Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: dS3r5kT8yynPMj/b1wEMkIptm324nkqsLO1IyrNfQXk=
Subject key identifier: EB:5D:85:B5:76:A6:03:25:3F:A3:5C:3C:B2:79:9E:A2:F1:14:6D:13
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01A10E4C6365B298676223444C4A2D2F01AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 23:00:49 +0000
Manifest this update: Mon 05 Oct 2026 23:00:49 +0000
Manifest next update: Tue 06 Oct 2026 23:00:49 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: 4ZeKVhSj9IOZHDdvY2mRNpiJ1GfkV5OmSzxfF8+7S7Q=)
2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:63:65:b2:98:67:62:23:44:4c:4a:2d:2f:01:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Oct 5 23:00:49 2026 GMT
Not After : Oct 6 23:00:49 2026 GMT
Subject: CN=eb5d85b576a603253fa35c3cb2799ea2f1146d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:d9:cd:d0:60:00:9b:77:49:76:72:28:30:
af:cd:47:bc:94:9d:82:33:1c:3c:4a:83:1a:84:f0:
6e:e0:6a:8c:41:02:4b:f9:35:12:3a:bb:84:43:68:
d6:f0:b1:0b:c4:92:ef:a0:cc:41:a8:6b:3c:2e:db:
ef:1e:7c:f0:4d:8f:75:8a:94:17:e0:a4:85:99:ee:
d6:ed:57:d4:86:ff:09:6f:69:dd:0d:43:4a:a0:aa:
e4:13:c9:00:93:42:bd:4d:1f:40:51:5a:32:d7:33:
b6:49:77:64:d2:b9:e8:66:8f:c2:33:cc:66:67:09:
51:e9:49:56:cc:e2:8a:09:20:e6:f3:ce:ee:34:52:
f5:f2:55:78:2b:b1:62:48:b4:c2:6f:b1:05:d4:d9:
4c:f0:30:19:58:eb:e3:cc:bf:5c:5f:59:14:1f:90:
75:28:30:7a:26:81:81:ba:34:f2:85:9a:28:e0:1c:
f3:06:01:9f:24:a7:66:5e:81:ee:d8:88:45:47:0f:
bc:80:ef:64:7c:50:6d:7d:bf:4a:d5:28:39:68:18:
73:4a:22:97:d3:99:77:01:5e:20:86:3d:f6:cd:37:
17:92:65:84:4e:ca:39:a2:f0:b3:2f:b4:96:99:03:
e4:f0:5b:ea:84:91:cf:c8:fa:67:9b:18:a2:2b:fb:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5D:85:B5:76:A6:03:25:3F:A3:5C:3C:B2:79:9E:A2:F1:14:6D:13
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d7:bc:3a:ff:ce:90:6b:66:70:34:1a:38:7f:a6:8e:21:11:
de:bd:78:83:ca:76:7b:e6:89:cf:3c:c1:ca:b4:05:61:82:86:
f8:45:2a:b5:23:22:71:6a:03:dc:a3:40:2a:80:50:c3:de:35:
d1:88:5d:64:e1:42:7e:06:6b:4e:26:f8:e6:e0:75:56:4d:23:
77:f6:4f:a1:db:a0:e6:cd:55:2a:17:52:cf:a2:4a:c7:27:3f:
bd:85:03:5a:09:cc:29:93:cf:95:52:1e:12:58:2e:b4:59:af:
39:21:11:f2:f6:73:b2:79:45:0e:f0:45:3c:3c:3c:97:e8:7b:
5d:bc:b5:d2:71:fe:db:3f:f8:c5:c4:e5:b4:4d:73:b1:68:3b:
04:2f:a4:25:2d:68:df:95:80:9e:e2:b6:00:64:0a:66:bd:01:
1b:13:a8:f9:41:a6:ae:c6:d1:b7:a3:c3:5d:76:de:fd:34:94:
7b:19:49:8e:d0:6f:3a:35:37:bd:91:c7:ba:58:38:78:d0:87:
a7:18:73:36:30:64:f7:e5:a4:6b:a3:a0:25:8c:aa:c2:e8:91:
6e:9e:4e:6f:cc:47:1f:30:45:13:51:df:0e:25:98:e8:a2:21:
e1:1e:d1:b3:30:a9:b3:73:b4:5d:b8:92:e8:d6:0d:3b:ea:21:
49:a8:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:12:10 2026 by rpki-client