Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: rH5FlMu4WmBF+oi91bvtjy9xS9LE0nJusXwLSDKi7JI=
Subject key identifier: 77:D0:82:D6:BD:3F:C6:0A:11:1D:77:87:DF:E2:86:1D:D3:A4:BA:51
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019D97AAB3C37192F56B64B120A72B7B6C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 19:00:39 +0000
Manifest this update: Thu 16 Apr 2026 19:00:39 +0000
Manifest next update: Fri 17 Apr 2026 19:00:39 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: LKdQ07ewXm60zDIRL7BlVpSUMVIpHAlRwFv/P7hDtKg=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:b3:c3:71:92:f5:6b:64:b1:20:a7:2b:7b:6c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Apr 16 19:00:39 2026 GMT
Not After : Apr 17 19:00:39 2026 GMT
Subject: CN=77d082d6bd3fc60a111d7787dfe2861dd3a4ba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:c0:fc:b0:46:de:cd:5c:75:c1:f4:52:cb:
8c:4d:bc:b0:c9:d4:ea:47:8a:79:37:cc:34:b6:72:
57:ae:7f:ca:13:83:0a:6d:b8:06:0d:7d:96:d8:20:
9b:0e:ad:b2:b5:e0:cc:15:de:5c:ae:86:36:14:01:
0c:c2:d9:01:a5:db:b5:9e:6e:83:ad:6d:68:21:af:
af:3b:df:8d:aa:12:70:47:7d:d0:1d:84:57:7b:80:
e4:1a:65:27:a1:f6:9b:81:9b:29:8f:b1:77:b1:18:
c8:90:f6:43:84:80:d5:9c:01:e4:8f:b7:be:c8:03:
b3:fb:7f:d9:97:ae:01:f6:c5:cd:45:f1:76:6b:04:
dc:90:7e:8d:a4:7b:6a:56:e0:47:38:1f:b4:f1:50:
ab:ad:91:eb:bc:3c:f6:aa:49:69:f2:76:1c:70:7d:
0e:f3:0f:65:f1:73:86:54:1c:c9:9b:2a:5a:26:bf:
6d:32:53:7b:75:de:0e:24:a6:12:c3:ca:17:2e:e4:
7c:3e:fb:f0:d2:c8:ba:18:e0:ff:fe:ea:0a:23:1d:
31:8d:e7:10:b1:8e:cc:23:b9:95:d9:91:c6:ee:f9:
ab:69:43:0b:5c:69:15:67:b6:2d:35:8f:21:85:4a:
c0:3f:d7:17:7c:dd:ca:d6:ff:4b:e6:ca:c3:2d:e6:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:82:D6:BD:3F:C6:0A:11:1D:77:87:DF:E2:86:1D:D3:A4:BA:51
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d2:52:79:c6:e0:2e:5a:7a:b2:fc:fc:67:25:68:d0:d9:1d:
1d:e4:c2:bb:37:eb:a8:89:6d:65:6b:30:d7:3a:1e:ae:a3:2f:
aa:a7:d4:0d:e9:5f:a3:14:48:af:19:87:4e:c7:cf:50:07:a5:
94:df:51:7a:47:e5:b4:17:1b:50:11:48:0c:2a:83:ec:46:e7:
76:3a:96:34:e0:84:26:11:0c:6e:7d:dc:9c:c6:2c:c9:9e:f4:
c3:5d:db:c3:c3:ee:64:df:24:5d:f6:e0:ae:6f:4b:6a:14:f0:
d3:30:4d:44:ba:5f:60:17:84:bb:8f:e4:41:27:04:0d:10:91:
12:64:04:6f:db:e2:2b:58:33:c4:ad:a5:86:dd:e9:1a:f5:ba:
07:2f:5e:cb:d1:7d:e7:d0:c3:52:1f:20:50:3c:af:38:b5:83:
22:86:ee:d4:a0:c7:e7:61:ad:59:c9:9e:e9:9c:9e:ba:f9:cb:
36:93:fe:4a:32:85:b0:bd:73:51:6c:c0:88:63:6f:50:6c:19:
3b:b9:d6:27:fe:62:89:cd:3d:69:9a:d1:db:63:c6:43:d0:36:
78:d1:41:26:20:b2:6b:ba:00:cc:79:d2:94:3b:e4:4f:29:39:
58:2e:8c:69:3d:59:2c:55:2b:50:d6:ce:2c:e2:e6:64:e9:db:
46:70:45:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:17 2026 by rpki-client