Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: /C8XajHcBoijQ9SrweASlZASIs2Jr1n9lTudSr//uL4=
Subject key identifier: 3F:76:F4:F3:CD:6E:94:51:6F:4E:6A:30:7E:39:26:9E:CB:97:80:F9
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019FA907558EE496B6D78A77B0D19CC6CCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0E87
Signing time: Tue 28 Jul 2026 14:00:57 +0000
Manifest this update: Tue 28 Jul 2026 14:00:57 +0000
Manifest next update: Wed 29 Jul 2026 14:00:57 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: C7upr3OThd3tXxD0Jp3efP87jfI.roa (hash: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=)
3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: dr8o/y62ma7z+tCyWL86tRIM43Af/mjM3wgJQ9VQZb8=)
4: DRiTAPDF2xW4Cnr5WD7jOyCgpVU.roa (hash: 85mXUp42nU1HdKjC1kde1s7WFJRgutSos2YP8UM06Vw=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: WueW6I82GEBJmTpOwdN6my0iBVY.roa (hash: MkREwPkdmJOow1TbkT+eAldjPSpx7GvsHIK7qit+dc8=)
7: j5b05RZ-Pc84VbhjXWfOQdXvstg.roa (hash: fBPy1BOnpgVVJsYa962/feL6Jx4Rr6v5dNxNajdLYgw=)
8: wdvXFPkvt-d9b0S5-H5QvNZuELY.roa (hash: pOQkB8CIcydxsKoAZ+FXu6v1HpR5Zz+Qp6TW+J9alA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:55:8e:e4:96:b6:d7:8a:77:b0:d1:9c:c6:cc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jul 28 14:00:57 2026 GMT
Not After : Jul 29 14:00:57 2026 GMT
Subject: CN=3f76f4f3cd6e94516f4e6a307e39269ecb9780f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:a7:9d:b3:3a:1d:ec:81:0f:e3:5d:e2:80:
3a:b6:ee:25:79:36:ba:26:c8:cf:75:af:7f:f8:9c:
3e:d1:4d:11:c4:5c:62:2d:92:04:6f:70:a7:3d:fb:
2b:3c:ae:50:44:8d:b9:f9:ea:a9:63:2c:0e:3b:76:
31:89:79:b8:10:ed:6b:66:bf:6b:16:99:b1:43:7e:
44:46:ec:65:40:b7:95:4a:0f:ba:92:cb:fb:12:de:
33:e9:a1:dd:dd:ac:fb:f4:d9:44:8b:e3:1b:0d:e1:
89:02:c6:e2:03:57:7d:aa:04:2a:6c:52:d2:76:55:
50:2f:24:89:30:f5:09:78:25:af:ba:0e:83:10:73:
50:4d:3e:f9:7a:90:d8:73:1d:3a:97:72:32:42:cf:
ee:a6:61:bd:43:f4:1d:98:3a:36:e8:57:7d:46:f3:
53:03:2f:59:a8:3a:f2:34:37:5a:d9:6c:9f:69:0f:
c0:a1:40:a2:f0:cf:4f:ce:76:31:fe:f5:f9:23:fa:
4d:33:99:21:4f:9c:46:3e:11:c1:05:75:cd:b7:c2:
73:c8:3a:2a:6a:62:9c:4f:c1:0f:a7:e6:c4:6b:fb:
0c:59:70:35:1a:f2:97:9b:3a:2b:0b:51:b4:53:9d:
59:3f:82:5e:fd:e3:0e:70:d7:c3:cd:6a:62:1e:0d:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:F4:F3:CD:6E:94:51:6F:4E:6A:30:7E:39:26:9E:CB:97:80:F9
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:38:b4:38:bc:1f:fd:1e:5a:4c:9a:fa:0a:f8:3f:71:34:
24:d5:94:a3:15:f5:70:f4:0a:78:44:21:44:12:7a:b5:2e:5a:
66:78:c7:d5:e5:00:ca:be:f2:da:8e:2b:30:03:33:60:a0:d9:
d6:ed:96:ca:79:95:ad:38:ea:1c:26:4d:87:e0:76:3f:a1:36:
82:10:0e:de:06:79:f7:f7:51:0c:77:05:3f:bf:b8:c7:75:65:
f2:77:c9:b4:c6:1f:6f:7f:8c:0d:94:dd:e5:7b:e7:1d:2d:7e:
86:28:2a:f1:47:31:86:54:b3:1b:a8:78:86:07:df:64:5b:e8:
a0:b5:a8:80:fd:71:28:ea:9e:27:1e:c6:6b:d6:33:f4:16:80:
cd:50:13:20:e0:13:20:89:cf:c8:9b:20:3d:46:b3:f6:e7:01:
d3:05:63:b2:62:dd:ea:e2:1c:b7:da:dd:71:76:22:07:09:7f:
8b:6d:94:ee:43:cf:f3:62:e7:34:e8:9e:83:00:30:c1:bb:d1:
28:44:ec:63:6d:40:08:5b:9f:d9:23:47:a2:c8:b2:24:d0:cd:
13:5b:8c:db:08:52:ba:51:bd:57:83:df:c5:c0:66:e0:95:f3:
38:cd:70:29:61:6b:ad:7d:d1:72:f4:e9:1d:7e:28:b2:2f:56:
20:38:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:56 2026 by rpki-client