Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: f4GSTTkskMb3kMXaUGy3FkEggc9jFFRSMe8YW+bt+ag=
Subject key identifier: 1E:5B:7C:1E:C5:C1:8A:FE:DA:0A:E3:2E:5D:C1:14:74:AA:00:D6:2E
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019D28F2F3110776EC1C0694D111FB7DA672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 03C3
Signing time: Thu 26 Mar 2026 07:01:43 +0000
Manifest this update: Thu 26 Mar 2026 07:01:43 +0000
Manifest next update: Fri 27 Mar 2026 07:01:43 +0000
Files and hashes: 1: BnRZ0tQMHSFHvwxC0tXZ-PUsMHQ.roa (hash: TAh5QaQuqgpbIowIM8hALI3Mw0s8maTCBaFr1b1SU9Q=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: kuAN66zjVX8vIJW4up/Au+/0pTCXRy+DsSdNrJs8iqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f3:11:07:76:ec:1c:06:94:d1:11:fb:7d:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Mar 26 07:01:43 2026 GMT
Not After : Mar 27 07:01:43 2026 GMT
Subject: CN=1e5b7c1ec5c18afeda0ae32e5dc11474aa00d62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:1e:d9:01:45:d0:54:96:56:28:11:e7:5c:
31:3d:a5:5d:9b:e5:eb:8a:57:ee:b7:57:c2:6f:4c:
77:a4:e7:ee:38:ea:21:23:7a:6b:68:9b:19:c7:09:
57:70:f1:b2:d1:b3:51:38:c2:9d:6a:e3:65:db:15:
bf:30:df:15:01:05:f4:d1:48:f4:6d:ae:bb:0a:b8:
53:b5:3a:2d:c2:7b:0d:fb:52:56:a8:72:b5:75:6c:
3b:93:b8:23:a3:e4:6d:f7:06:c6:7e:03:7a:a5:27:
61:8d:13:79:72:c8:fc:f4:4d:63:97:5b:30:02:56:
4f:6d:de:13:5e:42:e8:26:ef:5a:50:43:88:e5:58:
52:8c:99:92:f5:e8:6b:74:fe:27:15:4a:75:8e:e6:
61:07:54:89:45:ad:c8:fd:99:06:a1:e6:cd:1b:ea:
12:65:89:db:65:5a:28:79:d2:77:ad:4a:2e:ab:92:
9c:81:ea:74:2d:74:38:8c:73:dc:b5:73:6d:62:49:
36:7f:9d:0a:ef:e8:2f:44:49:2b:ff:e2:37:01:10:
7a:df:dd:5f:bd:94:9d:b0:1a:ec:97:d8:b3:0d:03:
94:45:85:1f:0b:56:ab:e1:d5:c0:06:56:8d:52:af:
2c:1d:ee:08:35:46:6d:21:27:7b:eb:62:81:b0:7b:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:7C:1E:C5:C1:8A:FE:DA:0A:E3:2E:5D:C1:14:74:AA:00:D6:2E
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:81:f4:24:2d:fc:0a:6c:3a:f6:e8:7d:18:6c:67:f6:f2:58:
18:e4:80:d0:aa:ab:1e:61:10:19:ce:bb:8a:28:20:52:92:d3:
88:f1:fd:55:d4:4f:07:d9:38:c8:ed:91:90:92:a8:0a:a8:29:
52:37:b9:a0:d4:bb:54:94:ef:6f:6a:31:4b:fa:73:ae:4b:85:
27:a6:db:7e:4e:8f:32:9c:4f:b6:d3:20:2e:fa:0e:e1:b2:70:
d8:9d:7d:df:84:e3:49:81:43:f2:5a:c9:a7:1f:87:57:07:20:
7d:6e:a7:e9:fd:20:85:ed:e4:c7:10:29:18:8b:05:f5:ac:ae:
21:00:48:bf:ba:cc:2f:c7:45:c3:9c:4c:91:ed:f9:56:82:e0:
db:6c:c6:27:b6:29:08:04:80:57:eb:ac:1c:94:30:c4:74:83:
8a:31:80:31:00:c2:d9:b6:c5:30:c8:1d:9a:44:cc:ed:fe:22:
c1:81:d8:07:7e:4a:f5:89:9e:50:19:80:08:a4:ec:a7:2e:a3:
af:0b:00:02:b9:f7:8f:ff:cb:94:87:0d:d0:3a:18:b2:f2:ad:
29:fe:54:59:7e:44:f4:89:8a:cf:34:b6:3d:a7:f5:a5:95:49:
42:89:18:a0:fa:50:90:27:b1:49:22:08:b8:ea:83:6c:a0:cc:
b4:67:c9:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8vMRB3bsHAaU0RH7faZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0
MjQ5MzgwHhcNMjYwMzI2MDcwMTQzWhcNMjYwMzI3MDcwMTQzWjAzMTEwLwYDVQQD
EygxZTViN2MxZWM1YzE4YWZlZGEwYWUzMmU1ZGMxMTQ3NGFhMDBkNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Ue2QFF0FSWVigR51wxPaVdm+Xr
ilfut1fCb0x3pOfuOOohI3praJsZxwlXcPGy0bNROMKdauNl2xW/MN8VAQX00Uj0
ba67CrhTtTotwnsN+1JWqHK1dWw7k7gjo+Rt9wbGfgN6pSdhjRN5csj89E1jl1sw
AlZPbd4TXkLoJu9aUEOI5VhSjJmS9ehrdP4nFUp1juZhB1SJRa3I/ZkGoebNG+oS
ZYnbZVooedJ3rUouq5Kcgep0LXQ4jHPctXNtYkk2f50K7+gvREkr/+I3ARB6391f
vZSdsBrsl9izDQOURYUfC1ar4dXABlaNUq8sHe4INUZtISd762KBsHvUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5bfB7FwYr+2grjLl3BFHSqANYuMB8GA1UdIwQY
MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt
ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk
LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIH0JC38
Cmw69uh9GGxn9vJYGOSA0KqrHmEQGc67iiggUpLTiPH9VdRPB9k4yO2RkJKoCqgp
Uje5oNS7VJTvb2oxS/pzrkuFJ6bbfk6PMpxPttMgLvoO4bJw2J1934TjSYFD8lrJ
px+HVwcgfW6n6f0ghe3kxxApGIsF9ayuIQBIv7rML8dFw5xMke35VoLg22zGJ7Yp
CASAV+usHJQwxHSDijGAMQDC2bbFMMgdmkTM7f4iwYHYB35K9YmeUBmACKTspy6j
rwsAArn3j//LlIcN0DoYsvKtKf5UWX5E9ImKzzS2Paf1pZVJQokYoPpQkCexSSII
uOqDbKDMtGfJ1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:59 2026 by rpki-client