Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: dUYoGtE74d9cdpsfpK1V/tybfShd7Vn9uoir+ttSQns=
Subject key identifier: 33:DF:64:28:7F:3D:89:6E:1B:4F:1F:B8:A5:30:E1:9B:64:AC:89:F8
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 01A13F398756062E61343F3B037DCF9649AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 1708
Signing time: Thu 15 Oct 2026 11:01:36 +0000
Manifest this update: Thu 15 Oct 2026 11:01:36 +0000
Manifest next update: Fri 16 Oct 2026 11:01:36 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: +cloLXHsqsKyyOrLJeErfq8C1XZRKme3tCRl5Yryyds=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:87:56:06:2e:61:34:3f:3b:03:7d:cf:96:49:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Oct 15 11:01:36 2026 GMT
Not After : Oct 16 11:01:36 2026 GMT
Subject: CN=33df64287f3d896e1b4f1fb8a530e19b64ac89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:a7:bf:4d:54:33:5c:e9:2c:94:67:a9:db:
5f:f7:0d:07:cb:ff:cc:31:d0:41:4c:16:36:87:cd:
b0:e2:10:63:37:7b:30:ee:f8:fe:d3:50:b8:1e:bf:
20:b6:12:e7:c4:d4:ed:37:a8:4f:1a:0d:52:97:ac:
98:9d:43:11:92:a9:b3:38:ef:e9:b4:ad:85:29:2c:
ca:03:02:aa:46:7a:88:93:84:6c:7f:1f:97:ea:51:
b9:62:2d:ed:3b:77:68:25:11:e4:41:bd:f2:f7:43:
1b:b2:47:87:72:86:8a:a2:83:9b:72:d5:ce:9c:94:
df:2b:59:82:2c:d8:79:ac:da:3d:d9:56:d7:4b:cb:
2b:90:d4:29:28:b5:2a:9f:25:cd:1b:b9:77:0c:40:
bd:e3:ea:d9:4e:f6:d4:0e:c6:a2:fd:a5:3f:f8:12:
69:a9:30:5b:17:cd:8f:3a:2f:1a:77:97:c0:92:59:
05:7d:f9:30:c9:06:2a:8e:0a:11:2b:9a:7f:a2:11:
26:3b:54:46:a9:fa:04:37:46:29:55:3c:05:3f:48:
8f:4c:0b:26:87:a8:d5:56:01:5e:d5:d0:45:3b:48:
cc:8f:f5:60:e3:6e:31:64:c5:75:c5:38:38:85:5e:
1f:5b:1d:ba:71:57:cd:eb:bb:93:1d:cb:26:f4:2b:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:64:28:7F:3D:89:6E:1B:4F:1F:B8:A5:30:E1:9B:64:AC:89:F8
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d1:33:3c:76:df:99:fc:b9:84:77:52:ea:72:7b:a7:6e:4b:
ad:35:44:a3:9f:b2:13:38:55:80:3f:98:d0:af:f2:6c:5e:05:
92:39:20:fc:ab:71:15:29:0d:df:3f:fd:0b:63:76:d8:d7:6d:
44:a4:8e:0f:83:63:7e:39:96:4b:22:7d:50:ee:1b:f1:cc:00:
ec:e6:17:d4:f1:4a:15:34:80:eb:69:2d:da:74:bf:ba:72:c6:
cc:e7:51:b9:fa:09:c0:ed:87:ba:50:37:15:f5:90:6a:85:7c:
d9:0a:37:87:21:1c:21:03:77:6e:45:38:72:34:72:fe:72:14:
69:55:5b:6f:3e:8e:b7:97:a0:a5:19:4e:c8:c7:e0:7e:ac:c2:
68:28:e6:ce:65:29:99:54:39:7e:b2:38:47:44:e3:4d:73:bb:
14:50:29:65:e3:c7:fc:60:89:c7:c6:46:c4:77:6f:8a:91:01:
d7:71:e2:2b:7b:cd:0f:15:81:29:06:1b:d3:cb:97:36:11:96:
a3:d8:5b:ef:a7:50:2f:c1:c5:ef:07:57:9c:c6:e2:4f:a6:99:
83:4f:35:50:92:a2:8b:98:96:43:7b:90:ff:88:af:22:9f:9e:
a4:c6:93:96:08:73:8a:d4:e8:6b:13:5a:e2:45:5b:88:fd:08:
40:f0:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:43 2026 by rpki-client