Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: un51gWE9U7V99krJQm91fXBp66XeGy6mAh+nwB+I9aY=
Subject key identifier: 58:86:DE:42:DB:BB:FF:2B:80:05:12:76:B6:13:74:A2:CA:C3:FD:B1
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 01A0EBF9DDFCA61E389D2584E07699AC5F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 0588
Signing time: Tue 29 Sep 2026 07:03:36 +0000
Manifest this update: Tue 29 Sep 2026 07:03:36 +0000
Manifest next update: Wed 30 Sep 2026 07:03:36 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: Ah0ZOsg1CbqxF6VIqA0NAyHxs1NZsNyUI+dqcDnuT0g=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:dd:fc:a6:1e:38:9d:25:84:e0:76:99:ac:5f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Sep 29 07:03:36 2026 GMT
Not After : Sep 30 07:03:36 2026 GMT
Subject: CN=5886de42dbbbff2b80051276b61374a2cac3fdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:e1:0e:eb:89:b7:39:22:c5:f9:ed:26:90:
7d:99:18:8e:ee:f7:9f:9b:dc:71:74:9b:b2:9c:e4:
0e:6f:02:be:63:d5:52:59:54:88:86:f6:27:de:21:
41:da:c3:2e:bf:ee:34:fd:cd:4b:b0:9c:b4:16:4a:
50:7a:3f:cd:93:fb:8a:50:d2:fb:b5:80:ff:86:31:
2d:4e:4a:d8:d6:9e:df:cd:58:e7:2e:99:eb:ad:9d:
74:f7:7c:40:11:f9:29:1c:5b:2f:b8:2b:7a:39:cc:
75:00:32:ce:6b:f7:0c:1e:63:4d:bc:01:a0:3a:55:
24:33:60:2d:5e:10:ec:11:e3:d9:2b:76:a6:a9:85:
a4:69:1c:90:2d:b7:3b:76:fe:c7:0a:2f:c9:4f:40:
16:1a:c0:b9:fa:93:96:f8:d8:2d:4b:a3:78:de:fe:
77:40:60:f0:2f:9b:cc:69:e9:6a:ac:18:e7:aa:32:
72:88:06:fb:de:6f:3d:ff:9a:84:ec:69:ca:dc:d1:
78:c1:7b:7d:6e:f3:c6:a1:41:ec:00:4a:24:c5:73:
50:5b:68:90:57:a1:a4:80:9b:47:17:46:fc:60:b0:
d2:fa:a2:35:f2:b6:15:3f:bb:2c:21:3b:aa:c9:b4:
ac:b4:92:ed:d0:47:e8:27:a9:c7:3d:75:66:65:e2:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:DE:42:DB:BB:FF:2B:80:05:12:76:B6:13:74:A2:CA:C3:FD:B1
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b8:bb:40:1f:67:7e:3e:c6:a5:bd:a6:7b:59:86:02:c4:3c:
6c:23:60:b4:63:a1:4f:aa:c5:11:3f:24:c5:60:b9:ff:84:00:
47:42:a4:d7:0f:f7:23:3e:6b:02:a1:db:bc:12:fc:4c:63:b0:
7b:3e:2f:db:ce:85:b8:08:e9:8d:27:4a:15:8b:9f:62:04:91:
b5:4e:d6:cf:3d:8c:45:f5:42:de:d6:a5:7e:13:69:6b:8a:02:
65:c4:42:85:2d:6f:c7:78:07:d5:05:5f:d9:0f:32:0e:41:92:
d3:97:0a:77:02:4b:84:75:42:63:a7:49:e9:27:89:ae:90:9b:
fc:94:60:88:fb:57:34:3b:9f:71:6b:ef:8a:68:48:23:8a:94:
d6:c5:02:36:dc:2b:fb:97:d1:ef:10:45:d8:ca:4d:05:96:f0:
74:59:e2:b2:b0:de:0c:5f:6a:bc:fe:d0:4c:1e:55:a9:e2:f9:
f3:a5:7b:f3:68:fd:80:17:ad:14:98:23:84:e2:a5:d2:eb:56:
83:a5:45:43:bc:f5:3b:0d:0f:79:d0:54:d0:1c:58:35:3d:67:
dd:a0:29:70:56:96:1d:5b:54:4a:13:22:9a:dd:6e:5a:2b:a4:
56:ef:5f:79:ef:fe:ae:9b:a0:01:03:70:f7:d5:47:29:74:92:
93:bd:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:51:55 2026 by rpki-client