Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: blhxYdENtORRz136aqX0+S/hDB0W0U1f1T9+G+gpN/U=
Subject key identifier: BA:D9:19:12:3C:34:0D:0B:5A:59:CB:C2:72:41:CF:4F:A8:E3:CE:5A
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01A0268E1E11DD0E7CCC855AC7DF39BEF5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1A13
Signing time: Fri 21 Aug 2026 23:00:43 +0000
Manifest this update: Fri 21 Aug 2026 23:00:43 +0000
Manifest next update: Sat 22 Aug 2026 23:00:43 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: sPlwuHKS5PLPRf7yc7cpzAUeJWIkmLJm797ApdWcgSY=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:8e:1e:11:dd:0e:7c:cc:85:5a:c7:df:39:be:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Aug 21 23:00:43 2026 GMT
Not After : Aug 22 23:00:43 2026 GMT
Subject: CN=bad919123c340d0b5a59cbc27241cf4fa8e3ce5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:13:a6:c3:fc:15:22:be:61:07:28:a3:88:
28:aa:1d:96:bf:7f:1e:f6:cd:65:35:8f:91:0b:4e:
70:e4:98:68:53:22:99:6e:b3:a8:09:50:ef:10:d7:
b7:0c:ef:63:a7:56:33:8a:83:b5:05:ee:95:91:3a:
9a:15:a7:31:bd:97:ec:aa:fa:6b:71:45:44:15:22:
2f:73:ec:d6:5e:ee:f5:cc:d0:de:58:84:d2:77:81:
64:42:3b:17:43:8f:a9:30:b9:db:3f:ec:9d:10:58:
8b:1d:af:b9:c7:63:ea:cf:60:4d:53:34:b0:fe:f0:
40:95:d9:95:9c:f9:cf:52:54:b7:28:e1:80:5a:99:
c7:a1:8f:10:cd:4d:c2:60:90:83:2c:d5:a1:82:d8:
26:db:19:06:52:58:10:f2:92:ac:bc:25:0b:f5:24:
32:e4:7d:19:4d:38:4b:3e:26:97:ce:02:5a:d1:07:
29:2e:91:a4:b1:79:98:86:e5:f4:81:7a:59:2d:76:
e6:fd:18:6b:04:f4:88:cb:6e:b5:3f:42:78:02:e1:
4a:fc:af:72:10:b2:fa:cc:6a:8b:03:ea:25:96:bb:
ea:03:b7:81:9e:6c:6a:9b:90:37:2d:35:74:71:c3:
d3:b7:0a:b4:1b:40:45:8b:e1:3d:b5:ea:b4:ec:a0:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:19:12:3C:34:0D:0B:5A:59:CB:C2:72:41:CF:4F:A8:E3:CE:5A
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:e3:be:5c:71:4c:a5:80:af:1f:60:01:d3:18:29:e5:19:
e1:c2:ff:64:f2:7f:7a:87:20:2e:dc:33:59:92:eb:70:5d:cf:
c6:62:f7:7e:1c:7e:55:de:19:f1:ff:6d:06:9a:32:cf:ce:62:
93:97:50:39:d0:f8:d7:d7:72:30:1c:cc:c7:01:16:cd:c1:f2:
7a:88:bc:c6:7a:c2:e5:56:24:a4:76:88:ef:7b:cf:01:d3:f8:
b7:c2:b7:40:20:89:e5:12:22:62:95:71:c8:fc:db:f9:43:3f:
2c:f7:d1:ed:fb:ff:a4:99:57:c9:f5:74:95:9e:27:f3:a4:40:
28:1d:54:a2:84:b3:6d:86:68:e9:75:c5:3e:82:d2:1a:07:ec:
59:ad:e2:87:80:34:db:51:ae:4f:a0:fa:28:64:da:50:ee:05:
a3:3a:7b:77:7b:60:46:92:67:c3:5f:ff:d2:9b:af:de:95:2a:
fa:c6:5d:c1:44:c3:8e:0a:2c:ea:40:4b:41:0e:25:6a:aa:7c:
63:be:ae:6b:81:a4:7e:fc:d3:62:ae:dc:0d:b7:55:4c:64:a0:
53:fc:5e:e4:76:5a:09:82:68:17:a2:4e:d7:37:88:1e:6c:f6:
8b:01:3f:07:1b:f5:ba:4c:4f:25:07:de:a3:33:34:12:b7:57:
7e:a6:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:08:25 2026 by rpki-client