Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: JF4J6jCKZ87Dhlnq49NmMezia9qOo2OjGTzfbVlfP3U=
Subject key identifier: B6:40:B7:21:3C:63:46:22:C3:E8:EC:9D:FE:0E:76:1D:3F:49:7F:E0
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 01A0D75FB44CB120A56D402B1AF301A2B43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 05AB
Signing time: Fri 25 Sep 2026 07:02:48 +0000
Manifest this update: Fri 25 Sep 2026 07:02:48 +0000
Manifest next update: Sat 26 Sep 2026 07:02:48 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: HgYpBdhTetcKhlUCqsX4wgI+uIsEYpr9o7z9uwEIvLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:b4:4c:b1:20:a5:6d:40:2b:1a:f3:01:a2:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Sep 25 07:02:48 2026 GMT
Not After : Sep 26 07:02:48 2026 GMT
Subject: CN=b640b7213c634622c3e8ec9dfe0e761d3f497fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:ca:4e:f2:e3:f0:8c:c6:54:68:62:3e:8f:
38:8f:5b:3b:74:9c:f0:b8:3f:6e:72:f8:e4:9f:86:
d4:98:e1:94:18:7f:2a:e7:9e:1c:5b:8e:fe:65:9b:
49:26:90:38:08:d0:2d:84:21:36:3d:29:67:16:20:
9d:ae:72:59:7a:1d:d4:dd:6d:82:1d:cc:0d:35:00:
9e:4a:1a:22:2d:0f:c3:03:65:71:1d:71:e8:e1:49:
52:56:7f:3e:d9:d3:6e:2e:0b:bc:93:03:10:a8:19:
f0:7e:23:51:50:c7:76:64:40:46:65:2f:ff:41:3b:
dc:0d:8f:5b:70:36:c1:2d:26:1c:00:12:de:01:67:
81:65:36:8d:a3:57:96:15:3a:a8:40:96:59:c0:bb:
83:20:51:25:be:97:b2:34:1e:43:ba:ea:67:cb:6d:
21:b8:ac:75:4c:14:2a:e1:6e:52:e8:40:cc:e5:56:
d9:45:e9:55:6c:91:96:e4:1c:b4:96:39:d4:c9:ff:
bd:75:9c:83:78:78:cd:af:d4:16:20:4b:d5:ef:13:
55:73:d4:4c:7e:69:38:58:b5:68:bd:8d:dd:7c:00:
54:43:84:02:a9:d4:67:60:7c:e9:1f:96:d1:18:66:
41:74:b9:c7:5b:5f:57:0b:bd:c8:89:b0:8e:06:0c:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:B7:21:3C:63:46:22:C3:E8:EC:9D:FE:0E:76:1D:3F:49:7F:E0
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b5:fc:8b:1f:aa:25:e2:39:f0:fe:f7:80:d9:ce:9b:ec:4a:
91:be:e0:5e:fc:f5:b8:2d:30:b5:16:d6:1b:9d:02:48:f0:82:
b0:87:a8:7e:e3:d5:12:36:45:d4:6e:c3:32:28:ee:4e:23:28:
fa:a2:95:98:36:a8:c4:b8:8b:ec:e7:27:ad:0f:3f:f6:52:43:
91:b0:9f:7c:3c:9c:6a:7c:80:11:4c:1b:90:da:26:5d:19:f6:
c8:2a:43:c6:49:a5:2e:69:82:24:92:8f:a7:00:d8:75:17:d1:
d6:16:33:23:34:83:2f:75:74:c6:3c:fb:9f:0d:83:fa:77:15:
db:ea:29:97:0a:78:41:d8:56:02:e4:e6:46:30:22:7a:76:d9:
94:4e:30:d8:83:3d:f0:86:12:4c:bd:96:d7:cc:ef:81:35:75:
a0:49:58:5e:35:1a:e4:18:9f:e5:68:02:7f:bb:07:08:1f:77:
f3:84:c1:1d:60:34:d5:67:8c:55:81:d4:2e:67:dd:fb:b7:bb:
16:e9:19:32:77:49:78:1e:4d:54:97:9d:30:75:76:dd:4d:30:
b2:28:4e:93:98:d4:6d:2b:48:64:1a:16:8c:01:b3:5a:b9:e8:
3b:62:84:40:85:23:57:b2:1a:ad:04:5f:ee:f4:6f:9b:63:d3:
72:28:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:09:17 2026 by rpki-client