGj7n4tVv+rz
gNFeeD9O13FoGfFqUsdGZBgfyw+oI8ZiI9ISUIJu5oiOxvQc6t1KbIsufxB4AvvM
zTiyZNCQX7ljmKVF/VqFOQYHrkkqL5MocUGq5T4V3FxA3FXmVJfQHcpb3gARhkjk
rlhpH17dRm04tV4OfqUicUIRUefVmWb/kn8eE1YRakuEdp7/JrXX5QunTDPPgiq2
pniP4QaY1qY2kIo2wHJMQlGdIqUVWr4u5ZbTZ89AFAuadIHBWmqDRMtwPQl8qfxd
nq5T4JgRyCIGx3oxi13kbcuSdPUuXkpaaLR/ThSj39IOZj1W1FL4FG/J/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2Q4jqtiGed278r/6vTcUY4iIyAMB8GA1UdIwQY
MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt
ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk
LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/Vxx/wK
Ucst/WuAfussA1rV0tyREtl3PIXVliEn79rX/VAwJeQ2MZEVBNx5HdmvW581oFuv
qYKs1x6dhAYmjcZ5dvPbxRAz6RcWZU0zzWhAfqQHQkubZ6y57bqFTulJ/9/al5mJ
JzBJjG/jDpqZd6nhoJ2pvi530tBPG4KuheAuqvggdNy7wW30Aw3eXuGAYmDs2A9q
jQjptaOQic+1u2i4kF4mNJ/GTjPK/MJBCdzf1PciyXp76t5N4/hXbqTTZFrNFtDB
gKiJHaqxB8EqlGrRVIv3WC056SsYmtk/RT6okWNVKprjSsyWuWRndb6DTDUzELAK
3lvuK0Td9+B/Bg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:44:31 2026 by rpki-client