Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: CItRpiYMIRSJ2gB48/F9AGJ0kcmvIDyOYg0QzuedkJw=
Subject key identifier: 1C:FF:0F:0D:22:AD:04:0A:90:A3:D3:49:C0:AB:78:46:6A:BD:5C:5D
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019F92488CEA5BFF4104C4E513853602B7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 04D5
Signing time: Fri 24 Jul 2026 04:00:55 +0000
Manifest this update: Fri 24 Jul 2026 04:00:55 +0000
Manifest next update: Sat 25 Jul 2026 04:00:55 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: yHNNPz3C6oTewurmsV5LHrbMAg2eoQnCxZI0Fd1mlPg=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:8c:ea:5b:ff:41:04:c4:e5:13:85:36:02:b7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Jul 24 04:00:55 2026 GMT
Not After : Jul 25 04:00:55 2026 GMT
Subject: CN=1cff0f0d22ad040a90a3d349c0ab78466abd5c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:0f:f0:b1:ac:fc:d6:68:32:6b:fa:b9:14:
49:47:7f:c0:b5:69:cc:4b:b6:cb:2a:29:b9:ff:84:
62:19:00:22:ba:6c:9d:40:8f:89:6e:5b:c7:31:aa:
93:9f:d2:f8:5a:a1:e3:ca:b2:88:93:bf:1f:3b:68:
75:01:ab:3c:0d:c2:41:60:de:cb:86:e1:52:c9:1e:
e0:d1:e7:c1:dd:c2:6a:34:3d:94:c1:7f:69:90:b3:
f3:90:1e:d7:9b:a3:31:8a:d0:cd:08:a1:09:7b:7d:
6e:f7:66:95:11:6c:27:30:f7:57:16:30:8e:81:53:
f0:30:da:da:7a:16:86:d0:4f:f3:87:aa:f8:9a:6c:
6d:d1:31:7a:a0:ac:af:c8:eb:c6:03:47:1b:4d:6d:
54:5e:fa:ea:0b:9e:5b:92:2c:69:8b:45:65:d3:3c:
8a:ae:5c:d5:e4:6f:cb:ae:05:3b:d6:5e:fb:92:89:
28:24:80:f1:95:95:a8:ee:49:1a:ca:3b:0e:12:bb:
e2:49:a7:a3:fb:5c:a4:73:c6:2f:03:9e:e2:46:45:
d8:e3:29:28:45:7a:a3:6e:7e:95:9f:18:ae:a5:3b:
c6:f4:28:68:24:63:d6:fc:24:45:11:a5:29:e1:51:
1a:f7:13:b5:85:25:ac:5b:ad:0d:9b:b1:75:6d:21:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FF:0F:0D:22:AD:04:0A:90:A3:D3:49:C0:AB:78:46:6A:BD:5C:5D
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:92:91:a8:25:4c:b4:77:3c:d0:22:47:81:d3:0b:b5:0a:97:
80:2c:4a:79:1d:9c:c6:7e:b0:33:93:de:2a:2d:87:84:d7:45:
2a:f8:2e:a6:d8:b7:bf:86:98:08:27:8d:b9:9b:b4:19:df:f7:
72:ea:ef:bc:34:cb:89:1b:89:25:d0:12:aa:b0:71:57:19:29:
d0:5e:9f:0c:92:b5:2e:2e:58:31:a9:7c:42:a6:b2:8f:5d:09:
19:99:e5:36:b3:d4:b0:a2:40:4d:2a:7f:1a:4b:27:bd:42:96:
a7:97:8a:ac:1f:ee:51:7c:b2:66:13:88:08:1b:b4:b7:4e:a6:
4a:c3:08:65:f0:f1:6c:10:c3:12:90:6a:36:5c:73:67:9e:03:
59:33:f3:7f:0d:55:74:25:42:fe:e5:ae:e6:fd:a7:c3:4d:fe:
cf:53:42:b1:d3:f9:da:f2:c8:d8:cd:86:d6:04:cf:cf:66:21:
0b:bb:a2:85:03:97:10:0c:5c:bc:49:90:f9:19:dc:3e:be:c2:
a7:11:b4:97:c9:45:64:ba:e9:cf:8c:60:cc:e6:ae:73:d3:8b:
b4:71:a3:12:06:2c:21:ab:b4:c7:e2:02:cd:66:45:39:33:bf:
23:4d:7f:4d:72:cb:33:bb:84:b3:eb:3a:76:3b:ba:70:b3:aa:
d6:8a:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:09:09 2026 by rpki-client