Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: 4hJsXJuAZNtXgZR5cKl+1Z1Vkf4YMHVTA0cLOYDRiwY=
Subject key identifier: 06:D1:39:AA:93:1D:84:13:BE:51:7D:6D:17:F6:A7:A4:78:12:AA:61
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01A102B6AB07675A8D7E25227B4131DC72B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 17:01:27 +0000
Manifest this update: Sat 03 Oct 2026 17:01:27 +0000
Manifest next update: Sun 04 Oct 2026 17:01:27 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: 4pzQzKxH50TAQQy6cNDfF5P93eqU8Q1iydnYTQEfwnk=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:ab:07:67:5a:8d:7e:25:22:7b:41:31:dc:72:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Oct 3 17:01:27 2026 GMT
Not After : Oct 4 17:01:27 2026 GMT
Subject: CN=06d139aa931d8413be517d6d17f6a7a47812aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:eb:cb:eb:4f:69:46:13:f1:15:a7:d2:4b:
ff:78:b9:10:82:5b:76:71:4f:98:51:07:6e:db:ad:
4c:11:40:c2:33:a8:8b:a6:a6:18:af:37:b9:2f:8d:
f1:73:95:e6:22:99:de:a4:0d:d4:eb:60:7d:c2:c5:
3d:4a:db:75:f9:87:fd:a2:bf:de:be:a1:84:4c:a2:
b9:bf:24:83:03:70:f8:0d:8b:c8:0f:cb:77:20:64:
84:24:b0:23:1a:27:ee:1c:bf:58:87:6b:56:29:fb:
a6:df:0d:d1:b2:1e:81:1f:f2:db:fc:14:df:5b:09:
bf:8e:03:7c:1c:48:54:da:12:a9:8a:9b:ce:be:05:
6e:83:60:8e:73:42:67:48:da:b8:49:d3:dc:da:61:
9f:4a:28:f3:67:1c:c2:04:5a:d4:9f:4f:f8:d2:59:
fb:24:64:ae:da:09:e1:a5:8f:67:cc:b0:26:5d:8e:
23:3c:c7:f4:05:03:7a:e3:4d:e3:e0:6a:87:18:7a:
e8:d2:f9:d3:e9:c6:d0:74:fa:10:62:ce:54:0d:58:
f4:82:83:14:bc:56:d6:20:f1:22:c7:fe:b6:0a:94:
4a:36:24:5a:ce:77:30:e8:42:69:bd:47:b5:bb:68:
92:bc:98:56:3d:3c:cf:aa:92:0c:4c:bf:84:60:8a:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D1:39:AA:93:1D:84:13:BE:51:7D:6D:17:F6:A7:A4:78:12:AA:61
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7a:51:5b:c8:51:32:af:9b:e2:3a:19:10:9a:87:bb:7c:92:
53:b4:80:19:a3:db:77:be:bc:4c:9a:11:cc:d9:7d:84:d6:6f:
49:72:da:11:e6:95:bd:10:55:a2:ee:a5:bb:ae:08:47:ab:b3:
36:45:88:61:9a:e6:c7:85:2d:e6:b4:6d:0a:cf:bc:38:60:dd:
fe:b5:0d:ec:83:01:00:4a:81:73:b4:74:af:41:f6:1a:07:11:
bb:e6:58:b5:f4:4d:bc:9a:08:91:9e:43:29:51:1c:57:bc:93:
de:bd:cc:0e:1d:85:69:a3:e6:1f:eb:24:88:41:2c:e1:2b:ae:
1f:0d:11:e7:e1:6d:91:c2:12:18:dd:33:26:95:00:82:0b:2b:
5a:70:7f:0f:03:bb:40:82:ee:0a:ac:7b:51:3c:a0:dc:ef:ea:
21:f5:86:ed:84:1d:1f:1c:6a:35:76:82:bc:ec:18:9b:48:a5:
e1:d1:0e:ec:95:9a:e0:ad:ae:20:f3:65:a0:1a:f1:8f:91:3e:
e1:22:73:7b:f9:b1:70:be:3c:6c:a3:8c:ac:c2:df:27:2b:1c:
6f:62:3a:bc:98:a2:c5:43:19:b4:cb:a8:45:49:50:e3:06:41:
22:e9:63:79:db:bc:5a:2f:b2:af:4b:89:4b:e9:a7:84:44:cc:
2e:19:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:01:30 2026 by rpki-client