Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: K1ueFDfGARj+OqG205B9UAjbFxw9EF7c8JSbHK4ntKM=
Subject key identifier: B5:9B:18:8A:98:BF:DA:EE:FE:D7:AD:90:57:FA:F3:DF:CD:AF:EE:3E
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019E1ED9C0C43BFEFAFFBC76E9FB6643B50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 01:00:47 +0000
Manifest this update: Wed 13 May 2026 01:00:47 +0000
Manifest next update: Thu 14 May 2026 01:00:47 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: Oh+eXmYRxQTce3Vytx7X0WyENsrVOkUFpkZDqLha9wQ=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:c0:c4:3b:fe:fa:ff:bc:76:e9:fb:66:43:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: May 13 01:00:47 2026 GMT
Not After : May 14 01:00:47 2026 GMT
Subject: CN=b59b188a98bfdaeefed7ad9057faf3dfcdafee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:fa:5c:b9:fe:35:91:bb:b1:26:68:d8:33:
e8:57:d4:39:64:e6:91:8a:2f:e5:97:f0:ac:f2:76:
c0:1b:d2:fc:35:76:5a:6c:ce:d6:93:17:7f:f9:cc:
40:f9:0a:63:5e:8d:02:89:75:6e:a9:7e:97:ac:5b:
8b:46:9c:b2:6e:a5:8b:98:8a:06:94:b1:7e:e8:e0:
f6:dd:d4:d8:33:5d:33:c0:69:a8:42:80:7d:83:f0:
cb:29:d3:1d:5e:06:4e:e5:a9:33:80:a3:2f:67:4c:
5c:e3:2f:bd:99:7e:ad:c0:9f:ad:0f:ec:a2:22:6b:
ca:90:55:b4:ee:db:53:40:14:56:dc:b3:39:63:7e:
53:ce:28:d0:0f:73:7f:64:7b:35:f6:e1:32:7c:e0:
ce:ef:c6:99:93:36:df:90:bb:a1:6e:42:0c:a8:6e:
64:9f:a6:f8:4e:21:8f:4e:86:de:0a:c8:04:04:e9:
93:9a:5a:cf:a3:71:ff:04:00:59:1e:05:10:5c:ed:
6d:57:c3:3c:18:77:20:e5:86:1c:e6:f9:d5:4b:b9:
a7:d6:37:59:44:0e:a6:d9:ea:22:fa:67:17:35:58:
ad:c0:09:98:53:6c:8a:bc:dd:00:2c:bf:04:40:39:
04:b1:ee:05:f5:29:e5:d4:e0:c8:e3:4a:de:bf:22:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9B:18:8A:98:BF:DA:EE:FE:D7:AD:90:57:FA:F3:DF:CD:AF:EE:3E
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:6d:ff:95:2f:ba:e7:3b:23:1e:b3:96:85:fe:e3:2f:67:
bc:95:cd:eb:ed:18:cd:52:3e:b1:1d:0d:9f:a0:3d:a9:bb:1d:
39:f6:0b:03:23:82:dc:fa:2e:87:e2:13:b4:bf:c6:23:0c:f1:
cd:6f:62:62:a1:d8:dc:eb:b6:9e:48:05:4d:0e:02:c0:6e:68:
ab:50:a5:b9:d4:fa:66:ce:40:cd:f5:e3:65:76:b6:79:cd:7f:
84:36:8e:08:a1:66:c7:07:9d:1e:57:86:fe:c7:cc:b4:b7:3d:
d8:66:15:63:dc:df:4e:e4:ed:ef:fd:0b:dc:af:eb:88:68:3d:
50:23:c6:38:94:3f:cb:75:16:0b:cc:82:64:4b:ac:cf:d4:00:
78:cf:a5:eb:56:73:c4:c6:c7:9f:b6:fd:6a:55:10:99:d1:56:
b9:18:ab:0a:9c:33:65:c9:98:60:f4:c5:ec:df:18:d8:05:bf:
13:ff:41:7e:fe:4e:ec:2a:80:ee:8c:7f:7c:29:07:6a:3e:a0:
a3:08:d9:12:51:3e:28:5c:05:90:05:29:94:54:41:e5:9c:68:
bc:f3:14:e3:52:91:d6:04:98:1a:09:33:2f:67:bd:28:96:11:
cf:db:e8:29:f7:33:e1:7a:f7:89:ae:19:14:c1:3c:09:92:26:
b7:91:bd:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2cDEO/76/7x26ftmQ7UPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0
N2M2MDMwHhcNMjYwNTEzMDEwMDQ3WhcNMjYwNTE0MDEwMDQ3WjAzMTEwLwYDVQQD
EyhiNTliMTg4YTk4YmZkYWVlZmVkN2FkOTA1N2ZhZjNkZmNkYWZlZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX/6XLn+NZG7sSZo2DPoV9Q5ZOaR
ii/ll/Cs8nbAG9L8NXZabM7Wkxd/+cxA+QpjXo0CiXVuqX6XrFuLRpyybqWLmIoG
lLF+6OD23dTYM10zwGmoQoB9g/DLKdMdXgZO5akzgKMvZ0xc4y+9mX6twJ+tD+yi
ImvKkFW07ttTQBRW3LM5Y35TzijQD3N/ZHs19uEyfODO78aZkzbfkLuhbkIMqG5k
n6b4TiGPTobeCsgEBOmTmlrPo3H/BABZHgUQXO1tV8M8GHcg5YYc5vnVS7mn1jdZ
RA6m2eoi+mcXNVitwAmYU2yKvN0ALL8EQDkEse4F9Snl1ODI40revyL1pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWbGIqYv9ru/tetkFf689/Nr+4+MB8GA1UdIwQY
MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt
ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj
LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaht/5Uv
uuc7Ix6zloX+4y9nvJXN6+0YzVI+sR0Nn6A9qbsdOfYLAyOC3Pouh+ITtL/GIwzx
zW9iYqHY3Ou2nkgFTQ4CwG5oq1CludT6Zs5AzfXjZXa2ec1/hDaOCKFmxwedHleG
/sfMtLc92GYVY9zfTuTt7/0L3K/riGg9UCPGOJQ/y3UWC8yCZEusz9QAeM+l61Zz
xMbHn7b9alUQmdFWuRirCpwzZcmYYPTF7N8Y2AW/E/9Bfv5O7CqA7ox/fCkHaj6g
owjZElE+KFwFkAUplFRB5ZxovPMU41KR1gSYGgkzL2e9KJYRz9voKfcz4Xr3ia4Z
FME8CZImt5G9kg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:26 2026 by rpki-client