Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: Ctd2+XIIxPlz0g2TPotKNcgn85XI95iEKF54aN3Rwe4=
Subject key identifier: A1:C1:B9:C5:67:BF:3A:4C:B6:F2:DD:D6:B7:37:2F:8A:BD:94:4C:01
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019F91A441F89A122CDC82FD484E642822AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 01:01:28 +0000
Manifest this update: Fri 24 Jul 2026 01:01:28 +0000
Manifest next update: Sat 25 Jul 2026 01:01:28 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: RcunNbEXFZbpM4cnTOqzR6kMtOzYwHgoqLYqudrsRJc=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:41:f8:9a:12:2c:dc:82:fd:48:4e:64:28:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jul 24 01:01:28 2026 GMT
Not After : Jul 25 01:01:28 2026 GMT
Subject: CN=a1c1b9c567bf3a4cb6f2ddd6b7372f8abd944c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:18:e0:5d:af:b5:8b:0b:bd:73:6e:1b:a8:
fe:96:44:d8:e3:ca:28:ba:3c:ab:74:79:55:96:4a:
04:da:8c:d9:e2:4c:b6:8f:7c:e1:ea:cb:fa:20:1c:
93:eb:64:90:ab:13:46:a7:bc:58:92:a6:d3:70:33:
60:9a:9c:3d:7c:b5:a5:d5:8d:00:eb:62:44:58:d2:
fc:9e:1d:2c:dc:9b:56:24:ee:f3:a2:3c:2d:80:73:
28:48:e0:76:9e:59:fa:76:91:48:16:06:04:dd:9d:
c8:df:bd:70:c9:a3:02:d3:6c:cc:d8:29:25:d0:57:
d6:ca:9c:33:a1:1f:a5:bb:73:31:0b:a3:3d:97:28:
d7:eb:73:1f:b7:86:be:83:68:1d:c8:50:12:87:59:
eb:6e:ce:c2:61:03:61:38:c0:56:76:7e:a5:78:d3:
ea:bb:f7:1a:91:e4:90:b2:c4:17:d5:f2:1b:15:2f:
d8:fe:e5:ce:84:c8:0b:ff:be:f2:91:23:1d:00:3c:
8d:08:52:b2:7b:86:1e:8d:b3:0b:56:27:a6:d4:7e:
e2:2a:82:3f:2e:3b:9b:4e:0e:d0:8b:a3:f2:4e:e3:
0b:c4:f8:c7:2d:84:57:04:e2:3a:e3:9b:c3:38:b0:
c1:06:4d:8e:74:81:be:a8:8e:08:cc:aa:1e:7f:df:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:B9:C5:67:BF:3A:4C:B6:F2:DD:D6:B7:37:2F:8A:BD:94:4C:01
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:f7:eb:17:14:29:2a:c2:26:24:44:58:01:a9:4a:fa:69:
2b:6d:fc:19:54:71:fa:bb:0f:f7:5e:e9:97:b9:38:b0:6f:4a:
ff:81:c6:cd:09:7e:f3:a6:62:1c:b1:39:00:cf:c4:4a:68:0d:
c2:db:45:45:4d:cf:df:42:dd:c0:0c:71:ad:a8:bf:38:a8:a9:
28:02:06:d9:40:d8:e3:50:5c:b6:1d:08:f6:d3:8b:b7:25:46:
f7:98:f6:e2:31:11:79:1b:4e:3e:54:c8:37:6d:e8:7f:77:1c:
6d:70:e4:4a:de:6f:cd:86:c8:47:18:67:be:4f:ac:8d:59:67:
84:3c:34:66:6b:e2:4b:d1:0e:b8:2a:5b:eb:b6:9c:4f:b9:5a:
28:0f:31:c9:a4:f6:fe:54:9a:ea:f5:73:14:7a:33:99:92:5e:
09:cc:e9:45:7e:50:e2:ae:8a:ae:0c:76:82:da:2d:5b:fe:c1:
78:37:6e:25:d6:55:2d:11:22:ea:83:8b:7f:39:4a:1d:c0:36:
5e:16:88:4b:d0:75:38:05:82:4a:0c:65:21:c0:8e:97:5d:aa:
fc:2d:fd:12:1c:ec:71:ac:df:a5:a4:a2:2e:1a:61:38:f5:6f:
78:f0:bb:7c:4e:9e:c0:9e:b6:74:c4:b0:f5:f2:2e:8c:4e:7c:
cf:15:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:13 2026 by rpki-client