Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: m4incmO8+X2d0rs+8csuwcU7CMf3b71j6algEUktpK8=
Subject key identifier: 7A:D5:2D:FE:E6:DA:D9:8C:45:F4:B2:85:82:5B:13:05:D5:A2:DF:A9
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01A001A5B9D1CE6DF2C86D1D92BD0449D2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:00:33 +0000
Manifest this update: Fri 14 Aug 2026 19:00:33 +0000
Manifest next update: Sat 15 Aug 2026 19:00:33 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: yHyFqMtGPexqnXEHAXaZpjK0aGr74DUjZ8gs/dSw2Jg=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b9:d1:ce:6d:f2:c8:6d:1d:92:bd:04:49:d2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Aug 14 19:00:33 2026 GMT
Not After : Aug 15 19:00:33 2026 GMT
Subject: CN=7ad52dfee6dad98c45f4b285825b1305d5a2dfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:22:85:bf:fd:da:1b:d3:8f:58:8c:92:a9:
10:30:6e:61:64:53:0e:91:e1:05:76:1d:17:f2:90:
06:f7:47:f2:95:1a:09:d8:8a:46:8d:31:96:b4:a3:
6f:47:63:0e:91:8d:ee:25:cd:9a:1c:48:e7:3a:72:
0b:01:a9:73:d6:6d:8c:1b:cb:16:34:8c:4b:e9:df:
95:90:46:51:e4:62:c9:e1:29:20:19:88:3f:ba:df:
78:84:6e:4e:19:ac:5c:66:45:ea:31:b4:2e:24:9c:
0e:27:98:32:f7:25:fd:ad:3d:ac:87:d4:87:a4:2d:
34:09:29:fb:5e:a3:2a:47:b3:a1:9b:d9:94:8d:f6:
5e:c2:40:c2:87:65:b1:dd:b4:9c:a6:f9:7c:84:26:
7f:8f:67:fe:7b:9a:cc:0e:1e:8c:ab:73:9e:04:a1:
fe:ae:22:32:98:75:91:d9:3b:42:21:69:24:94:21:
f5:11:3d:78:15:74:90:19:2e:4c:b3:8f:25:51:f4:
18:9c:63:cf:20:19:b6:1a:80:a1:c0:6d:cb:93:fd:
5a:94:f3:c5:4f:12:3f:01:ce:d0:bf:af:2c:43:ee:
ab:82:0c:30:9f:f7:dd:95:e8:4d:a6:ee:73:46:16:
cf:e9:71:2d:79:3a:8c:a5:f1:7d:cf:db:57:2a:13:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:2D:FE:E6:DA:D9:8C:45:F4:B2:85:82:5B:13:05:D5:A2:DF:A9
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:83:70:28:f7:d8:f6:c3:e2:dc:9c:a1:69:bd:a6:fe:9f:dd:
34:c6:1d:4c:1c:fe:a8:f8:75:fa:f1:07:83:09:87:4d:69:bf:
a5:6d:2e:5a:1f:72:dc:68:c6:38:a3:d8:e0:4b:e1:f3:40:f6:
75:51:46:34:28:ee:74:79:59:58:1f:e1:46:12:1d:a9:25:f7:
b2:4a:4e:34:21:cc:9d:c1:0a:aa:d2:97:f3:7d:5d:7a:a3:49:
9a:32:3a:46:9a:5f:14:13:3a:ea:22:53:f8:68:fe:a2:a1:4c:
35:ed:22:c2:28:a7:c6:fa:ea:ca:f9:bd:75:5c:e1:53:2d:52:
7a:f8:59:9f:9f:0a:d6:e6:d8:0f:1c:14:d5:1a:a6:76:23:2f:
f7:ad:1b:41:d9:54:f5:45:5d:b6:e4:ec:f5:27:c0:8c:89:df:
b6:53:03:62:c8:52:0a:79:15:db:7b:0b:7d:b2:b3:fa:00:94:
ae:9b:53:dd:5b:b6:5d:ec:47:14:97:ee:8a:15:6e:21:a4:e4:
c7:bb:40:7c:6b:80:12:71:0a:88:cd:a0:77:3d:f7:ae:69:d1:
6b:c5:61:97:6f:25:5d:76:74:49:d1:66:df:bf:3b:0b:4b:83:
ca:79:d6:cc:d1:2f:88:d1:09:cb:e3:37:d4:58:f9:c8:59:c3:
e3:67:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:44 2026 by rpki-client