Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: poSf8xxmCCBcUwiGHAgzNgxkHuj5Xooxh9iSK+qOxFc=
Subject key identifier: A8:7C:D0:B7:CE:B9:35:B5:74:81:05:1D:77:75:0F:69:DD:B5:04:9C
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01A104A4D7158CDA75E27394C9BB1536DDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1A86
Signing time: Sun 04 Oct 2026 02:01:14 +0000
Manifest this update: Sun 04 Oct 2026 02:01:14 +0000
Manifest next update: Mon 05 Oct 2026 02:01:14 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: mDqyJocp8TJ758DM7WmX1BoKYv7h7zSQcp+rNlRQzMA=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:d7:15:8c:da:75:e2:73:94:c9:bb:15:36:dd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Oct 4 02:01:14 2026 GMT
Not After : Oct 5 02:01:14 2026 GMT
Subject: CN=a87cd0b7ceb935b57481051d77750f69ddb5049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:7d:3c:5f:0e:54:c1:6d:ff:6b:a5:9f:f4:
2a:96:ad:9e:84:69:00:da:1d:92:3f:91:1c:aa:c8:
0b:91:5c:c8:3e:4e:3a:31:ac:43:8f:c1:6f:99:7e:
03:70:5c:aa:8f:68:13:eb:f7:0b:00:a1:d6:83:84:
ec:d6:13:3d:7e:3d:3b:39:5b:c7:53:25:bc:fa:8c:
cb:1f:97:f5:e7:fa:88:71:c7:fb:78:d3:a0:ae:03:
55:e9:7a:f9:f3:f0:4e:95:33:3a:ba:45:13:ae:e1:
2a:31:91:8c:0f:2c:87:3b:a9:c0:68:4d:12:41:f5:
35:3d:3c:36:d1:f8:2c:0c:25:bb:3c:48:9e:ee:60:
36:33:b6:ee:a5:92:17:e5:c1:15:98:d1:10:26:c5:
22:22:8c:59:03:71:c4:0e:6d:43:9f:eb:5a:3e:96:
d2:9c:f8:53:64:fc:a0:d5:a7:2a:d1:f2:05:03:dd:
49:aa:c5:fe:48:9b:c1:4b:08:6b:f3:c4:84:9c:cc:
95:4a:74:5a:b3:cc:6d:a3:d2:87:e3:de:bd:68:6c:
41:73:c6:63:26:e3:83:2c:19:09:a0:97:05:fa:22:
41:96:74:8f:b6:5e:e9:f8:dd:a8:f1:e1:db:f7:80:
ab:6a:eb:a5:6e:5f:5f:ea:00:23:8d:57:0d:5b:9d:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:D0:B7:CE:B9:35:B5:74:81:05:1D:77:75:0F:69:DD:B5:04:9C
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:dd:0f:e4:52:f7:95:b6:13:d6:99:8e:b5:2f:de:05:54:
ea:d0:de:40:41:64:39:eb:90:a5:c3:1f:8f:d2:bd:95:28:21:
d9:e4:a9:b8:4c:cf:ee:20:d6:a3:5c:04:58:95:4d:aa:87:3e:
91:c8:c3:05:38:53:e6:90:7c:af:ee:85:3f:af:5d:a2:8d:41:
d0:fa:57:ed:98:cf:1a:c9:53:b3:ab:36:71:4d:7e:4b:de:40:
54:c6:5d:64:df:56:8a:56:f5:db:d2:df:6c:14:63:91:de:cc:
27:b3:13:95:fe:ff:a2:2a:cc:5c:bc:ad:a2:56:37:2e:1a:68:
56:a3:1e:d1:35:38:1c:64:01:37:16:c9:54:c8:09:a4:5f:09:
e1:36:82:98:64:22:c7:22:bb:17:08:ec:99:ad:d2:bf:bc:ec:
e2:14:40:ac:33:2b:ee:ff:33:f0:62:2d:ac:33:60:c6:1c:f2:
aa:17:5d:d6:8c:64:73:20:e4:bc:48:99:e9:50:e0:eb:68:91:
51:48:66:ba:9d:9e:38:e9:b1:34:f7:c9:95:ad:42:2a:97:69:
f9:ca:d1:07:29:e7:73:d4:1c:a5:fc:72:01:33:5d:82:0b:22:
45:ee:8d:47:87:52:b7:55:eb:68:0c:96:e6:e6:e8:76:f1:76:
5e:72:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:18:09 2026 by rpki-client