Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: hoIjpJKM0xRm/ichr+YoW7ROzsjrq7nZanNHk0PKxpc=
Subject key identifier: 90:80:8D:7E:3A:56:0C:E2:F4:61:93:EE:E9:54:A3:23:C8:A1:FC:A9
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01A0C88FFFC08FC94116625406E67E5935F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 10:01:15 +0000
Manifest this update: Tue 22 Sep 2026 10:01:15 +0000
Manifest next update: Wed 23 Sep 2026 10:01:15 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: HUkqQHRSDkhL+afRn7rRNAzKoOImkjtdmX1s5oG8b1c=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:ff:c0:8f:c9:41:16:62:54:06:e6:7e:59:35:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Sep 22 10:01:15 2026 GMT
Not After : Sep 23 10:01:15 2026 GMT
Subject: CN=90808d7e3a560ce2f46193eee954a323c8a1fca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:43:f0:64:d0:a7:84:5b:09:fd:36:6b:22:
be:2a:65:c5:2c:f2:db:d0:13:0d:ca:fa:2d:0b:84:
19:bb:84:7b:7b:cc:4c:c0:02:10:2b:0f:5f:22:ae:
f8:fd:58:1e:c8:e7:b3:8f:aa:65:c8:bb:ad:7d:4c:
54:22:2c:d1:72:fd:2c:df:35:68:71:c2:d7:60:24:
6b:25:c0:fc:6d:24:bb:b4:93:2d:23:9a:70:7d:b9:
cc:61:b3:0e:e2:c2:a7:a6:84:c8:21:7a:03:3b:8b:
80:fd:a4:ed:ac:5f:85:83:b4:b6:98:84:8a:98:ea:
0a:1e:8e:cf:cc:08:43:4e:f9:c1:56:b0:df:9e:6e:
26:49:7b:92:d8:c8:ce:e4:28:23:94:b3:b2:4c:fc:
3d:4d:b8:37:fd:b7:2e:e9:6a:4d:a4:5b:1a:c5:8a:
a3:a2:4e:41:8f:f4:21:fd:5a:a5:f3:fd:cb:d4:99:
1d:df:dd:38:22:8e:ee:0e:75:95:37:24:45:fa:0f:
92:c9:b7:fb:d7:8d:3c:8f:41:53:29:7f:e9:04:a2:
ee:10:61:d2:3f:06:a9:89:b9:d3:d5:d1:a0:5c:f7:
83:da:87:77:fc:b0:8b:64:cf:12:4b:e7:5a:93:12:
43:0e:e6:08:36:c5:5f:90:31:a1:f1:8a:18:68:d3:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:8D:7E:3A:56:0C:E2:F4:61:93:EE:E9:54:A3:23:C8:A1:FC:A9
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:a4:7c:68:e2:71:d8:5b:81:20:e9:e5:df:79:4f:50:fe:
8c:ef:20:c9:85:83:46:64:62:72:3f:86:24:67:57:40:0e:22:
00:af:16:fb:05:1f:c7:86:cb:d6:c7:86:27:a2:41:d4:e3:75:
42:6d:19:29:6a:2c:73:bb:5e:4a:17:5b:c3:9a:2e:df:3a:27:
62:f0:8c:0d:72:b5:83:e1:c6:2a:e4:19:ad:65:9e:7f:fe:77:
e2:74:67:29:76:dc:7e:68:8c:51:73:ed:61:24:bd:e1:85:ef:
27:c5:20:65:18:2b:d1:cc:62:7e:55:04:34:f1:a5:c1:01:d3:
46:44:6c:3b:59:9f:1c:d8:38:2c:f5:79:6a:ec:26:35:96:d7:
62:85:8c:de:fb:8b:77:2c:2a:19:27:d4:75:38:89:17:21:a2:
9b:e7:59:a8:52:be:1d:3f:6b:b7:75:95:e0:44:d5:62:70:49:
2a:cb:7e:14:c4:f2:fd:ec:ed:f6:b6:b8:45:7b:f1:ce:26:fa:
06:a2:26:c7:d0:39:98:72:cd:30:60:c9:7a:4e:0f:37:eb:03:
81:19:3a:99:ef:fe:2b:be:eb:c8:11:c3:fe:38:a2:2d:c1:c6:
4a:12:80:41:71:af:ac:2c:89:cd:2b:56:41:e9:f8:f9:3f:ef:
a8:88:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:08:50 2026 by rpki-client