Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: BG9Q4uFzykKlXVPV1Ddv8TrB9dR5XZ+5fzVs+p3iS0M=
Subject key identifier: A6:97:4D:6F:00:5F:BD:5B:8D:34:58:2D:49:41:74:70:9E:1B:9F:9D
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 019CAAFD5340395A45451B4A6F5E31092467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 14A9
Signing time: Sun 01 Mar 2026 20:00:54 +0000
Manifest this update: Sun 01 Mar 2026 20:00:54 +0000
Manifest next update: Mon 02 Mar 2026 20:00:54 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: O0kzZ9D8Uf5ZTWmqpkUZMK4hEI6Xt1BbGYNy7vPMiK8=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:53:40:39:5a:45:45:1b:4a:6f:5e:31:09:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Mar 1 20:00:54 2026 GMT
Not After : Mar 2 20:00:54 2026 GMT
Subject: CN=a6974d6f005fbd5b8d34582d494174709e1b9f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:65:76:95:68:f5:20:e0:74:ad:4b:4a:28:
56:bd:ed:42:07:77:a9:2b:31:07:26:a6:e1:ea:a7:
fe:3e:96:60:5b:e2:66:67:87:27:8d:ec:68:e7:b2:
14:26:fd:07:12:eb:d2:d0:e6:02:25:a6:ed:a7:fa:
83:89:08:9a:46:8e:e2:79:97:09:2e:dd:4d:de:51:
b7:95:e5:5c:13:46:a5:a4:3b:5d:ee:bc:09:cd:7f:
5e:15:e0:dd:bd:12:02:b8:89:72:bb:fb:76:4f:22:
a9:f3:9f:b7:16:16:e9:8b:17:e8:31:cf:50:23:2d:
66:5b:0e:df:b7:e6:19:2b:93:89:5c:61:27:4e:1a:
06:16:d4:84:46:0a:50:4c:b3:ec:a1:fd:4b:44:f7:
06:00:17:c4:15:e2:47:fb:dc:ad:82:fc:a3:96:cd:
a4:50:3a:fc:d8:e7:4b:c0:ab:2d:de:35:47:e3:ad:
4c:94:48:42:71:ae:71:72:30:0d:d3:f3:b6:95:b2:
79:5e:58:7a:f3:e9:17:3e:72:25:16:08:2c:9b:5e:
df:d7:93:35:1e:87:cc:47:f5:5a:40:7a:3d:4b:03:
59:0e:23:50:48:c3:b8:68:4e:5a:03:1f:c3:cc:14:
97:14:a4:f7:66:b5:fa:fe:82:34:ed:45:c9:b7:e8:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:4D:6F:00:5F:BD:5B:8D:34:58:2D:49:41:74:70:9E:1B:9F:9D
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:43:d6:45:1c:b2:4a:8c:c1:06:11:86:9c:e7:53:78:7a:1d:
8d:c3:30:ec:19:ae:ce:19:99:58:34:88:2f:c3:d9:0e:3b:d9:
65:eb:66:91:05:70:11:9c:b7:b4:56:c8:9c:2c:07:9f:7e:51:
34:32:4d:4a:8d:a3:51:99:79:c2:1e:1c:6f:35:0a:03:aa:81:
21:e7:25:a8:50:1f:8a:84:b9:c7:98:cc:54:e0:1b:54:42:68:
7c:ab:8f:ad:f8:b2:f4:df:4a:c2:cc:d2:c6:38:4f:e2:4f:be:
90:63:d6:ea:a8:70:f6:3c:e1:2c:44:c3:06:ae:62:72:2f:42:
31:64:4f:ad:31:16:db:9b:f7:51:7f:13:21:e7:fd:a2:d1:63:
a9:30:ef:7e:60:90:57:c7:2f:2d:88:29:9d:94:98:f8:1b:9c:
84:ee:c0:5e:2c:6a:ad:7c:cf:90:38:8a:16:51:e4:b1:e5:fd:
42:ab:ff:3e:71:7c:8a:ba:a1:05:44:ff:21:c7:de:14:66:46:
bb:22:bd:38:68:5f:a8:a2:51:88:6d:93:e1:50:29:a6:12:4e:
3f:f7:13:56:17:74:21:c0:d9:5c:fb:a7:fd:4f:93:70:83:a7:
d8:49:7a:58:da:15:b5:5a:5a:17:0c:f5:33:28:74:e4:89:60:
60:d6:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:14 2026 by rpki-client