Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: Jm3BwLL92LktcWFp18SIN7PYpLRwg4Kv8V+/Jl5aKZQ=
Subject key identifier: 90:F2:80:58:F1:34:28:8B:4B:EB:B2:BE:7D:58:BD:0F:FC:AD:0D:0B
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01A1295650387C559F348870F3A5A20C3D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 05:01:24 +0000
Manifest this update: Sun 11 Oct 2026 05:01:24 +0000
Manifest next update: Mon 12 Oct 2026 05:01:24 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: VDEzFXr+l8RV1NK0mj+X5DUg7m1OiUZaedc0sR2iucU=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:50:38:7c:55:9f:34:88:70:f3:a5:a2:0c:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Oct 11 05:01:24 2026 GMT
Not After : Oct 12 05:01:24 2026 GMT
Subject: CN=90f28058f134288b4bebb2be7d58bd0ffcad0d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:92:8b:72:3e:a2:09:ee:9f:51:fd:11:31:
a2:a1:c5:db:c5:06:dc:ee:0b:6f:f6:ef:df:5a:e2:
a3:20:34:e7:bf:7d:ad:ca:45:24:7b:98:a4:07:ac:
3f:19:87:9d:f5:8d:71:70:9f:ca:14:48:ac:e9:45:
5d:50:25:c6:ef:09:33:26:ea:ea:f7:23:38:53:b3:
69:a9:1c:c6:20:32:43:4e:82:66:5d:51:16:17:07:
ea:54:b1:75:d7:be:a5:79:9d:b9:e7:92:dd:63:05:
05:4d:18:ff:21:b3:be:1b:1a:fe:46:de:97:b4:2e:
7f:d4:a4:be:4f:05:07:bb:76:78:f0:97:6f:f7:81:
24:79:ca:bc:4c:12:dd:36:f8:9e:a6:48:a3:cb:d0:
13:55:ac:33:c2:5e:0e:f4:90:11:3e:70:55:7c:c6:
2f:74:06:f0:a1:96:2b:3c:1d:ae:59:9e:99:cd:e5:
2b:3d:87:0f:e3:61:65:6c:13:1a:cd:1d:11:d0:4d:
de:a5:45:17:85:85:61:8d:65:3b:6d:99:f2:67:96:
08:4f:e3:a1:ca:c8:67:19:a7:c6:e9:a9:9b:bf:86:
ad:a1:84:05:57:7b:f9:95:fb:2f:9f:b8:97:4a:1a:
95:cb:30:64:f4:9b:4f:d8:e5:05:b3:0a:17:77:49:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F2:80:58:F1:34:28:8B:4B:EB:B2:BE:7D:58:BD:0F:FC:AD:0D:0B
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7b:6c:25:7f:d1:7c:09:a6:de:0d:43:ec:38:57:cb:6a:c7:
30:4b:6f:d9:dd:75:da:69:65:50:74:4a:3d:76:04:9b:de:d4:
65:10:11:96:31:c5:e0:7b:bd:da:9c:0e:54:67:72:a4:9b:20:
d8:bb:f3:81:7a:ec:6a:e7:53:dc:05:31:dc:03:bc:7f:e1:a9:
b5:ac:f3:2c:7d:ee:61:1b:33:49:9e:2a:db:44:84:20:f7:78:
7d:15:23:67:b2:91:65:5e:2e:0f:7a:ac:22:df:55:58:39:93:
2c:0c:ae:26:bc:f7:dd:1a:17:43:f1:20:80:c0:62:97:a8:b0:
35:b4:fe:68:d7:f5:8a:27:a8:ea:38:35:34:e3:01:69:11:2b:
25:ef:71:3b:32:04:01:c0:88:c6:7c:97:ad:e0:82:59:47:62:
d2:d8:27:31:18:b6:ff:d0:c9:82:e0:a6:f6:3d:99:d8:30:5c:
9f:a0:6d:56:77:5f:02:8d:3c:b5:7d:a1:04:e4:7c:bf:ad:8d:
bd:c3:e0:6f:4c:ad:b6:85:96:dd:37:3d:ac:f7:15:88:2b:37:
bf:cb:fd:86:05:55:f3:9a:53:14:f3:a2:35:92:e2:6a:c8:70:
6a:9c:35:40:59:0d:2d:33:3b:4e:c8:11:5a:bc:f5:16:86:eb:
55:2d:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:48:31 2026 by rpki-client