Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: /CN0STGa/O0lKhJkWicyujM7NXfiOGflL0hBjxhA4e8=
Subject key identifier: 5E:C3:F2:02:FB:BB:9D:31:03:09:73:C0:5B:E8:A8:E1:1D:A0:6F:C0
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 01A0D124A222EB1193678352BD8545842159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 16CF
Signing time: Thu 24 Sep 2026 02:00:33 +0000
Manifest this update: Thu 24 Sep 2026 02:00:33 +0000
Manifest next update: Fri 25 Sep 2026 02:00:33 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: eoe3pRl3nPV7oaDiNrBvo670I/PJeZSATlb2jhppNnA=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:a2:22:eb:11:93:67:83:52:bd:85:45:84:21:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Sep 24 02:00:33 2026 GMT
Not After : Sep 25 02:00:33 2026 GMT
Subject: CN=5ec3f202fbbb9d31030973c05be8a8e11da06fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4f:9f:82:3e:23:c3:85:e8:3c:82:d9:d4:b7:
e4:26:9c:94:90:3a:31:1a:78:e6:d7:dd:c1:d0:5f:
6f:0f:a3:80:64:5d:6c:7d:60:7d:db:f6:dc:0c:1a:
85:6a:9e:8f:0d:2a:39:14:d0:43:6b:2a:bb:bd:8b:
98:40:fa:f6:c9:d5:37:ce:1c:ea:5a:c7:e3:41:98:
10:5e:ce:33:67:0c:e6:65:76:90:b1:01:55:38:5d:
67:26:0f:fd:64:76:9d:05:f2:54:d6:27:3c:48:81:
92:64:4c:4e:7a:41:12:a5:56:c3:43:e7:bd:8b:64:
90:69:be:b4:34:1a:56:31:b6:0a:15:57:63:12:41:
75:49:9b:ce:e8:bd:75:4f:b7:a5:0d:24:95:8e:50:
f2:8e:ac:12:1f:c5:8d:7a:89:fd:ee:eb:3f:cd:0f:
d0:03:51:54:52:41:f1:b0:69:e1:9c:3b:6e:28:c4:
5d:e0:78:57:3e:38:38:a5:57:c6:7c:20:a2:25:f9:
ee:09:32:6c:8c:fb:0c:be:c3:3f:38:b7:59:7c:57:
96:6e:7e:74:2c:c3:52:ab:f9:6d:38:81:16:ba:db:
a9:70:f4:0c:68:06:72:a4:7c:96:96:a3:e5:7b:a3:
a2:e6:9a:45:07:9c:6e:28:7c:1d:52:5c:02:4c:9e:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:F2:02:FB:BB:9D:31:03:09:73:C0:5B:E8:A8:E1:1D:A0:6F:C0
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:61:7a:7c:36:e4:3f:5e:27:ad:b6:70:d3:29:f3:32:47:ef:
c1:93:9d:9e:31:19:39:28:a6:ed:a8:94:ba:4f:3a:19:a0:4f:
83:31:48:ba:92:76:2c:67:da:98:4e:4b:a4:74:ac:08:86:40:
b6:b5:40:84:ed:f6:91:03:4f:b5:b0:0e:b4:bc:ae:0a:bb:1f:
80:77:a5:26:39:30:66:29:92:77:2f:99:ee:58:41:d8:f7:16:
dc:89:41:d3:a5:d9:92:9c:4d:f2:4c:59:db:3c:c3:95:89:ba:
e3:0d:bb:41:f8:e8:b1:d8:5e:20:54:85:70:58:60:45:0d:fd:
0f:6c:14:88:4d:1a:59:b1:35:fa:bc:13:e4:26:60:5c:fd:7a:
6f:d4:9e:73:f3:1d:99:7f:ce:0c:a2:38:a7:1c:21:ad:88:3c:
fe:4e:d7:30:80:21:13:ed:0b:e8:6d:eb:0f:99:86:84:cc:1c:
f6:87:d0:3e:43:03:11:29:04:27:45:db:f2:e0:da:67:b7:05:
c2:7d:8b:35:70:24:79:95:0d:29:bf:7e:a2:5b:6f:85:9c:40:
39:ca:ea:92:f2:03:fb:2e:3a:75:4d:05:e4:0f:8a:5c:41:19:
f1:12:8f:4a:05:46:0e:5e:83:bb:a9:76:ef:a9:57:01:7a:56:
d8:72:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:50:53 2026 by rpki-client