Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: IUvSAoMu+JYUTjZqLs62BsPHq8oTgN+w3bVSmQ3vIwc=
Subject key identifier: 77:C0:BC:36:DA:D6:93:8D:A4:1E:07:32:BE:69:05:43:0C:BD:55:5F
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019E1E353D0368B6700ED6C6252DCD6C224B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0442
Signing time: Tue 12 May 2026 22:01:05 +0000
Manifest this update: Tue 12 May 2026 22:01:05 +0000
Manifest next update: Wed 13 May 2026 22:01:05 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: 5D70UqJA/DAgCTlZr5eag53JIKKHozIOuFsgqH2BqnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:3d:03:68:b6:70:0e:d6:c6:25:2d:cd:6c:22:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: May 12 22:01:05 2026 GMT
Not After : May 13 22:01:05 2026 GMT
Subject: CN=77c0bc36dad6938da41e0732be6905430cbd555f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:ad:8a:c5:89:b4:e0:42:32:27:a7:89:f7:
99:b4:91:2f:37:8e:e0:6e:ef:74:4e:2c:dc:f7:3a:
ab:0f:e6:11:dc:e9:8e:7c:32:68:27:fb:11:36:78:
e0:a3:38:79:b7:8c:04:f6:74:45:9c:29:38:43:f4:
2a:d7:09:7e:f8:6f:b4:7c:ea:c7:b7:51:cd:01:b1:
99:7e:c2:72:02:03:a3:1a:d6:3a:fc:d0:a2:b8:33:
6d:cc:31:2c:8f:58:dc:cd:7e:95:0a:86:b4:ee:b8:
0b:af:f6:b9:fd:39:c6:bb:1b:d9:04:5b:20:a7:a4:
4b:46:b7:c0:ce:97:fe:f1:7b:4d:3f:54:9d:ff:da:
07:87:5d:97:3e:7c:6c:41:09:08:da:76:36:80:c9:
c6:f0:c7:a6:18:41:89:34:2f:53:e8:3f:05:d1:80:
bc:59:ca:85:78:31:38:0e:0a:12:2f:2a:9c:c4:f4:
0d:69:11:24:4d:52:b6:64:bf:aa:cb:e9:42:38:ab:
b0:e9:1d:b9:be:9a:55:0b:f8:b2:d0:26:f4:1d:61:
f7:12:f7:71:54:c2:2e:33:86:7c:2b:1d:41:42:77:
50:9a:25:a8:35:11:c0:03:7e:9b:e3:3e:09:dc:eb:
fe:8d:52:0f:5b:0c:16:57:db:dd:b0:46:9e:36:49:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C0:BC:36:DA:D6:93:8D:A4:1E:07:32:BE:69:05:43:0C:BD:55:5F
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e7:dc:31:a7:32:46:b3:34:0d:64:51:5d:f5:d5:ca:4a:bb:
b4:3f:06:46:8b:45:85:01:00:e5:6f:b9:05:e3:c8:95:cd:44:
7e:e8:93:82:79:11:58:46:31:0d:43:3a:ac:1f:da:7f:a5:bc:
cf:75:24:5f:e4:99:98:54:a6:76:d5:c3:3e:53:a0:88:99:ee:
44:03:84:49:56:21:a5:cd:30:ff:3c:8f:ce:dd:d5:52:37:25:
e1:e9:ae:08:78:db:e3:91:7d:01:b0:7c:f5:ee:49:25:47:82:
f8:58:83:ef:ce:e9:1c:3e:bd:60:ce:5e:3d:eb:45:b9:22:5a:
b9:d9:47:d5:1c:c5:cf:3c:ba:60:5b:b9:3a:f2:d2:65:f3:9e:
fe:6f:54:0d:eb:f0:48:85:8b:d1:70:c1:64:27:e4:1a:93:b8:
5e:03:21:b6:8f:e6:a6:b6:e7:6d:27:9e:90:0d:5f:b5:60:b3:
28:64:be:e8:84:32:b8:ac:ff:2b:91:ad:ce:be:53:52:56:56:
bb:10:d2:ba:e7:91:c3:06:1f:49:64:27:6e:48:3d:e1:9a:c5:
d3:20:6e:96:2a:a5:eb:3c:90:cb:b1:ba:8a:c0:0c:99:7a:bc:
ac:55:89:d9:94:bf:bd:3c:0c:de:58:df:f2:2f:5a:3f:03:59:
ff:8f:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:29 2026 by rpki-client