Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: D7DMc1oveKlT8utKH3ru9kCspb/9o+D8yYRxE6JAPNQ=
Subject key identifier: 7A:85:2E:A4:41:22:E3:F1:C6:CB:6B:50:65:E7:CE:01:C7:E7:7E:40
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019D2997237607D7D4EB8F3E1158B37A76D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: XHio1zvZtGzXj+mx0k6F3HRGxA3/JdRC0wlmJiaGz9Y=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:23:76:07:d7:d4:eb:8f:3e:11:58:b3:7a:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=7a852ea44122e3f1c6cb6b5065e7ce01c7e77e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:73:9b:bb:c2:ac:6c:14:87:bc:24:a5:25:
c0:c4:42:65:be:81:73:e3:f8:a9:40:ac:f2:29:61:
34:d2:87:08:ad:38:92:24:06:24:0e:66:69:d5:50:
af:90:8f:48:aa:a4:89:4c:ec:19:38:0e:4e:e7:57:
25:dd:34:aa:d9:0e:41:e1:05:ae:f8:46:3d:e0:d0:
15:b5:fc:fc:69:f1:62:4e:6c:21:b7:6e:c1:5f:80:
de:a6:0b:14:ad:d7:2c:84:54:46:ae:db:a0:93:2c:
8c:60:25:e6:b0:76:7e:92:f4:9d:73:42:ac:d8:a0:
fd:b8:66:c9:5d:62:19:2a:7f:40:0f:bc:37:3e:6c:
dc:d4:24:82:9d:82:8b:1f:03:49:c3:ec:d7:be:f6:
b1:d5:e6:4e:e2:b0:a9:44:68:cc:d0:04:4b:68:31:
e9:ad:b3:01:66:14:5f:39:8b:1e:2c:ca:d1:f3:29:
95:7e:61:32:b4:66:74:61:f5:64:f0:42:47:54:5d:
d2:aa:4a:69:a4:a5:f2:a7:b0:f0:c4:b8:e5:1b:c2:
20:c9:e5:6a:2f:5e:02:df:53:60:d6:96:f1:77:eb:
27:7a:a3:3d:6a:8a:77:ed:90:ee:05:0f:d8:a6:f9:
a4:57:ee:a4:7f:ee:ba:58:41:f4:54:c2:4b:f0:50:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:85:2E:A4:41:22:E3:F1:C6:CB:6B:50:65:E7:CE:01:C7:E7:7E:40
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:16:92:2a:bf:07:bb:e9:ba:db:aa:a0:cc:57:c8:69:94:20:
47:8f:59:ec:6b:38:80:a3:8c:d4:fd:c3:27:b0:64:2f:55:f5:
7d:a1:e8:9b:bf:5f:45:2b:33:84:34:64:7c:00:7b:98:b0:29:
59:32:ba:cc:ee:02:58:2b:1e:64:2c:66:3e:aa:9c:ac:62:7b:
57:e8:99:28:41:74:40:14:a0:7f:3c:f2:9c:40:b9:55:eb:c0:
60:22:6a:c8:d3:af:de:bc:03:e5:ca:36:80:c4:20:64:ca:cd:
e2:93:50:76:69:98:e7:fe:82:1c:ad:31:9d:14:e7:21:7d:d8:
9c:68:60:18:e6:1c:c1:f5:c3:42:f0:03:d8:6e:fb:65:12:4d:
9b:b6:7c:e9:72:d5:9d:08:b8:e2:d1:94:11:2f:89:5a:cd:64:
44:67:6f:d6:75:b3:16:38:a0:b4:e5:4f:05:47:79:9b:6f:77:
4b:ef:23:f9:8a:74:eb:5a:c4:b1:25:db:6b:0a:8e:c3:08:eb:
f4:5f:8a:81:af:1c:85:b3:90:52:03:0e:16:d8:e9:62:e2:b8:
6c:95:25:0f:c8:58:0f:9b:b7:76:fb:8a:46:59:82:f8:4d:45:
b8:b6:72:1a:e4:16:05:b7:1a:fd:30:48:93:22:b6:77:11:8a:
79:30:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:37 2026 by rpki-client