Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: n9kgkI88yYuN1Ns2kQRxz+juQ4XKmpp6Qmm+VrDVszU=
Subject key identifier: 93:37:5E:73:9B:9D:AB:65:2C:37:55:84:62:75:40:48:87:B6:DF:50
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 01A0D56FCCA0B79EEC39893D69903854D135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 05AA
Signing time: Thu 24 Sep 2026 22:01:08 +0000
Manifest this update: Thu 24 Sep 2026 22:01:08 +0000
Manifest next update: Fri 25 Sep 2026 22:01:08 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: wfuzeu+5IOtl5llRC4uihQHRgsS1S2krzWuUHhAMK5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:cc:a0:b7:9e:ec:39:89:3d:69:90:38:54:d1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Sep 24 22:01:08 2026 GMT
Not After : Sep 25 22:01:08 2026 GMT
Subject: CN=93375e739b9dab652c3755846275404887b6df50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:c1:8a:76:0c:8e:f0:f5:9b:59:19:e6:fd:
1b:5e:d0:c4:c4:05:65:b0:e9:f1:a6:ed:38:5a:10:
95:c5:d6:f3:99:33:90:59:dd:10:12:7d:a7:fd:ba:
26:57:36:3b:56:a9:f8:50:af:0d:c4:98:61:c3:7a:
d2:eb:7f:24:d6:61:b9:18:0f:65:c4:d0:d6:b0:89:
95:f0:cf:4a:18:56:08:4f:68:d2:77:7a:d9:24:9e:
e6:e1:76:e2:05:4b:93:e9:d5:94:90:83:ab:19:b0:
12:a3:e1:0f:74:87:d5:12:f1:24:2d:34:98:d9:29:
be:57:bd:8a:e9:b3:0b:1c:60:f6:d2:e7:11:39:43:
56:b9:b7:3c:07:ac:f2:2d:95:1c:ee:58:de:c7:a5:
ae:23:8c:a4:62:68:5e:47:61:04:62:37:b1:1d:65:
b3:9f:6e:59:20:76:63:01:74:06:5b:d4:96:1e:18:
57:5f:b7:8b:87:07:c9:75:9e:3b:d6:3a:95:60:08:
c5:2d:16:89:99:e1:1d:ff:eb:8d:bf:fe:14:0e:8d:
71:b3:07:6a:27:66:df:67:7e:6a:1d:75:d8:30:76:
a3:19:60:6e:da:f3:ab:05:17:73:d2:18:9c:34:da:
3a:1f:04:51:f4:45:00:57:27:c8:39:2a:0a:6e:fa:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:37:5E:73:9B:9D:AB:65:2C:37:55:84:62:75:40:48:87:B6:DF:50
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:11:d6:b7:19:70:3f:ff:5c:3c:d9:ab:38:75:65:13:05:0d:
fa:ae:62:05:7d:29:67:78:b8:08:0f:e4:b2:94:0f:ff:3f:79:
40:b9:df:e0:72:8c:af:9e:31:20:18:c0:b7:fe:00:2a:a8:b4:
b2:1f:f2:4f:d0:54:b2:82:71:b2:ac:cb:03:98:9e:89:62:99:
76:58:c5:33:49:46:33:1b:0b:c2:59:79:54:c3:a9:b6:38:dc:
13:06:87:9f:48:cf:f8:01:2a:d9:45:74:f5:3e:83:a4:a7:05:
53:09:9f:0a:26:36:2d:b2:ec:95:7c:33:05:01:2d:21:10:fa:
78:c5:af:ca:95:96:69:30:58:d1:e0:ab:7b:70:dd:07:0c:e1:
90:1a:d0:30:70:43:23:95:ce:ba:f9:21:d3:13:d7:4b:5a:44:
70:a4:c2:69:01:a1:10:55:e8:e1:5c:ed:1f:29:cb:ab:b8:40:
a3:91:bc:7c:e5:8b:ff:5c:25:96:1f:b2:5a:4e:91:57:15:9e:
95:56:65:3e:e8:eb:99:2b:0d:b5:ee:9c:20:a1:f2:f6:a8:e0:
6c:52:a5:18:a2:3b:09:53:e9:d1:d4:33:1d:4f:31:37:f6:ac:
29:11:4c:8c:7d:8f:cd:e6:1f:c3:c5:fa:af:06:7a:fe:d8:0e:
90:68:64:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb8ygt57sOYk9aZA4VNE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0
MjQ5MzgwHhcNMjYwOTI0MjIwMTA4WhcNMjYwOTI1MjIwMTA4WjAzMTEwLwYDVQQD
Eyg5MzM3NWU3MzliOWRhYjY1MmMzNzU1ODQ2Mjc1NDA0ODg3YjZkZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd3BinYMjvD1m1kZ5v0bXtDExAVl
sOnxpu04WhCVxdbzmTOQWd0QEn2n/bomVzY7Vqn4UK8NxJhhw3rS638k1mG5GA9l
xNDWsImV8M9KGFYIT2jSd3rZJJ7m4XbiBUuT6dWUkIOrGbASo+EPdIfVEvEkLTSY
2Sm+V72K6bMLHGD20ucROUNWubc8B6zyLZUc7ljex6WuI4ykYmheR2EEYjexHWWz
n25ZIHZjAXQGW9SWHhhXX7eLhwfJdZ471jqVYAjFLRaJmeEd/+uNv/4UDo1xswdq
J2bfZ35qHXXYMHajGWBu2vOrBRdz0hicNNo6HwRR9EUAVyfIOSoKbvoUhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM3XnObnatlLDdVhGJ1QEiHtt9QMB8GA1UdIwQY
MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt
ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk
LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBHWtxlw
P/9cPNmrOHVlEwUN+q5iBX0pZ3i4CA/kspQP/z95QLnf4HKMr54xIBjAt/4AKqi0
sh/yT9BUsoJxsqzLA5ieiWKZdljFM0lGMxsLwll5VMOptjjcEwaHn0jP+AEq2UV0
9T6DpKcFUwmfCiY2LbLslXwzBQEtIRD6eMWvypWWaTBY0eCre3DdBwzhkBrQMHBD
I5XOuvkh0xPXS1pEcKTCaQGhEFXo4VztHynLq7hAo5G8fOWL/1wllh+yWk6RVxWe
lVZlPujrmSsNte6cIKHy9qjgbFKlGKI7CVPp0dQzHU8xN/asKRFMjH2PzeYfw8X6
rwZ6/tgOkGhkWw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:22:08 2026 by rpki-client