Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: dk2/DR5PgEWl2t762yOjO6Is7pBtPKOnqQV6sxAAfZs=
Subject key identifier: 11:72:67:E9:E4:B0:3B:56:D7:12:5C:74:57:72:ED:47:46:70:E4:97
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019EC111EA881A1CF792CE3CACEC1B914054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 13:00:37 +0000
Manifest this update: Sat 13 Jun 2026 13:00:37 +0000
Manifest next update: Sun 14 Jun 2026 13:00:37 +0000
Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: YB25lv3oJQ3HEdS7PkZndZGm9E+eO9yGocoUagTLIa4=)
2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=)
3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:ea:88:1a:1c:f7:92:ce:3c:ac:ec:1b:91:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jun 13 13:00:37 2026 GMT
Not After : Jun 14 13:00:37 2026 GMT
Subject: CN=117267e9e4b03b56d7125c745772ed474670e497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:c7:20:08:5c:9b:30:f6:78:9c:90:e6:d8:
4a:f7:9f:33:30:47:34:7d:06:9b:4e:48:4b:81:37:
26:76:0d:47:6d:ca:43:c7:a6:4e:17:2e:31:7b:37:
af:7c:93:e6:fd:40:99:42:be:6b:e0:dc:1a:d6:8b:
c1:c7:c9:ed:27:bc:5c:5a:b1:a7:32:6e:32:7b:53:
5c:cb:4d:91:10:b8:a9:81:76:d5:60:d5:7d:ec:3d:
75:0f:ba:8c:ad:b0:f2:0d:f0:5f:56:dd:97:42:27:
db:43:54:41:61:69:c8:e0:76:97:bd:e3:3c:15:f7:
73:1f:99:5c:14:30:4c:44:64:8e:1c:c5:dd:37:6a:
fa:ac:14:38:a4:09:32:74:fd:47:b1:dc:db:b5:ed:
a8:de:e9:4d:3e:75:40:31:f6:8d:8d:de:37:53:6f:
e9:24:7e:9e:e9:a4:6e:54:d1:7e:e9:46:24:01:06:
a4:90:67:a2:20:f7:a6:f6:dc:d7:4d:2d:85:07:7f:
db:b1:98:36:f2:38:36:9c:22:00:c0:f5:b1:53:b5:
a3:db:02:7a:08:93:21:78:44:41:32:41:39:fb:57:
a4:69:dd:04:de:94:a7:f9:ce:ff:be:06:cb:92:e5:
36:45:a0:fa:1c:78:46:0f:2f:4e:97:5c:17:2d:d2:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:72:67:E9:E4:B0:3B:56:D7:12:5C:74:57:72:ED:47:46:70:E4:97
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:67:4a:e3:02:11:e5:cb:33:f8:eb:fa:3c:4d:0a:19:de:bb:
11:43:93:00:78:8e:07:3e:9c:b9:9b:39:aa:18:ad:60:2a:45:
65:73:27:11:46:eb:e4:d7:4e:ba:9f:bc:a1:30:56:9c:11:ca:
1a:17:21:e2:53:ea:19:96:4c:19:6c:d1:ee:3b:40:31:08:7b:
78:2f:c9:c5:9d:ea:1d:69:5b:a7:64:9d:39:e4:69:ae:c2:31:
e5:00:e3:05:3b:3a:60:8d:aa:c2:5e:7b:7a:ab:f9:e3:54:d5:
c5:40:41:d7:d3:ee:d7:74:a1:c6:65:cf:cd:d1:f0:8b:71:95:
07:30:fe:54:e4:7b:6f:3c:25:14:23:a2:78:82:7c:55:c6:7a:
47:05:53:50:90:a8:a9:a1:85:ad:c4:2d:e2:0b:ed:65:d8:93:
ed:20:2d:b9:48:b8:d2:0b:f4:e8:1c:28:68:8f:05:97:04:76:
b7:53:67:4d:bf:bc:25:bf:cf:a9:cb:cf:ae:c6:a8:bb:28:00:
ba:0d:b3:36:23:75:e0:2b:07:f0:a1:b0:72:6c:e6:0b:34:b5:
f9:1f:cb:f7:2d:99:47:6e:07:7f:ec:1f:89:62:7b:a4:97:de:
c1:e2:43:43:a4:f3:52:19:f9:05:b6:d6:7a:06:41:f0:00:5a:
1e:23:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:38 2026 by rpki-client