Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: ujvlF/jZ2hDyqJiaVljqK96m62SEXd13NAqNa4h7jLM=
Subject key identifier: AC:38:06:50:D2:E5:E9:33:94:00:E5:C8:24:1C:8B:BB:01:3C:16:8C
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 019D9A74861DFE16139A4CE3B68CFCBE4AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 1525
Signing time: Fri 17 Apr 2026 08:00:20 +0000
Manifest this update: Fri 17 Apr 2026 08:00:20 +0000
Manifest next update: Sat 18 Apr 2026 08:00:20 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: VENpfmKIellaOVH0uc+6MgQEVkN6k71kjvQnm0iJzGI=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:86:1d:fe:16:13:9a:4c:e3:b6:8c:fc:be:4a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Apr 17 08:00:20 2026 GMT
Not After : Apr 18 08:00:20 2026 GMT
Subject: CN=ac380650d2e5e9339400e5c8241c8bbb013c168c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:bf:0c:96:25:d8:fd:b2:75:93:67:22:a4:
07:16:93:6e:1e:b6:75:b1:1b:45:2a:97:c5:95:57:
5d:c6:6d:18:ce:0c:9c:23:f2:c1:89:00:19:f0:94:
67:a2:04:43:77:ea:60:60:db:47:f6:d1:b9:92:8e:
2c:d9:65:82:85:8b:9b:bf:e1:e5:f0:1b:1a:23:4f:
35:9d:24:09:52:e1:ee:fb:44:60:97:88:20:39:07:
dc:af:0e:e8:2e:67:1c:62:a4:5f:18:f0:1e:bf:1f:
e1:29:80:53:1b:49:8e:4b:aa:6c:ba:2e:28:8b:ad:
0b:7c:2e:63:0a:11:68:1a:05:b8:dc:a9:dd:c4:c5:
f7:5d:96:54:2d:df:43:08:e2:05:9d:1c:89:a5:e5:
ec:40:a4:b8:08:19:ed:9b:7e:fa:0f:11:06:dc:74:
2a:7c:9b:b5:84:53:2f:bc:3a:1e:28:42:46:25:0d:
f6:3e:a6:06:ad:79:d9:eb:42:e9:60:4e:76:79:ac:
78:c4:c4:73:fc:90:53:03:fa:4a:d7:f5:63:f2:37:
58:59:a9:0e:f9:5e:0c:c7:66:4d:53:30:95:69:35:
6a:52:34:2a:3c:e1:b3:3b:6b:59:28:f4:62:ef:a5:
ef:d1:29:f2:ea:17:b2:4a:4d:2b:ef:93:9b:9d:36:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:06:50:D2:E5:E9:33:94:00:E5:C8:24:1C:8B:BB:01:3C:16:8C
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:d9:67:79:52:01:6c:9b:15:e2:ee:8f:ad:90:b9:60:9f:
c7:83:52:55:77:ca:20:cb:39:43:8b:bc:03:a2:44:6a:21:55:
44:fa:aa:5d:89:63:46:63:ca:2d:cc:fd:0a:da:be:63:8b:44:
d3:e8:06:02:1d:f8:32:09:55:1b:5c:99:55:d0:d7:c0:68:7d:
2e:e3:6d:9c:e3:7c:2c:2a:94:c9:da:e8:5a:58:db:2a:8c:97:
56:ac:f9:4f:6f:88:f0:81:4a:11:10:e8:41:1b:c5:df:13:dc:
2c:2b:34:d9:31:bc:cc:e2:41:41:a8:00:1f:8e:e5:2e:69:fa:
6a:36:82:fa:16:a6:18:73:1a:42:11:c6:26:92:d4:99:8c:b8:
08:c1:b7:e5:e1:c3:52:9a:8f:b3:b2:2c:e7:67:29:02:b3:05:
fc:28:97:ee:4b:6d:47:52:2f:01:8a:9e:72:3b:99:38:68:51:
db:3a:10:9a:12:55:f3:9b:4a:bb:af:92:18:4f:55:91:02:4b:
26:45:1e:46:26:86:3d:7f:d2:77:52:54:ef:9a:f0:a2:dd:0e:
b1:3c:1f:92:69:85:35:b8:96:73:05:d4:c3:7b:e1:a3:bb:0e:
ce:ed:90:ed:39:53:25:26:26:5b:de:f3:ff:c5:ec:23:64:f4:
1c:b4:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:43 2026 by rpki-client