Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: KOW0tobxbZgPbQTCPF1ZgAgAwlLu3A/x9Dr+ZDV3aTs=
Subject key identifier: E8:9D:69:19:01:3D:28:B5:8B:67:74:07:29:8F:94:93:A3:01:02:32
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 019F18D659FE4EF5FE90B7633ED187A0D455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 15EB
Signing time: Tue 30 Jun 2026 14:02:08 +0000
Manifest this update: Tue 30 Jun 2026 14:02:08 +0000
Manifest next update: Wed 01 Jul 2026 14:02:08 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: +beMcjIo6cozMXmPjf9d8PzL4TmXboOCnLfN4ZRZTws=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:59:fe:4e:f5:fe:90:b7:63:3e:d1:87:a0:d4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Jun 30 14:02:08 2026 GMT
Not After : Jul 1 14:02:08 2026 GMT
Subject: CN=e89d6919013d28b58b677407298f9493a3010232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:ea:25:f4:71:aa:56:29:ee:66:e5:a8:c8:
84:e6:8b:89:b9:2d:cc:f2:79:36:04:fe:1d:3c:15:
07:c1:b5:ce:33:2f:0d:18:be:fe:f5:13:20:75:03:
b9:66:94:3e:e2:64:7d:ee:db:98:fb:68:f5:6a:94:
b3:a3:c3:aa:9d:d7:a2:73:15:1c:fc:96:7c:38:a2:
49:44:b2:9a:3f:95:a3:70:78:09:83:cc:78:fd:75:
58:59:62:4f:84:72:7a:47:5f:1f:1e:93:78:db:1c:
19:e6:fe:2b:8d:7b:0d:ae:94:c6:0d:08:2b:ba:dc:
31:c2:cb:bf:ba:b0:a3:88:7b:b8:93:d3:d2:5e:bd:
a7:4b:e3:7f:87:6e:d3:26:7d:28:7b:65:ad:be:3e:
4d:02:05:35:91:1f:e8:30:6c:b4:ea:a2:74:bc:d8:
0e:a3:29:23:cc:fb:eb:20:a7:8b:50:dd:c8:09:8f:
4a:5d:c6:9f:75:7d:d0:8a:02:bd:76:5c:fe:6e:de:
5f:6c:8c:fc:83:37:09:88:3b:dd:65:c1:4a:b2:0a:
2f:b2:9d:eb:5a:f2:a7:fa:da:d5:0e:0a:a1:f1:d7:
ab:e0:d7:0f:7a:5d:0f:d3:7f:a5:ce:64:97:1d:5d:
1d:58:ca:4c:4a:ba:f3:e8:39:3a:13:5b:49:93:9e:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:69:19:01:3D:28:B5:8B:67:74:07:29:8F:94:93:A3:01:02:32
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:52:d0:02:85:da:a0:97:44:a8:6f:0b:6d:e7:a7:8e:eb:16:
c7:da:16:43:ad:4a:79:6b:e6:94:6f:a6:10:20:cb:e0:6d:77:
47:75:9c:e4:a3:79:64:3a:22:67:5f:2b:92:c6:6e:4d:86:8b:
6e:c0:d0:aa:33:19:68:7b:a8:6e:ce:c9:f9:21:aa:9b:0b:40:
ad:49:64:35:2d:d5:55:07:22:81:5f:ba:bc:1a:b8:75:9d:8a:
04:6e:89:1a:be:27:bf:65:8a:a5:65:7c:65:2e:cf:07:cf:20:
54:22:c1:d3:56:0f:ad:4b:03:f7:e9:ca:61:f7:de:53:d9:50:
87:40:87:49:c4:86:c8:ca:c3:79:9f:15:86:4a:90:a7:e6:39:
cf:66:8b:31:70:ac:3a:36:f9:b3:77:2a:ac:c6:cc:cd:c6:d2:
ba:04:91:03:de:8c:c3:ee:59:f1:52:1b:05:08:0a:1e:0a:ef:
6b:57:ff:e8:1a:18:db:ab:ec:f0:08:43:d6:f6:78:5b:68:a1:
7e:97:61:4a:4f:c3:89:bc:6d:0b:26:47:c6:39:04:81:c3:f4:
5d:da:ea:e8:ec:f7:a2:01:29:3e:ed:eb:2b:f8:a3:a0:0a:6f:
5c:b1:f0:55:69:3f:cb:42:ea:d4:97:8f:12:c3:88:a0:9b:ad:
ad:9f:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:26 2026 by rpki-client