Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: ykwiFKCRsEOYYsqJ95d4JiaT/2pVXZvlkbsZ/QrwF/k=
Subject key identifier: D2:8B:0F:AC:82:48:8E:F3:EE:0D:64:18:4A:AF:19:53:FC:40:CE:BB
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01A1DEA7A855C72690DBE503FFEA10842902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 10:01:31 +0000
Manifest this update: Sun 15 Nov 2026 10:01:31 +0000
Manifest next update: Mon 16 Nov 2026 10:01:31 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: DnTyBpQpq0HzC7NN8CnB8ZzLdRMST3e2yd/M+Lfz5ug=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a8:55:c7:26:90:db:e5:03:ff:ea:10:84:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Nov 15 10:01:31 2026 GMT
Not After : Nov 16 10:01:31 2026 GMT
Subject: CN=d28b0fac82488ef3ee0d64184aaf1953fc40cebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:d1:d6:3b:16:13:72:51:39:77:31:1a:31:
07:f3:0e:bb:36:a3:bf:bc:f9:10:89:08:9f:5a:3e:
d7:6e:aa:df:27:3c:2e:b3:35:7e:84:4f:2e:16:b6:
2e:96:7e:21:3f:08:bf:fa:f5:5f:a3:0c:6b:c9:89:
10:e9:62:c8:bd:b7:2e:95:95:2d:76:a3:24:41:01:
14:8b:0a:f8:ad:58:f7:a4:e1:77:89:1d:e4:5e:90:
0b:b9:7e:7c:2c:dc:c8:87:e2:e8:8b:df:89:f2:58:
92:2b:73:a9:99:05:55:24:0c:14:f1:b3:a0:b6:da:
80:73:af:ac:91:2e:fb:ca:c1:64:29:71:81:c4:8f:
58:1a:8e:9d:3b:68:41:8c:f9:46:54:1f:e2:8b:be:
1d:1d:ee:41:95:86:24:cc:be:21:25:e5:3f:09:9d:
33:20:50:37:ca:ba:c7:7c:a1:72:38:74:ee:1c:3e:
e0:d4:d7:b2:7d:a8:e6:9f:d5:20:7c:40:1e:45:88:
61:42:e8:29:0a:a9:53:ba:33:88:de:7e:a5:28:31:
f7:be:df:6a:50:29:e8:f1:ee:22:e4:8a:b7:1f:c0:
f3:db:ff:71:a9:4b:b0:13:68:b9:35:3b:d4:47:b8:
31:aa:5e:7d:6e:6f:ba:33:28:78:62:97:72:d6:79:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:0F:AC:82:48:8E:F3:EE:0D:64:18:4A:AF:19:53:FC:40:CE:BB
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:65:4e:26:00:c8:fb:15:57:c9:48:01:23:df:f8:85:75:
b5:a1:f1:f6:de:53:4a:3f:1d:53:d4:34:88:22:25:f0:72:50:
07:cb:9a:21:2c:7d:89:1b:0d:7e:05:04:39:e7:e0:67:8e:61:
a9:1b:db:3f:2a:ad:c8:41:a5:14:18:26:13:e0:69:48:46:a0:
08:30:a3:9b:30:42:2a:b5:d5:c3:eb:36:1c:1f:e0:4c:d3:5e:
a6:49:f3:eb:7b:ed:bb:b0:26:d0:58:33:d3:e6:bc:5a:a7:f6:
99:a1:79:e9:ce:b4:3b:2b:3d:5f:08:8d:3b:15:3d:b3:9f:6b:
94:78:63:48:28:ca:a6:7b:43:4c:76:38:9a:bf:b1:ca:d2:8b:
76:68:b5:67:7f:dc:25:97:d8:40:65:a6:59:f3:bc:05:8c:ed:
2d:16:2e:59:c9:ee:69:aa:6e:0d:88:cb:64:48:e6:d4:00:98:
be:00:c0:c9:cc:63:87:c0:db:f3:bf:6a:cb:94:fb:3d:18:c2:
e3:c8:3c:81:de:61:bc:86:b2:85:7e:76:2d:1b:6e:0a:e3:ed:
87:4b:14:73:99:75:29:a5:37:7f:42:6a:30:a0:34:87:6f:e2:
1d:4b:88:dc:19:f1:a0:c8:e1:11:71:2e:65:99:94:38:e0:4a:
c1:18:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:50:29 2026 by rpki-client