Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: rtGFxkYVHPBw5XwgnKeBnwB+5wD5sbWllu7WDxa+Rsw=
Subject key identifier: 82:52:72:9B:3D:06:05:6C:84:E7:B5:F7:52:EB:E3:11:A3:98:C6:76
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019FAABEBDC6B922E301331DA766D52DE30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 22:00:54 +0000
Manifest this update: Tue 28 Jul 2026 22:00:54 +0000
Manifest next update: Wed 29 Jul 2026 22:00:54 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: y4gzbCcOZAKd80mUDxKBd1t33go89TQQuh8f8EG49SA=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:bd:c6:b9:22:e3:01:33:1d:a7:66:d5:2d:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jul 28 22:00:54 2026 GMT
Not After : Jul 29 22:00:54 2026 GMT
Subject: CN=8252729b3d06056c84e7b5f752ebe311a398c676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:3e:d2:41:0a:f5:87:c0:e9:df:ad:41:2c:
00:22:95:1c:3b:ff:bd:ee:76:74:41:f6:58:dc:74:
97:9c:5d:af:21:c4:21:f5:43:72:5b:57:c5:d1:d8:
b5:ec:63:a1:80:5e:5f:db:53:40:de:d1:37:9c:9b:
43:ef:ec:d3:85:b9:99:8c:39:3d:63:53:9a:e1:4e:
1a:09:e0:98:e0:37:28:ea:9c:56:52:e3:4c:cd:25:
19:30:14:54:62:57:e1:7a:12:db:df:4c:3f:ae:47:
89:68:73:50:61:52:0a:9d:6a:ec:91:55:d1:7d:56:
c2:f8:a8:2b:2e:91:04:03:3a:46:a7:82:d9:76:f7:
a0:8b:8a:0b:ad:3d:19:83:62:a3:87:99:a7:fb:64:
0d:bf:3e:d1:0a:7c:b0:16:20:39:73:9e:e4:66:08:
6b:b7:3e:31:81:2b:15:f1:34:2f:3b:63:d0:f3:d7:
a6:58:65:32:b8:43:ef:a9:1f:53:5b:52:8d:58:e0:
88:f0:ad:b5:c5:b2:19:57:f5:e2:49:fd:78:03:99:
f1:ad:5d:33:8f:3e:6a:0d:9d:91:8d:49:ee:01:5e:
e2:05:56:48:d9:70:4f:72:f6:03:68:ce:15:d8:99:
87:92:f0:1f:b4:ca:ce:fc:30:74:1a:60:f6:33:13:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:72:9B:3D:06:05:6C:84:E7:B5:F7:52:EB:E3:11:A3:98:C6:76
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6e:e7:e6:05:96:83:18:23:94:2f:59:b2:3d:f0:04:34:72:
73:0f:f7:d7:b1:e9:19:f1:5c:44:65:8b:69:54:69:2c:66:28:
43:b1:4e:fe:8f:1d:79:49:03:82:f1:29:4c:9b:ea:cf:72:aa:
c9:4a:31:6a:61:6f:ee:af:98:94:c3:65:eb:23:97:7b:d5:80:
d7:00:48:ec:a1:ca:b2:a0:cd:9f:11:4b:38:35:51:b7:45:39:
0a:0f:84:00:cb:ab:e0:b3:c4:6f:d2:f1:ad:7e:b9:a6:05:db:
c7:d1:ba:db:92:c4:bb:0e:6f:02:fd:0b:b6:61:26:fd:89:34:
49:c1:05:93:58:cd:a0:8b:0b:20:f3:40:4a:8a:ab:2c:22:10:
e7:81:1a:77:0c:ae:1d:13:97:1a:b4:13:f8:85:f1:be:bb:f6:
ba:20:59:ed:28:63:64:1e:f2:60:c9:28:08:82:fa:77:8a:08:
ed:63:bb:55:d0:bc:ad:f2:b3:2e:3e:d8:fb:4a:13:bd:0b:a0:
ae:0f:2b:55:af:f1:1e:73:27:3c:a6:c1:6f:a8:63:39:8e:93:
5f:65:a9:46:3d:23:e9:13:05:6e:1c:e1:bb:2e:24:34:a1:32:
82:25:63:e3:83:aa:d9:dc:c7:4f:91:02:39:12:02:5f:6e:77:
03:09:19:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvr3GuSLjATMdp2bVLeMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0
N2M2MDMwHhcNMjYwNzI4MjIwMDU0WhcNMjYwNzI5MjIwMDU0WjAzMTEwLwYDVQQD
Eyg4MjUyNzI5YjNkMDYwNTZjODRlN2I1Zjc1MmViZTMxMWEzOThjNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhQ+0kEK9YfA6d+tQSwAIpUcO/+9
7nZ0QfZY3HSXnF2vIcQh9UNyW1fF0di17GOhgF5f21NA3tE3nJtD7+zThbmZjDk9
Y1Oa4U4aCeCY4Dco6pxWUuNMzSUZMBRUYlfhehLb30w/rkeJaHNQYVIKnWrskVXR
fVbC+KgrLpEEAzpGp4LZdvegi4oLrT0Zg2Kjh5mn+2QNvz7RCnywFiA5c57kZghr
tz4xgSsV8TQvO2PQ89emWGUyuEPvqR9TW1KNWOCI8K21xbIZV/XiSf14A5nxrV0z
jz5qDZ2RjUnuAV7iBVZI2XBPcvYDaM4V2JmHkvAftMrO/DB0GmD2MxNXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJScps9BgVshOe191Lr4xGjmMZ2MB8GA1UdIwQY
MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt
ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj
LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG7n5gWW
gxgjlC9Zsj3wBDRycw/317HpGfFcRGWLaVRpLGYoQ7FO/o8deUkDgvEpTJvqz3Kq
yUoxamFv7q+YlMNl6yOXe9WA1wBI7KHKsqDNnxFLODVRt0U5Cg+EAMur4LPEb9Lx
rX65pgXbx9G625LEuw5vAv0LtmEm/Yk0ScEFk1jNoIsLIPNASoqrLCIQ54Eadwyu
HROXGrQT+IXxvrv2uiBZ7ShjZB7yYMkoCIL6d4oI7WO7VdC8rfKzLj7Y+0oTvQug
rg8rVa/xHnMnPKbBb6hjOY6TX2WpRj0j6RMFbhzhuy4kNKEygiVj44Oq2dzHT5EC
ORICX253AwkZ6w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:59:57 2026 by rpki-client