Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: Z7gCiIM57KPQyQ+3rul3KkzH/pPPJSy++eLSCEIGIj4=
Subject key identifier: 39:68:42:F4:50:36:80:D4:C9:E8:E9:77:54:CA:CC:1B:F0:DE:71:59
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01A11003AAC06405992FA7B67C57C4E91FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 07:00:38 +0000
Manifest this update: Tue 06 Oct 2026 07:00:38 +0000
Manifest next update: Wed 07 Oct 2026 07:00:38 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: ysgXOjYv8YIHQesX4MVQrVgOlGWjWmIuyrAbXgeLlq4=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:aa:c0:64:05:99:2f:a7:b6:7c:57:c4:e9:1f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Oct 6 07:00:38 2026 GMT
Not After : Oct 7 07:00:38 2026 GMT
Subject: CN=396842f4503680d4c9e8e97754cacc1bf0de7159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:7a:00:42:6b:09:18:bc:d4:c7:a7:6e:4b:
a3:0b:58:d0:73:8a:0e:9f:76:c4:e2:d3:de:9c:8c:
bf:2f:a3:af:cc:48:eb:f2:02:47:c5:2b:10:9d:aa:
07:7d:da:77:b9:34:dc:6d:b5:b8:57:23:4b:e3:f4:
28:9f:88:80:14:ad:a7:41:d1:04:5c:a2:9f:50:c0:
40:f4:e3:fc:93:23:b9:48:91:79:1b:e3:0b:6f:79:
09:b6:a8:16:71:0a:ad:ab:4c:ed:c1:28:08:e5:48:
0a:cc:cc:55:33:fa:c3:4b:01:e7:d8:08:2e:38:ce:
11:bc:01:5a:1b:ed:e8:b2:9d:8a:ef:62:58:45:ba:
41:3f:c8:50:c3:89:de:7f:c9:65:24:40:7a:2d:34:
eb:f0:6d:be:7d:79:a4:f8:09:94:3a:7c:cb:70:3c:
c9:6c:09:be:06:1c:96:91:ad:fe:d8:0e:5e:49:fe:
2e:47:99:06:78:65:93:df:35:c6:13:df:81:f5:da:
b1:37:24:4e:ad:3d:f9:46:a3:01:0e:a6:72:17:61:
c0:e4:de:f4:15:55:4e:84:5f:2e:dd:8a:d7:95:2d:
0a:36:7a:2c:2b:ff:36:f8:ba:36:7e:8f:b3:07:57:
03:18:3c:45:2e:2d:53:3b:4c:9c:9f:a4:20:26:86:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:68:42:F4:50:36:80:D4:C9:E8:E9:77:54:CA:CC:1B:F0:DE:71:59
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0f:be:07:ce:25:5c:7e:c4:b9:b3:3d:43:53:fd:e8:89:c5:
b0:ab:6c:77:77:a7:55:15:b5:e4:1e:3c:8b:38:b8:c9:20:2c:
1e:4c:cb:ef:a0:c7:73:2a:a7:52:4d:2d:02:25:cd:ac:15:77:
9b:b4:02:ea:b8:2c:40:96:d3:e0:e3:0b:4a:72:4c:4f:45:2e:
cc:3c:5d:37:42:df:d9:4c:c0:26:8b:4f:31:01:6f:53:7f:9c:
ab:7a:62:16:3b:9d:32:37:d5:06:bf:a0:c4:fa:b8:a0:58:c6:
3a:f1:d0:62:7c:37:63:d6:03:e2:9b:e9:bf:1f:55:20:c2:26:
af:65:00:2c:74:e9:30:98:81:7a:f4:c2:ab:45:9a:8c:e7:dc:
0f:c6:8e:c1:9e:34:cf:82:3a:fa:56:86:13:a7:c4:37:12:03:
1c:1b:ae:39:0a:ae:c2:7c:65:db:1b:6e:88:a2:b2:bf:3c:f8:
e2:87:6b:f8:c7:9a:9e:4b:8d:d9:86:dc:9d:a6:79:b2:88:ac:
ab:40:06:68:42:7a:d1:dd:2f:04:36:23:04:13:58:3d:ad:ea:
7c:5e:12:7d:55:fe:3f:06:46:20:45:c0:1a:f8:c9:35:c0:ad:
f1:1f:96:e0:41:fd:3e:7d:b9:b5:ce:38:ac:32:af:76:d1:46:
5a:c5:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:16:32 2026 by rpki-client