Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: xGlr7DH44D8FCuuw7bE7R0cl3l0eFf8gKL2CuTiHiFo=
Subject key identifier: 5F:E5:78:6A:85:F1:F4:3C:07:E3:EA:2F:3B:A7:7B:96:63:8F:D6:DC
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019CAC10134FFD05776AFFE4F10FC5E53703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: 5MjtVMV4ytj3LZMTnyJdXmLvUIEbk+sNjFKB42bH90c=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:13:4f:fd:05:77:6a:ff:e4:f1:0f:c5:e5:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=5fe5786a85f1f43c07e3ea2f3ba77b96638fd6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:66:fd:20:95:d0:4f:a2:bf:37:3b:9e:ba:
e1:6e:87:6a:df:32:06:71:ae:cf:f3:a4:e6:c8:ac:
f2:b1:e7:d8:a3:cc:ab:42:ed:4f:72:93:22:a8:02:
d9:ae:4e:9d:5a:30:93:be:13:de:ca:31:57:cf:06:
06:92:49:13:ee:66:65:8a:f6:a7:6d:6a:62:66:43:
a5:a0:0a:c8:9e:dd:35:bb:ee:5c:b3:f3:73:80:ab:
06:c6:3c:58:42:9a:3c:ae:a3:11:12:ca:09:9f:2c:
46:ba:e5:95:41:40:61:7d:62:1b:71:d0:63:51:1d:
83:94:84:32:8d:1d:c1:0f:8e:7f:1b:18:e7:fd:3d:
f2:94:ea:ff:67:cc:f6:97:bf:9a:42:8e:37:8d:b9:
4d:66:2c:7b:ec:a1:13:81:31:80:35:b0:a3:aa:62:
97:80:01:f9:76:03:3a:8a:62:6f:c4:66:48:0d:2a:
e7:8c:b5:f4:cd:27:c6:a9:29:9c:bb:27:59:98:d6:
78:a7:e3:c4:57:7d:92:28:86:d1:26:bd:42:7b:42:
4d:4f:f4:a8:28:23:ff:c2:fa:1e:70:e7:0b:74:d7:
55:26:fb:6a:19:74:93:a4:3a:fb:5a:b2:15:44:2f:
44:c4:c5:74:1e:3b:f7:2f:65:14:ca:3c:c5:de:be:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:78:6A:85:F1:F4:3C:07:E3:EA:2F:3B:A7:7B:96:63:8F:D6:DC
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0c:17:a6:a6:23:bf:5e:21:44:4a:9c:65:3b:cd:c4:13:70:
6d:71:dc:8e:af:fc:0b:b4:91:e7:f6:82:32:a9:0e:fb:1b:52:
6e:7b:a9:e4:9b:6f:34:21:19:e7:1c:3e:21:91:a9:bc:77:55:
ad:59:3e:a9:fc:7b:a6:e1:8d:0f:05:10:a4:b0:ea:09:3f:40:
37:b4:84:1f:18:1c:a4:92:75:56:6a:2b:66:32:f2:df:f4:29:
cf:61:33:28:3e:0e:8a:19:54:b7:fc:ab:59:e0:0f:08:f0:fb:
3e:29:a5:19:69:fd:38:6c:54:54:cb:26:02:70:63:85:5b:b9:
e7:da:ca:d6:56:89:7c:0d:01:2e:89:1c:a8:14:9b:06:e5:20:
a3:32:3e:75:eb:d3:1f:1b:3c:8a:c3:fd:7f:e7:3f:41:3b:8c:
91:7a:e0:d4:62:a2:5c:c3:21:08:ce:75:b4:13:40:4a:e4:b2:
74:9e:84:9f:98:99:51:29:12:27:cf:46:72:b9:40:04:94:e5:
bb:43:9d:02:eb:85:4c:ed:0a:e6:3f:e6:7b:0f:bc:4a:4a:06:
f8:16:2f:1f:48:fc:fd:a9:fa:a9:a8:f6:02:05:35:a5:9c:0c:
e1:b2:32:fd:81:af:f5:96:1e:51:4f:9c:65:d7:58:55:c8:e6:
74:0e:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:20 2026 by rpki-client