Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: wnRN/xH1s2BwLJG/2R9moOpJ8iE/+KKyzva3A1yohZA=
Subject key identifier: 57:4F:AC:F3:43:A1:B2:0A:86:83:5C:0F:B1:39:DD:71:00:26:88:3B
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019CAC0FEF276A8EB21C77E3C63AE4269DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0CF8
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: 3OtLzFbkywxj4bXOGTjeuqnS8SE.roa (hash: 2jeNVVe54GmP1BBES9FaoxamDKF2feBho25yOVUyHaw=)
2: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: aatLb0qVzjMx8qZHGQt5lcDuj5qEAXczpTEGAYfoZVk=)
4: KkqLmE0N7-8rgtoRGKAsSy0XFwA.roa (hash: 8ZgmxpOPcx1KDgg1Y8A7vaKcj1bybyszDrY+4z+o80k=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa (hash: x3mP5EeqVaKIolXtodkSvvchfGdilfiKxpYM+QBGVxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ef:27:6a:8e:b2:1c:77:e3:c6:3a:e4:26:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=574facf343a1b20a86835c0fb139dd710026883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:34:31:b0:78:39:e8:bc:c6:d3:65:8c:1b:
19:80:87:80:47:0b:9b:35:6b:81:d5:7a:d9:5f:16:
fb:5f:09:36:8f:e5:81:ef:7c:6d:dc:0c:e0:d5:0b:
b4:30:f7:ec:84:db:82:58:bd:b2:05:4f:63:78:a1:
3a:84:ad:4a:33:a3:25:bc:bc:4d:40:b1:02:59:6b:
ff:95:fb:36:bb:ff:9b:ad:58:69:b9:51:71:2e:c2:
89:f6:38:c5:1c:61:cd:d0:38:81:0d:a3:bf:9b:16:
fe:7d:64:1d:b5:b2:04:b3:ed:3f:09:ff:8d:d1:31:
e6:a0:fa:33:c7:e5:26:db:27:50:a1:79:49:9c:38:
bf:a8:d3:2a:dd:fe:ff:66:09:20:74:2d:e1:04:1f:
b7:e7:41:cb:96:63:9b:01:e9:cb:cc:5f:23:42:79:
30:55:50:fe:7d:7d:51:d8:3a:67:9a:ed:0e:0c:62:
13:fa:29:02:49:71:af:ae:63:40:88:b4:28:55:46:
85:c5:7e:0e:8a:e5:32:50:d9:b7:fc:15:65:41:64:
3e:8d:e5:08:b8:a1:cd:ea:3c:a2:4c:67:30:12:1d:
c4:db:e6:6a:66:be:bf:09:23:c7:a9:0b:42:7e:02:
4c:30:36:dd:ba:e0:2b:c6:68:5b:1e:bb:02:20:3b:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4F:AC:F3:43:A1:B2:0A:86:83:5C:0F:B1:39:DD:71:00:26:88:3B
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:89:ea:b6:2f:fc:f3:55:bf:b2:a8:2f:70:b4:40:ab:55:
96:2a:7d:ef:19:86:28:3e:e3:38:37:f7:41:69:e6:cd:85:42:
ab:e8:39:05:03:45:d3:ac:03:f3:2e:a1:c4:92:0a:7e:99:a5:
44:f0:f7:ba:09:7f:db:8c:d8:7e:2e:4e:7b:99:87:35:ce:5b:
36:24:98:d9:22:02:4b:11:d8:40:a7:65:01:e5:c8:4d:2b:9a:
41:97:2c:27:66:24:f9:37:cf:7a:22:41:fd:e0:09:bd:66:1e:
6c:e3:f7:64:6c:50:65:be:e7:1f:9b:d1:27:f1:ec:20:b6:0b:
7c:22:0f:7d:fd:9b:ec:c6:cb:14:0a:55:4c:a9:58:21:6c:37:
bd:9f:b6:cb:6a:5b:1f:a1:fb:5d:f3:69:53:01:a9:fb:af:96:
6b:46:f6:d3:3e:d3:6a:ab:5b:55:1b:20:34:d2:58:25:ef:0b:
a0:1d:74:de:b7:be:34:a7:18:9f:42:be:2d:a5:0c:a0:89:f8:
21:23:39:aa:a5:97:57:a6:df:40:29:5f:78:3b:62:2a:3d:a8:
af:07:ec:27:f7:8a:a7:a5:1d:e8:63:c8:5d:e5:7b:26:ab:c3:
19:a3:75:44:ac:6c:78:81:37:5c:2c:02:07:16:56:5b:1f:16:
96:94:a3:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+8nao6yHHfjxjrkJp35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjYwMzAyMDEwMDUxWhcNMjYwMzAzMDEwMDUxWjAzMTEwLwYDVQQD
Eyg1NzRmYWNmMzQzYTFiMjBhODY4MzVjMGZiMTM5ZGQ3MTAwMjY4ODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNM0MbB4Oei8xtNljBsZgIeARwub
NWuB1XrZXxb7Xwk2j+WB73xt3Azg1Qu0MPfshNuCWL2yBU9jeKE6hK1KM6MlvLxN
QLECWWv/lfs2u/+brVhpuVFxLsKJ9jjFHGHN0DiBDaO/mxb+fWQdtbIEs+0/Cf+N
0THmoPozx+Um2ydQoXlJnDi/qNMq3f7/ZgkgdC3hBB+350HLlmObAenLzF8jQnkw
VVD+fX1R2Dpnmu0ODGIT+ikCSXGvrmNAiLQoVUaFxX4OiuUyUNm3/BVlQWQ+jeUI
uKHN6jyiTGcwEh3E2+ZqZr6/CSPHqQtCfgJMMDbduuArxmhbHrsCIDulNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdPrPNDobIKhoNcD7E53XEAJog7MB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAku2J6rYv
/PNVv7KoL3C0QKtVlip97xmGKD7jODf3QWnmzYVCq+g5BQNF06wD8y6hxJIKfpml
RPD3ugl/24zYfi5Oe5mHNc5bNiSY2SICSxHYQKdlAeXITSuaQZcsJ2Yk+TfPeiJB
/eAJvWYebOP3ZGxQZb7nH5vRJ/HsILYLfCIPff2b7MbLFApVTKlYIWw3vZ+2y2pb
H6H7XfNpUwGp+6+Wa0b20z7TaqtbVRsgNNJYJe8LoB103re+NKcYn0K+LaUMoIn4
ISM5qqWXV6bfQClfeDtiKj2orwfsJ/eKp6Ud6GPIXeV7JqvDGaN1RKxseIE3XCwC
BxZWWx8WlpSjWA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:48 2026 by rpki-client