Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: AmbojQL3WUVk2tQxBTGDue95fCjvRMstQp9N1YrGA84=
Subject key identifier: 6A:29:CA:FD:5A:34:6E:42:45:31:5A:4C:90:7C:BD:E1:F2:77:57:0C
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 019D26965F30CC691CCFAFCA8CDFDA7FEF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 14E9
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: oi6RpAYuOFkyIy+1UKawgUyh8ecbJv8p9suwUlfdH6I=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:5f:30:cc:69:1c:cf:af:ca:8c:df:da:7f:ef:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=6a29cafd5a346e4245315a4c907cbde1f277570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:e8:fb:6f:f4:18:91:13:6c:f6:37:3b:a7:
6e:a2:23:68:31:36:6e:a9:4b:9c:ef:39:c7:8d:0a:
dd:75:61:ad:55:01:bc:84:ad:b6:69:4f:4d:6f:bb:
47:d7:58:13:48:f9:7e:c3:dc:39:4e:e6:83:d3:16:
88:26:69:39:b9:55:84:2b:57:82:c3:65:f4:11:b5:
5c:c4:84:54:cb:65:59:e7:19:d9:f4:17:39:8d:c5:
f8:96:b7:d6:71:b9:ee:9d:5e:ca:fb:d2:d8:93:13:
0e:dd:4b:8a:0e:c8:d0:40:2d:c6:47:55:6b:23:16:
2c:56:ab:f4:e1:2f:74:d0:d3:19:c1:8b:8f:7d:66:
39:ec:9f:95:be:ad:88:b4:c5:ac:bf:10:f3:c2:f7:
55:6f:0b:75:bc:d0:ef:37:7e:cd:66:0c:f0:52:d8:
6d:56:5d:cd:e9:f0:03:1c:09:d9:e4:6f:c1:15:bc:
44:b5:91:29:9a:b7:03:e6:0d:40:2b:5a:b4:d7:6a:
5b:69:c7:8b:7f:00:e2:4a:2e:77:58:df:d0:cb:70:
29:c6:e9:27:48:87:13:83:ec:be:cb:ff:5e:1b:e1:
27:32:c0:4f:cd:9b:36:69:d4:3a:a6:55:8a:57:cc:
6d:7a:ed:68:f4:58:c6:5a:10:82:9d:85:e3:b8:74:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:CA:FD:5A:34:6E:42:45:31:5A:4C:90:7C:BD:E1:F2:77:57:0C
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:37:9e:e3:70:e7:25:f8:a9:3d:6a:66:e6:6b:36:10:36:f5:
c5:ca:11:eb:41:66:60:fd:8c:65:01:f5:ab:f8:76:48:7a:c6:
9b:d1:f3:7b:66:90:2c:dc:08:62:72:77:cf:c6:08:7d:79:79:
36:00:7a:de:31:01:40:ae:f9:83:77:ad:c9:c6:2f:8b:9c:2d:
68:97:1e:18:07:cf:0c:b2:5c:21:84:c7:af:71:c5:af:bd:72:
ed:6d:bf:fd:d9:de:e1:bf:3b:1b:44:c6:59:b4:a8:61:23:83:
81:8a:e2:c1:ea:1c:36:94:8a:ab:8b:a2:f6:6d:09:3a:b3:5d:
7b:18:d4:3f:22:bc:79:dc:f8:81:a2:58:3b:c8:b6:64:11:ec:
de:3e:6a:e7:c0:91:13:75:96:e2:6a:67:5e:2d:79:94:cd:2d:
f1:27:90:6e:2f:63:82:96:2e:61:0f:d8:f3:b5:cf:05:c6:88:
f1:68:04:e7:fa:6c:3b:c9:e2:14:b0:df:ce:53:0b:4a:2d:24:
d4:59:1a:82:56:a5:e4:d5:0c:f7:4d:77:94:7a:63:ba:9d:b3:
8c:f8:39:ac:e0:21:3c:fe:6f:43:13:ba:de:77:31:98:38:8e:
29:55:c6:28:c3:07:60:6a:e7:6b:6c:63:3a:93:81:a1:b4:52:
ee:8e:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:42 2026 by rpki-client