Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: zP53LilTS0bO92E28uzlP0uBYYKh7aSqWDaLzWJETy8=
Subject key identifier: 1E:F9:06:A0:D8:93:81:DB:7F:9E:69:2B:C2:82:57:7C:7E:C8:70:27
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 019D39411D5E1CE61A98B8D7B9A592A28BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: 4CFqezuyEtzT9pycSiaDGEyKNiawbWJh14R53faodwQ=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1d:5e:1c:e6:1a:98:b8:d7:b9:a5:92:a2:8b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=1ef906a0d89381db7f9e692bc282577c7ec87027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:df:9d:b9:67:cc:5d:4f:91:38:96:54:85:
d4:3c:d7:4c:fa:d1:9a:18:19:c6:d1:07:b2:12:6c:
43:4a:f3:8a:b7:e1:6e:37:4e:08:11:b9:7e:87:f9:
7d:c2:58:67:28:b5:7e:2c:68:99:3a:6c:55:0a:aa:
33:08:4b:24:4b:7a:30:97:4e:9e:6d:a7:c2:05:b3:
f9:a8:fc:8b:b0:33:99:43:55:6a:ac:e1:bd:2e:d1:
5c:34:a1:23:68:2c:07:0f:aa:ba:db:bc:7a:0a:8c:
ac:f2:99:5a:42:b4:d7:88:fb:2d:40:08:e0:60:0f:
21:24:5a:99:36:16:b5:ff:b7:68:3f:58:6f:fc:92:
68:98:93:25:61:6f:49:36:83:3b:be:3c:e4:5e:7a:
7b:2b:cf:49:a0:bb:a4:bd:da:7b:60:2a:6b:6b:74:
a5:79:17:cb:3b:4c:ab:60:15:66:91:56:6d:dd:9f:
aa:bb:46:2f:28:48:95:fb:62:ef:ce:51:ff:39:4f:
bf:27:cf:ee:8f:ec:3e:ce:01:23:25:77:22:88:20:
37:12:01:6e:e1:7b:9d:31:83:7d:42:51:64:41:81:
b6:da:12:8c:b6:68:07:d3:3a:a4:7b:d0:a8:0a:c3:
9f:fb:40:73:e2:03:47:4f:c7:8a:a0:4d:56:ca:ff:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F9:06:A0:D8:93:81:DB:7F:9E:69:2B:C2:82:57:7C:7E:C8:70:27
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:45:9b:ba:7d:4b:93:38:95:e8:dc:d9:6c:02:ea:da:82:62:
e1:ee:eb:6e:c2:2c:d4:bf:b2:a4:b2:b8:87:37:3a:ea:33:f4:
83:5b:5d:5b:c5:ce:4e:6c:0f:e4:6d:41:52:07:df:ea:a6:5d:
7c:91:a7:6a:02:d9:6d:fd:98:9d:ad:c5:37:89:41:42:5e:47:
0f:f8:06:96:d7:45:9a:58:e1:7a:7f:79:3a:c2:fb:ad:26:38:
c4:33:11:65:f2:8f:42:85:fc:f9:a5:71:a5:c3:a1:c9:a4:10:
4b:be:ea:c4:81:6b:aa:5d:6c:7f:b0:89:bc:86:a2:a3:50:30:
b1:de:5c:e6:f2:32:16:dc:e1:96:95:aa:21:d2:3f:80:af:12:
f8:bd:6f:d7:ef:ff:90:93:de:fc:22:88:f6:74:fe:c2:cb:5a:
0d:0c:37:56:17:e9:cf:44:56:26:cd:f6:b2:ce:b8:a8:51:88:
65:64:8f:52:ef:94:cf:90:01:40:bb:56:3e:cd:b9:2d:dc:5d:
af:a9:b9:b0:66:2e:78:b9:a1:a8:40:8f:74:de:cc:a6:1c:e1:
76:9a:d0:78:0e:c0:b0:5d:80:fc:c8:bd:86:32:fa:a8:7c:4e:
e2:21:46:49:08:a1:f4:23:50:81:40:84:7f:72:a5:d6:45:8f:
ea:d6:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:12 2026 by rpki-client