Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: qJKzFIAkM3YArRsV8VYtzpC24WxxfByZDEtz7W+9R88=
Subject key identifier: 82:30:AD:A3:94:98:D4:0C:F7:05:EB:D8:44:6E:F9:30:C2:9B:7E:EE
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 019D29CEDFC0F4B30AA11CF283EEEADD3641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:56 +0000
Manifest this update: Thu 26 Mar 2026 11:01:56 +0000
Manifest next update: Fri 27 Mar 2026 11:01:56 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: FAVkx1dFa8reQVAk6UM33vXAlR4ZCm0uhVB26lAWO5M=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:df:c0:f4:b3:0a:a1:1c:f2:83:ee:ea:dd:36:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Mar 26 11:01:56 2026 GMT
Not After : Mar 27 11:01:56 2026 GMT
Subject: CN=8230ada39498d40cf705ebd8446ef930c29b7eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:9d:d5:fb:67:6a:25:73:ad:47:6b:c6:6e:
0c:ba:44:a5:ee:4a:1d:60:96:a4:92:a7:0c:48:21:
e6:49:8e:4d:7e:cf:90:d1:d9:f2:48:d9:65:35:91:
d6:e7:b2:cd:12:ac:89:d3:2b:82:54:92:b2:b1:ce:
fe:63:f0:f5:80:3d:7c:51:21:f4:3f:c6:6d:79:cd:
e0:d3:27:61:ba:02:19:48:f5:55:5b:28:bc:a5:9c:
78:f6:d7:e4:8f:47:44:ba:d0:46:f7:d1:eb:5f:cc:
11:d9:32:0f:6e:e5:e3:93:e1:73:8f:7e:36:39:49:
24:f7:c5:3c:e0:f3:c4:f4:e9:8e:83:55:76:b8:e9:
83:0e:ae:13:07:ea:f0:63:8d:96:62:c9:ff:2c:b8:
49:cd:d2:88:17:0b:1b:26:63:d1:2e:13:33:ee:c1:
e2:c8:34:d5:9a:c8:db:02:70:ed:54:18:c9:a8:ec:
a3:e2:e5:4c:71:6e:2e:76:ec:60:7c:5e:42:0a:cd:
de:79:97:e4:6f:09:9d:09:11:b9:4a:ad:47:3a:39:
32:ef:6d:29:fb:5a:63:c7:e3:15:6f:d5:93:63:39:
01:3a:41:6b:45:67:82:ad:f2:0b:57:13:b2:73:e8:
ea:e8:0e:e5:17:cd:34:8e:d1:61:99:77:ef:e7:cd:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:AD:A3:94:98:D4:0C:F7:05:EB:D8:44:6E:F9:30:C2:9B:7E:EE
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:cf:85:29:22:ab:c2:ed:9c:df:a9:e7:95:87:57:04:91:
11:f1:e5:8a:a1:1b:cb:e6:9a:a8:59:9d:27:d3:ef:27:f0:80:
3b:f8:d3:b8:8d:8d:8d:34:fc:75:a2:88:9b:ae:bb:e0:02:f8:
32:b2:71:b7:70:6b:9c:a0:7c:a3:17:a7:26:bb:f2:14:fd:cc:
c9:bc:a8:4e:93:05:9c:ec:7b:7a:e7:91:7c:82:e4:0e:b1:cd:
14:77:40:c7:9a:46:0d:8e:80:ab:6f:70:53:ea:6e:05:b1:0d:
fd:03:52:ea:1a:a8:59:35:4f:60:61:07:0f:5a:49:a2:ce:7f:
9b:5e:34:c1:84:0c:e5:14:d6:35:d2:ba:60:59:cf:8c:22:a7:
19:9d:76:a3:f9:0d:b5:40:70:41:bc:85:81:a1:10:36:a6:e2:
69:39:7f:59:99:3a:5e:9c:c9:c2:01:c0:dd:a0:b3:b7:87:ce:
3e:f9:44:ef:98:7f:21:35:e6:e6:ea:12:95:c2:76:e6:44:b3:
63:ae:69:33:dd:75:8c:41:ab:79:c9:87:65:e6:5b:b1:5c:9c:
a2:d9:fe:65:d6:ba:72:50:ab:5f:ba:16:25:a5:12:56:1d:79:
d8:94:cc:b3:e1:31:f7:d8:b2:35:3b:87:b4:91:31:0c:a3:97:
09:f1:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:11 2026 by rpki-client