Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: QBN3L/2Ab7EEfRLf5hGkpGvkRfmmwiTa4im0MXsMscE=
Subject key identifier: 70:47:7B:6E:13:F3:60:4D:6A:6F:88:6E:43:5B:68:16:FD:0A:B6:A0
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 019D37F72F4E861339511E5342541087FF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 14F2
Signing time: Sun 29 Mar 2026 05:00:39 +0000
Manifest this update: Sun 29 Mar 2026 05:00:39 +0000
Manifest next update: Mon 30 Mar 2026 05:00:39 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: PPHUyZaNPLP8wJ9j8yUU/qtPVzlBtjYrPOc1jjBQF9I=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2f:4e:86:13:39:51:1e:53:42:54:10:87:ff:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Mar 29 05:00:39 2026 GMT
Not After : Mar 30 05:00:39 2026 GMT
Subject: CN=70477b6e13f3604d6a6f886e435b6816fd0ab6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:01:9e:8b:65:09:ec:59:35:8a:cb:62:8b:
35:da:ac:eb:ff:69:32:77:5a:36:06:55:02:f5:41:
ac:ae:8f:8d:0d:b3:3b:30:db:88:04:d3:02:84:c8:
cb:08:b7:8b:8e:48:0d:7f:8b:e0:ef:5b:94:b9:f5:
30:3b:75:1d:38:a9:e0:5f:3d:ae:18:b4:5c:1e:9e:
14:64:9c:98:1f:23:24:71:f2:0c:36:2a:62:8e:19:
23:86:67:67:7e:49:6f:a5:7b:03:8b:bc:bc:03:bc:
b9:7a:52:4e:9b:18:23:57:d4:07:04:c8:19:7f:55:
a4:37:9a:9b:5c:62:75:63:74:05:9a:7c:1e:80:81:
15:e9:0a:06:db:6c:b1:40:ce:c7:35:46:6a:61:86:
d6:54:05:b2:61:10:74:6a:8b:5f:b6:80:32:57:43:
5c:b6:8a:8e:d6:5f:a9:ed:64:d4:9c:b8:fe:fb:ca:
95:28:55:88:af:4b:8c:0c:bd:e4:82:f2:ec:e6:da:
59:b4:e1:ad:2d:bb:a3:76:db:d0:80:5f:94:51:a6:
25:e1:cf:77:2c:fd:cb:c1:f8:b9:2e:f6:40:1b:54:
cf:07:82:54:18:a4:85:a9:ae:21:a0:6f:28:82:35:
19:39:52:28:0f:e5:85:cb:4b:91:d1:d2:ba:0e:11:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:7B:6E:13:F3:60:4D:6A:6F:88:6E:43:5B:68:16:FD:0A:B6:A0
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:aa:36:76:a4:a8:62:3d:c9:5f:83:64:ac:53:d4:c5:1f:a5:
c6:a0:12:6e:31:58:20:de:4f:3b:5c:7b:fb:d9:4a:51:90:4c:
4f:15:1e:21:f2:5e:e4:85:7e:e4:b5:7d:c0:47:33:0b:3d:05:
68:8d:17:32:b1:9f:7b:13:03:e5:ef:d3:ca:5b:2e:78:50:a2:
3a:bb:97:0d:56:0a:20:6f:86:73:ad:43:76:91:38:98:ff:dc:
84:fb:e8:f9:9b:61:23:9e:04:c8:97:87:71:b5:6f:4b:65:ed:
6e:98:c6:dd:2a:d9:f8:33:7b:da:99:a9:88:84:3c:6b:a9:46:
35:a4:86:71:b3:c0:33:4c:73:68:3c:52:14:c8:54:e7:32:55:
ab:5e:60:f7:26:ed:44:32:63:cc:1c:14:47:c0:8e:46:b6:29:
ba:af:b8:4e:34:02:3a:a2:f5:29:4b:7e:98:ba:18:39:5c:09:
7d:1c:3c:6a:a1:d8:3e:45:c9:ea:72:fc:33:15:e2:eb:80:56:
56:d7:82:d6:7d:3d:d7:d6:fe:63:be:36:c0:06:62:9a:6c:2d:
56:5d:25:c2:2a:b8:7d:66:22:00:39:4c:b2:be:a8:90:93:ab:
63:4f:8c:4b:97:96:18:9b:9b:b9:0b:2c:71:9c:36:bc:74:cc:
d9:b1:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:50 2026 by rpki-client