Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: GsxAZOD7MpsuGISrRHgK9x4nbKk7wbtI0iIqwumX+pk=
Subject key identifier: 67:31:88:A0:7B:A5:2D:90:24:26:56:37:01:FF:0D:87:DE:B7:08:BD
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019D371BFCA2367EE29C9B2B551B126DA038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: v3rf9LZvplAUVQrBPA2zS8YiBPuWCCb4uysKVCbuYUA=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fc:a2:36:7e:e2:9c:9b:2b:55:1b:12:6d:a0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=673188a07ba52d902426563701ff0d87deb708bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:55:b9:15:15:a3:25:df:d8:6c:70:48:84:
b0:1a:05:64:e6:72:a6:67:ba:e8:4b:31:a3:eb:f5:
3b:81:9f:34:bb:81:a2:c9:e3:f8:20:6a:b5:7d:8e:
d2:5e:12:48:7c:37:aa:52:d7:0e:ca:5b:3d:71:b2:
ec:97:1c:61:33:d2:fa:e1:b7:b2:e3:c1:90:de:9b:
ef:70:b3:f4:88:fc:bb:e7:ea:ae:26:cb:26:5c:ab:
1f:1d:ef:8e:0d:77:75:ff:43:b0:3c:23:80:93:52:
a1:ed:66:5a:c0:1b:7d:40:e5:9b:7c:5a:3f:47:8f:
6b:a7:51:bb:46:c5:ba:31:db:f3:66:14:88:14:20:
24:9d:0a:16:58:c7:5a:85:29:88:1c:39:79:de:fd:
a2:ab:04:b4:d9:64:cf:90:31:6b:44:3d:02:1a:35:
3f:4d:b7:01:cf:d7:69:e0:49:71:8a:c4:a4:d2:80:
b6:3d:3a:d9:8f:d5:2e:b4:8d:ad:a4:ad:28:ab:6b:
04:9a:91:f2:61:45:22:39:29:21:82:78:b5:a9:38:
3a:4b:ea:5a:c7:c2:27:d0:25:6e:69:d5:2e:b0:9b:
5c:04:16:c2:0f:69:11:dc:90:ac:93:69:f0:08:ad:
f5:64:be:62:c2:7d:ce:6e:7a:c7:dd:b3:6e:b4:0c:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:88:A0:7B:A5:2D:90:24:26:56:37:01:FF:0D:87:DE:B7:08:BD
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:11:67:fb:50:bb:d1:57:4a:be:3a:99:08:bb:e8:56:21:1e:
75:82:3e:29:b9:db:ac:c0:40:e5:11:79:fc:4a:ef:94:ac:66:
d3:68:ca:2e:73:1f:b4:cd:a1:f3:b3:b8:f7:cf:60:fa:22:cc:
f5:cd:a0:38:67:52:d5:af:27:6d:96:1b:03:a7:ad:6c:9c:a4:
91:d1:06:40:90:fa:cb:20:c4:03:30:25:ac:5b:af:93:72:78:
f3:2d:da:ef:2e:64:d7:db:30:0f:37:a5:ae:f7:a4:59:a1:64:
8a:2b:43:7a:5c:e0:1d:cc:33:b3:e2:02:c0:ca:e6:f3:bf:d5:
3b:d8:cc:2b:de:75:f8:36:f8:b2:88:88:00:da:78:92:5c:bc:
0c:39:69:18:1d:5d:c4:eb:78:aa:08:83:58:5e:66:ad:6c:39:
93:3f:c1:3b:e8:d8:b2:94:c2:a8:fa:39:c8:81:f4:72:64:20:
a4:c1:29:45:0a:d9:d7:9c:2b:79:80:2a:dd:ef:03:69:57:50:
f0:2e:00:34:bb:3d:80:8d:c9:01:ba:eb:e6:01:31:a1:a2:ed:
8c:7e:d9:27:b3:6f:06:b4:b2:27:f1:f3:c1:d4:ae:74:89:2d:
e3:bb:96:85:19:d6:93:db:4a:02:9f:9b:58:27:24:0f:65:3f:
2f:04:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:36 2026 by rpki-client