Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: yy5D7bx3uBZ7T7zTelUBPtZgh/R/exrpNoR25n1djoQ=
Subject key identifier: FD:1C:A3:6A:7B:4A:83:3F:BA:8A:C7:86:8F:1B:CC:FA:F5:9D:1D:43
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 01A0DCBBC83DF016CC7FECB870B5C3F58843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 16D5
Signing time: Sat 26 Sep 2026 08:01:28 +0000
Manifest this update: Sat 26 Sep 2026 08:01:28 +0000
Manifest next update: Sun 27 Sep 2026 08:01:28 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: KEMZ4WUS9gWS/LpoXu1NjD9IGjy6BQdEfl12GPqGG6s=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:c8:3d:f0:16:cc:7f:ec:b8:70:b5:c3:f5:88:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Sep 26 08:01:28 2026 GMT
Not After : Sep 27 08:01:28 2026 GMT
Subject: CN=fd1ca36a7b4a833fba8ac7868f1bccfaf59d1d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:4c:8a:30:1f:e0:14:d8:bf:7f:5d:11:11:
50:e0:af:c9:76:85:1c:fd:d4:c3:36:a4:cc:29:f0:
11:6b:36:65:46:69:b8:fe:ce:45:fa:26:04:b5:eb:
46:6a:2c:59:9a:8f:9b:47:a2:5a:13:9d:01:43:89:
a9:28:c9:1b:00:78:9f:27:63:55:a9:c8:b4:8e:e7:
ed:6c:b6:f5:87:c5:61:ac:56:3e:af:97:96:03:b2:
80:18:05:ba:7b:e6:a0:db:03:fc:bb:b3:cf:ba:ae:
0a:4d:ef:79:0e:97:1b:a1:85:60:7d:73:ec:29:3c:
1f:6a:94:da:fb:75:b5:41:dc:97:f1:34:53:6c:bb:
b1:7d:b0:14:15:3b:67:4f:0d:29:fe:7b:21:15:e8:
22:cc:60:10:cf:3a:24:9d:28:0f:e8:6a:ab:1a:8d:
97:f1:4b:b0:ff:6d:38:34:40:8d:9d:6a:3d:f4:68:
b1:8e:ef:31:9a:14:30:cf:e4:d4:07:90:bf:3a:16:
51:51:4a:f3:67:0c:e5:3a:da:82:66:ad:8f:b9:76:
13:6f:91:41:ab:5c:a1:ee:72:9a:38:fb:d4:30:b0:
7b:ec:ba:31:fc:8f:5e:18:e1:dc:6a:44:65:01:dd:
57:73:e8:b2:37:df:40:f0:67:28:4e:da:7c:76:7b:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:A3:6A:7B:4A:83:3F:BA:8A:C7:86:8F:1B:CC:FA:F5:9D:1D:43
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:ef:2c:49:c1:b0:10:85:ec:c9:c8:d6:fd:59:07:c0:2d:
b3:ce:9f:88:46:b4:0f:03:67:b6:8b:9d:e8:e3:b6:c2:1e:ef:
5e:40:62:51:f2:33:3f:11:55:bb:b5:84:0e:f8:b9:94:e2:e0:
95:2d:5e:c8:9b:69:da:ad:de:2d:22:00:48:b2:67:1b:e4:bb:
e2:f6:1d:19:03:23:06:33:a3:e7:80:11:39:e1:9a:84:14:0a:
dd:4f:08:db:af:c8:08:1d:c4:0b:b3:6a:30:ee:1c:0d:8d:ae:
17:99:38:69:40:cb:ed:af:5b:6e:65:a8:d4:90:20:4a:0f:21:
9d:5a:5b:85:c6:ee:cb:82:c5:93:6c:5a:f7:d2:a1:1b:b5:b9:
f6:eb:29:55:0b:d8:2a:c1:a3:b1:8d:47:97:28:73:aa:cb:5e:
fe:10:b4:a1:a4:d2:67:8b:30:aa:cd:0b:cc:ed:17:35:ff:f2:
36:74:5f:5b:80:82:1f:c9:9c:e1:06:71:77:e6:ef:bf:64:46:
ef:87:f6:3a:5d:b9:8e:71:b6:4d:60:5b:46:3d:f0:87:c2:08:
c2:f0:ff:6b:55:a6:0c:8e:e4:93:57:b1:1d:58:00:ea:08:66:
eb:85:ae:75:ba:e3:b5:19:7d:aa:eb:0b:55:85:be:4e:07:e5:
33:1f:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:20:33 2026 by rpki-client