Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: 7LwwvcLg+EYo9qVCbvj4T4DytwPSX3C6II1HlaSkmCI=
Subject key identifier: BA:4F:3A:ED:B2:1B:43:88:75:C1:A9:CB:26:D4:E1:B9:B3:AB:57:5F
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019F19E891828ECFD45695DD1CFA77EC2521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 19:01:39 +0000
Manifest this update: Tue 30 Jun 2026 19:01:39 +0000
Manifest next update: Wed 01 Jul 2026 19:01:39 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: /WGsWvu5o+t63eYuvZJX3PKNqjeI6vEg22efUPh7Pf0=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:91:82:8e:cf:d4:56:95:dd:1c:fa:77:ec:25:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jun 30 19:01:39 2026 GMT
Not After : Jul 1 19:01:39 2026 GMT
Subject: CN=ba4f3aedb21b438875c1a9cb26d4e1b9b3ab575f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:e5:8c:7c:87:c6:07:bc:53:2f:d5:08:fa:
1a:50:7e:af:78:dc:9d:a1:99:17:51:42:d3:b9:2e:
0c:6d:ca:cf:fa:59:27:92:4c:00:bd:03:93:61:c8:
ff:1f:4f:dc:f0:7f:b5:57:59:aa:e2:5a:35:57:cb:
98:67:34:68:ac:9b:2f:df:a6:9e:68:f0:79:cf:a3:
66:33:61:3b:18:15:69:03:15:7b:99:cd:bd:1c:89:
9c:ec:70:cd:3b:15:c4:36:f8:e7:5e:7e:c8:14:cf:
2b:84:27:fc:0f:bd:5a:18:4a:7b:0c:6b:f7:47:0f:
77:bd:68:87:d3:ea:65:25:f4:8e:56:da:df:a6:b0:
aa:5b:92:6b:08:e4:2a:6f:85:3b:26:34:3e:2b:33:
4f:0f:45:09:cd:ca:12:fb:79:22:e3:1f:63:c9:46:
8a:6b:85:f8:7b:02:8b:1b:40:96:df:42:6d:8b:ad:
24:8c:a6:e5:2d:b0:fe:63:de:f2:d6:36:28:11:72:
8a:c9:c1:ff:b6:0a:80:45:fa:5f:f1:32:f6:39:73:
a1:87:86:b1:91:f6:ab:fd:e5:7f:ac:f9:bc:b3:f1:
68:ad:48:62:5b:e0:d7:26:d9:ff:14:3d:e4:83:4a:
9d:3e:a5:38:45:c2:3d:97:34:ce:58:44:31:d4:45:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:3A:ED:B2:1B:43:88:75:C1:A9:CB:26:D4:E1:B9:B3:AB:57:5F
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:bc:86:0f:87:c6:c6:3a:c9:81:2b:e3:38:ad:08:c3:d9:
11:22:ba:ee:b4:62:1f:3f:3c:2c:9e:d1:75:60:bf:4a:5c:94:
52:58:bd:de:1e:85:a2:3b:23:b6:9e:41:03:29:90:4e:df:e6:
40:be:00:8c:a3:72:5c:90:bc:4d:1c:92:d4:1f:ef:94:85:a5:
06:dd:6e:2a:b7:66:2d:5c:eb:1e:a2:57:9c:b7:e1:14:d2:67:
f9:71:c9:64:6e:1a:e5:35:3c:94:17:99:eb:df:10:ff:81:e8:
9e:d0:26:81:99:c0:dc:a4:91:0a:62:23:2a:c6:89:c8:8c:c4:
1f:a4:54:d8:74:56:2e:55:09:17:ee:23:4b:90:db:a1:a6:dd:
49:36:3e:11:67:3f:5a:dc:7d:0a:ee:f2:88:e1:e1:a3:73:c1:
d0:4f:56:14:9c:13:44:b1:9d:e7:76:ce:97:90:d5:0d:c2:dd:
77:ef:ac:16:b9:68:2e:b7:9f:89:aa:87:97:6a:2c:e5:1d:d7:
cd:d2:28:59:75:5c:b5:dc:3c:a5:aa:28:d9:e0:10:66:8b:c7:
80:aa:54:6f:15:22:5b:85:92:4c:cf:f8:f5:af:5e:39:9e:ee:
8a:75:e2:16:42:1f:e2:b1:12:10:2e:a9:60:90:56:34:05:36:
3c:86:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:00 2026 by rpki-client