Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: oT1Y00RSyJwnSUc7vhxV6tqd62n0GOcXrIsLL4FC9Sc=
Subject key identifier: 31:8C:57:A4:07:59:B3:1D:E6:C8:B2:1B:FD:A1:E9:B1:6A:89:A9:8E
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01A0D614D8AC6D4C4524EC2BC859DA10FFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 01:01:25 +0000
Manifest this update: Fri 25 Sep 2026 01:01:25 +0000
Manifest next update: Sat 26 Sep 2026 01:01:25 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: m27ghUCUZIQs4r9KNmcrD0vZyelqLRPGgcsqAfruzug=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:d8:ac:6d:4c:45:24:ec:2b:c8:59:da:10:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Sep 25 01:01:25 2026 GMT
Not After : Sep 26 01:01:25 2026 GMT
Subject: CN=318c57a40759b31de6c8b21bfda1e9b16a89a98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:df:d9:70:83:fb:0e:7a:37:99:b4:13:a0:
c9:3a:24:ad:7f:33:b3:ca:d5:ff:65:5c:52:7f:2e:
ce:fd:7b:b5:3d:e8:04:d4:d3:bf:6a:ae:04:d5:5c:
4a:e7:19:50:e4:14:72:23:d0:50:7d:11:3d:15:1a:
d8:56:80:4b:85:00:13:1b:95:de:a2:97:eb:7e:8a:
3f:17:34:6f:f4:94:ed:68:38:88:b7:88:fd:78:24:
e3:c0:b9:b2:53:57:56:3c:3a:fe:c5:33:4c:9a:e2:
cc:7b:c6:f0:69:5e:c9:b5:a2:65:f9:99:ac:c0:59:
00:5c:99:bb:d9:3b:e7:fb:14:25:54:76:03:2f:67:
a5:11:41:71:b5:d2:79:8e:bb:fa:57:82:ab:7e:5d:
c0:2c:72:cc:c2:f7:d5:54:2c:1d:86:ba:db:f4:dd:
d1:97:86:22:16:ae:4c:c7:9b:0b:d4:e2:16:c7:15:
d1:59:e4:b4:53:3f:19:07:87:fb:bd:43:43:ad:aa:
e8:83:c4:cc:12:bd:d6:c8:a0:6c:b7:e0:eb:12:24:
3a:01:62:66:74:3b:14:c6:8d:5e:4f:26:3c:cf:ef:
5c:b9:5a:96:15:14:72:df:65:f0:69:dc:eb:75:b3:
3e:2c:60:98:3f:10:4b:e2:6c:af:f2:dc:b2:d8:70:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:57:A4:07:59:B3:1D:E6:C8:B2:1B:FD:A1:E9:B1:6A:89:A9:8E
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c2:f6:f6:0d:81:f8:46:dc:b4:b3:18:fa:45:73:c0:7f:9d:
53:fd:d7:10:dd:37:97:a7:67:72:47:ca:34:d9:c3:46:21:30:
c9:bb:08:44:03:a9:0f:e5:7e:c8:a4:60:11:09:14:0a:ca:9b:
c1:e6:74:24:e4:08:75:8a:38:88:4f:d4:d8:85:75:32:fd:30:
a9:fa:e8:de:73:04:8a:ba:94:76:38:0a:b9:e8:d9:b2:bb:8b:
4c:87:02:bd:c3:c6:fd:d1:51:6b:5d:11:6e:a1:04:eb:dd:57:
75:07:e2:d8:6f:e6:00:e1:2d:db:e9:e2:8b:40:ed:36:f2:33:
65:0a:e4:08:d7:84:5e:28:1e:e6:d3:cd:88:9d:ea:79:7f:21:
4a:f4:7d:d5:50:80:c1:28:15:56:9c:85:d6:a4:80:a8:86:37:
4a:da:05:23:63:41:bb:b9:8a:98:a5:88:67:1a:49:f1:24:6e:
b3:98:e6:d9:f4:59:c1:c3:ea:4e:1e:24:de:31:db:f1:dc:23:
2b:92:e5:b1:42:ec:9e:18:90:37:c5:a3:cc:eb:22:37:e0:58:
97:7d:dc:ec:14:35:4e:11:e1:0a:1e:93:8e:ca:58:b1:bd:80:
ac:cc:ce:e1:c9:24:a9:ba:f5:e2:f1:c0:c1:da:91:c3:a6:bb:
ee:2f:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:46:22 2026 by rpki-client