Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: A2rBDPwFcz+CuS31hBAk4Ow28KlGTewJc4lmNdSZioY=
Subject key identifier: FB:BD:95:4A:B2:A0:0B:21:4E:49:C3:77:9E:40:F0:9A:3B:87:64:48
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 019E3117A10117D3C222735F0F40ED877179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 1573
Signing time: Sat 16 May 2026 14:01:32 +0000
Manifest this update: Sat 16 May 2026 14:01:32 +0000
Manifest next update: Sun 17 May 2026 14:01:32 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: cZCMDjZTvZ2glcVMmGzrLm99a4MYamFbGeqfRZKDuis=)
2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:a1:01:17:d3:c2:22:73:5f:0f:40:ed:87:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: May 16 14:01:32 2026 GMT
Not After : May 17 14:01:32 2026 GMT
Subject: CN=fbbd954ab2a00b214e49c3779e40f09a3b876448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:c7:ef:1f:f2:7f:c4:88:81:0c:b8:fa:c8:
60:1a:25:9f:1b:df:09:d9:d2:a5:62:21:e3:09:f2:
33:1b:a2:b4:3b:fe:94:46:51:0c:34:a4:76:e3:7d:
54:38:3a:49:fd:f4:ae:c7:ba:bc:53:71:43:52:bb:
01:d2:0f:e6:e0:80:17:96:b2:ee:56:f6:d0:4b:74:
18:94:87:ea:f1:11:41:5c:fb:4d:a5:6b:95:54:4c:
af:03:41:87:64:85:e5:0a:22:64:ab:2a:7f:a2:58:
17:a3:ae:02:ee:e2:02:39:7e:cc:2d:a0:ff:ca:bd:
c1:ce:2c:7a:b4:42:f5:22:c2:7a:65:43:e0:87:30:
75:ca:b1:ff:3a:ed:a3:4b:12:a8:53:f4:e0:aa:48:
79:4c:8d:ec:20:6a:14:62:c8:62:d5:df:ad:bd:d2:
17:11:48:34:51:d3:ff:5a:9d:ff:a5:73:d8:7d:9d:
e3:47:19:de:64:1a:e2:c9:e9:a3:1d:5a:68:67:4b:
f0:3c:18:16:37:73:20:9d:c3:b7:ae:d8:ac:6b:75:
3b:af:d2:06:64:6d:bd:7f:35:c7:c6:d1:35:46:b9:
04:b9:20:2e:5e:c6:5a:c5:51:ba:8a:cb:b2:bd:26:
31:3f:dd:57:c9:91:8f:15:68:fb:3f:7d:74:2e:b4:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:95:4A:B2:A0:0B:21:4E:49:C3:77:9E:40:F0:9A:3B:87:64:48
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:12:ec:27:fc:23:ed:d6:30:66:37:34:c9:27:a4:2e:39:
54:04:c6:f5:15:1d:6a:8f:a0:e5:58:4d:f5:0f:e3:dc:88:5f:
22:81:93:55:53:03:7a:9b:69:aa:b6:bf:09:11:f5:04:ff:57:
ec:9c:76:2d:42:76:dc:9f:c4:3f:c2:77:00:03:f5:0d:10:80:
69:1d:5e:bd:51:00:c8:6a:b9:e4:8c:3e:99:73:20:0b:61:3f:
30:e0:1d:62:c6:bd:db:2f:42:f0:45:40:f4:96:50:16:a3:de:
a5:e3:42:f1:7f:57:eb:3d:dd:36:f1:a1:ad:b9:15:33:18:75:
90:32:b4:01:12:22:5e:49:98:8c:b7:0a:74:23:70:13:b8:0f:
15:ea:0b:e0:c1:62:f8:8a:76:23:d9:90:37:fc:f1:74:f9:3d:
3d:bf:90:dd:82:9a:9f:2c:79:23:2f:c4:75:76:12:c1:9d:5d:
ca:97:4d:e3:a9:79:60:28:7d:17:20:79:5b:8e:7c:a7:56:b5:
24:36:82:e8:83:d2:8f:a6:78:a7:cb:d7:03:d7:32:2d:a2:a9:
fc:b9:f2:73:f7:96:f4:5f:dd:49:f9:39:31:49:81:6a:38:cc:
77:b9:5d:fd:fb:cf:dc:5e:1c:7d:e0:10:94:55:bc:b9:d0:65:
78:06:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:40 2026 by rpki-client