Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: uPwlSG3+4kJBBqayfNH+fs82tU+i0EPds6Yd5N/r1+I=
Subject key identifier: 01:7C:E4:3A:07:F6:20:9C:EE:EB:F5:C7:F3:EC:45:CB:6E:17:1D:FA
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 019F2991F2264AB72398AE597E853CE00DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1990
Signing time: Fri 03 Jul 2026 20:00:58 +0000
Manifest this update: Fri 03 Jul 2026 20:00:58 +0000
Manifest next update: Sat 04 Jul 2026 20:00:58 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: k3bK2rK1Ky9WB5sYMgxFyhN3qvqvX2CKnduggPqvLdo=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:91:f2:26:4a:b7:23:98:ae:59:7e:85:3c:e0:0d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Jul 3 20:00:58 2026 GMT
Not After : Jul 4 20:00:58 2026 GMT
Subject: CN=017ce43a07f6209ceeebf5c7f3ec45cb6e171dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:4c:55:53:e2:96:98:29:94:bf:3b:9c:f2:
8c:38:30:00:72:d2:36:d8:1f:16:d8:2a:6d:c3:ef:
1b:3b:36:5e:d7:f9:47:7e:8c:80:22:63:1f:60:f3:
a5:ee:26:e1:3c:58:e3:ad:91:1f:50:7c:9a:e8:84:
29:76:1f:87:e6:8a:9e:21:d6:25:b5:74:4a:7f:c3:
03:04:5c:44:48:f2:f1:32:49:8a:4d:2b:b5:0c:ad:
bd:07:15:1a:20:35:af:a5:e0:dc:e2:7f:aa:5a:02:
b0:83:df:85:11:ce:57:41:25:52:af:c9:e0:41:bd:
50:f7:a5:39:9b:f5:24:ba:23:01:b4:99:4d:d6:8b:
ad:ca:97:c7:47:4d:a4:fe:f3:1f:98:f8:61:c4:d5:
c9:fc:f5:1d:90:f6:69:48:99:3c:83:04:0b:0c:56:
f5:b9:a4:ff:41:c9:06:57:4b:54:96:90:90:70:27:
dd:ca:d0:71:e7:4e:92:7a:ec:fb:0a:47:41:24:93:
81:0b:fb:8b:f3:27:1d:3c:65:31:67:aa:b9:38:59:
87:ce:7c:68:b7:81:23:b6:7d:48:ee:61:1d:dc:67:
a5:77:72:9f:de:30:d9:34:c2:6b:f7:4a:f2:2d:17:
e8:c5:f1:ce:4e:4c:fd:5e:e3:05:35:22:89:ef:67:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:E4:3A:07:F6:20:9C:EE:EB:F5:C7:F3:EC:45:CB:6E:17:1D:FA
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a2:b8:9f:52:29:1a:fb:6e:7a:dd:26:fc:61:ba:f6:a3:dd:
c1:1c:62:d8:c5:d5:0f:ec:9f:d7:4f:13:fc:1b:46:52:bf:77:
34:79:18:aa:d1:aa:96:18:3a:73:57:86:d7:b5:ee:c3:ee:16:
e1:d6:2b:77:98:90:2e:a5:5b:ed:0c:95:18:f2:4a:30:f9:7d:
58:e5:1d:56:8a:68:f9:0f:48:bd:da:47:ee:de:4b:1c:ac:d0:
ef:f8:fa:84:79:f9:5a:3c:a3:1c:95:ef:34:25:6c:b0:d6:f8:
13:d9:31:48:4b:5c:ad:4f:d6:80:fc:74:aa:83:45:e2:0f:ef:
39:9f:66:ba:d8:f6:d1:94:16:09:43:98:4e:e8:6c:fe:78:04:
a9:9a:d9:b2:5e:c8:40:26:d8:e7:d8:2b:f6:e7:3e:7e:f3:dc:
b0:86:4d:32:56:ba:b8:b7:7b:8a:67:30:a2:3d:d9:0c:65:91:
78:3d:87:f2:4f:73:97:38:1e:0c:ee:ad:7e:f5:8f:f6:97:6d:
0f:13:87:f9:c6:b4:10:1d:be:23:84:6b:61:7a:88:9a:28:91:
95:bf:84:bb:9a:fb:6e:81:bd:6a:92:3e:b5:3d:9a:df:50:26:
d9:68:5c:59:32:17:8e:39:f7:62:7c:97:17:4d:8f:6a:f9:00:
66:5f:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:27 2026 by rpki-client