Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: jIXOaRO9UVYrTpUh6dWx2j+7icLP+rB1hzpw8dgPvqw=
Subject key identifier: 25:37:25:A9:85:43:D4:F8:97:AE:43:77:50:F0:66:74:E8:F5:6C:EE
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019E3229A46138CC1F628421D222C94DF625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 19:00:50 +0000
Manifest this update: Sat 16 May 2026 19:00:50 +0000
Manifest next update: Sun 17 May 2026 19:00:50 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: ERtyRIzKYL3Gg/y8QiLuTMnO2c4O1dkzWs5arxSbZkg=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:a4:61:38:cc:1f:62:84:21:d2:22:c9:4d:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: May 16 19:00:50 2026 GMT
Not After : May 17 19:00:50 2026 GMT
Subject: CN=253725a98543d4f897ae437750f06674e8f56cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:a6:47:06:e9:8a:71:00:e0:58:91:ab:64:
b2:23:e2:f7:22:3f:e3:08:63:b6:b8:e4:24:bc:51:
a4:99:df:96:56:03:cb:b4:da:61:db:a5:65:f3:96:
44:e1:31:87:42:f7:d2:df:1a:49:08:46:78:6f:c8:
5e:fa:8b:55:67:3e:1a:dc:1f:b2:bf:96:0e:81:4e:
31:b7:76:da:4d:d9:97:08:ae:61:bd:ed:bc:f6:1e:
e9:17:7f:3f:99:c9:2f:39:35:f4:bd:ab:16:bb:4a:
81:70:52:48:96:08:54:89:f9:16:5f:43:b0:a3:a7:
c2:99:c3:62:65:8b:e9:ce:3b:af:43:d0:83:1c:aa:
68:03:46:da:75:12:75:90:28:b1:7c:5e:89:34:99:
af:96:20:f0:b9:43:f0:b1:f9:d1:8f:df:4e:e8:ad:
6d:ab:c3:d7:69:d3:fd:24:f4:ea:b8:f7:82:bf:ae:
50:1d:9c:55:5a:04:a6:ae:6c:96:da:ca:4a:52:07:
63:ae:6b:65:5c:78:88:c4:12:80:f5:81:5f:6f:c1:
2d:f2:11:7b:4f:60:0e:f6:9e:31:18:f3:c2:37:1c:
af:06:d6:f8:ba:5d:76:31:b0:40:a9:23:40:32:5c:
95:f3:d2:29:52:08:42:ef:fc:66:c2:b4:8d:ac:df:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:25:A9:85:43:D4:F8:97:AE:43:77:50:F0:66:74:E8:F5:6C:EE
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:08:72:12:77:f6:a7:59:c3:6f:a1:73:75:28:59:13:45:
30:c2:80:61:31:a0:5e:30:17:fc:df:c5:e3:bc:fe:51:33:5b:
73:32:cc:16:2c:54:59:41:5a:14:16:4b:b9:1e:50:50:58:43:
18:2d:65:85:7e:4d:01:bf:f1:b4:d6:ef:64:fa:a3:f5:e5:31:
4b:20:18:7e:c8:27:3a:a2:a0:74:bf:0e:21:41:c2:ab:36:5d:
69:12:04:c3:3f:39:eb:ce:71:6a:cf:6a:f0:7c:87:63:77:ca:
1a:21:52:fa:0a:df:79:8c:c6:75:e4:03:f5:06:45:97:25:f8:
c2:93:a3:b6:8c:5f:d2:e3:87:a4:90:0e:0c:0b:c7:70:43:2c:
58:fc:fe:b9:9e:82:58:26:d8:83:30:47:e7:b8:9d:e6:6e:8d:
dd:d4:2c:2e:e1:22:9d:c8:18:ec:1b:7e:00:bd:e4:68:02:e9:
f8:e3:f2:92:c5:d8:52:de:a7:83:a1:f6:79:42:58:c0:ee:7e:
38:e7:bc:11:7a:cc:5b:56:a8:2d:45:f5:7f:6b:c3:d1:9d:98:
cd:a3:fc:65:1c:db:64:19:90:4f:6a:96:53:62:f8:36:1b:d5:
c4:3b:5b:45:bc:ea:11:ce:ff:64:30:98:b1:d2:e6:f2:58:fe:
63:03:df:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKaRhOMwfYoQh0iLJTfYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0
N2M2MDMwHhcNMjYwNTE2MTkwMDUwWhcNMjYwNTE3MTkwMDUwWjAzMTEwLwYDVQQD
EygyNTM3MjVhOTg1NDNkNGY4OTdhZTQzNzc1MGYwNjY3NGU4ZjU2Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zamRwbpinEA4FiRq2SyI+L3Ij/j
CGO2uOQkvFGkmd+WVgPLtNph26Vl85ZE4TGHQvfS3xpJCEZ4b8he+otVZz4a3B+y
v5YOgU4xt3baTdmXCK5hve289h7pF38/mckvOTX0vasWu0qBcFJIlghUifkWX0Ow
o6fCmcNiZYvpzjuvQ9CDHKpoA0badRJ1kCixfF6JNJmvliDwuUPwsfnRj99O6K1t
q8PXadP9JPTquPeCv65QHZxVWgSmrmyW2spKUgdjrmtlXHiIxBKA9YFfb8Et8hF7
T2AO9p4xGPPCNxyvBtb4ul12MbBAqSNAMlyV89IpUghC7/xmwrSNrN+2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU3JamFQ9T4l65Dd1DwZnTo9WzuMB8GA1UdIwQY
MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt
ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj
LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKIIchJ3
9qdZw2+hc3UoWRNFMMKAYTGgXjAX/N/F47z+UTNbczLMFixUWUFaFBZLuR5QUFhD
GC1lhX5NAb/xtNbvZPqj9eUxSyAYfsgnOqKgdL8OIUHCqzZdaRIEwz85685xas9q
8HyHY3fKGiFS+grfeYzGdeQD9QZFlyX4wpOjtoxf0uOHpJAODAvHcEMsWPz+uZ6C
WCbYgzBH57id5m6N3dQsLuEincgY7Bt+AL3kaALp+OPyksXYUt6ng6H2eUJYwO5+
OOe8EXrMW1aoLUX1f2vD0Z2YzaP8ZRzbZBmQT2qWU2L4NhvVxDtbRbzqEc7/ZDCY
sdLm8lj+YwPfRA==
-----END CERTIFICATE-----
Generated at Sat May 16 21:12:53 2026 by rpki-client