Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: DJ2tRYp4vaYMMxCLGYw/WiBsGFwT2tZ6KCt9UzmXP58=
Subject key identifier: D4:D2:BE:69:B1:A2:FC:A9:9B:13:B7:A7:D4:A5:25:F5:53:2F:05:98
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01A0C4578DB340A5C3E48FF5BD3CEFE26C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0F1C
Signing time: Mon 21 Sep 2026 14:21:07 +0000
Manifest this update: Mon 21 Sep 2026 14:21:07 +0000
Manifest next update: Tue 22 Sep 2026 14:21:07 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: 9zE0ccdB1nEJPm6ds43vYaXbU8A.roa (hash: KLdF/9GXTDXvmP2vKrsOb2S2ppNR+C722vvMttsp8m0=)
3: C7upr3OThd3tXxD0Jp3efP87jfI.roa (hash: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=)
4: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: k+/QTfEqD5IwnSi/7lD65q4RNkyZmbljSUJwksz9LGI=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: WLRoXLz8o5aIoTKu9vysSiArlgU.roa (hash: Z0u4BcBUIP4op3aBxiGkfF2ykvUBdw5T+EbUw3CuBFA=)
7: j5b05RZ-Pc84VbhjXWfOQdXvstg.roa (hash: fBPy1BOnpgVVJsYa962/feL6Jx4Rr6v5dNxNajdLYgw=)
8: wdvXFPkvt-d9b0S5-H5QvNZuELY.roa (hash: pOQkB8CIcydxsKoAZ+FXu6v1HpR5Zz+Qp6TW+J9alA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:57:8d:b3:40:a5:c3:e4:8f:f5:bd:3c:ef:e2:6c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Sep 21 14:21:07 2026 GMT
Not After : Sep 22 14:21:07 2026 GMT
Subject: CN=d4d2be69b1a2fca99b13b7a7d4a525f5532f0598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:a8:f8:b7:be:96:9a:3e:e9:4f:6b:ec:d4:
e5:ee:a7:70:d9:65:11:5a:c7:0a:83:02:db:0b:9e:
59:a4:bc:df:d9:a8:6d:8b:ea:10:28:68:63:48:2c:
58:1a:ff:da:bb:b5:31:ad:fc:09:6d:3a:d8:55:73:
5b:5e:7f:9a:01:4d:cf:c9:10:e5:29:fc:5b:bd:be:
5e:5d:e6:40:74:7c:31:47:ce:13:d0:d2:56:9b:63:
de:43:4c:e0:08:74:ae:40:cc:b5:b4:bf:29:ba:f7:
ca:fe:c9:b8:b7:28:45:b1:5e:32:14:d5:94:d2:6a:
22:fa:f9:d6:1d:6b:09:5a:c6:cb:a2:27:6f:da:da:
f1:22:ad:ec:73:4b:d2:f2:a5:2d:fe:75:2e:ca:4d:
21:11:5b:8b:a6:da:22:99:8c:9b:d5:06:8c:3c:be:
15:c8:03:29:82:7e:ef:19:7c:2f:79:f9:54:ec:06:
8c:0f:3c:97:83:ac:4c:79:67:43:ca:7d:b9:21:34:
ec:d9:8e:36:67:15:be:73:73:ab:70:2c:65:b1:54:
0a:6c:64:fc:5b:a7:fd:b9:7e:ef:53:27:7e:13:73:
cb:57:3c:48:4d:62:bd:1b:11:9f:25:1e:e8:e4:08:
2b:d9:06:70:9e:6e:24:43:93:54:5c:ac:26:b4:08:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:BE:69:B1:A2:FC:A9:9B:13:B7:A7:D4:A5:25:F5:53:2F:05:98
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:50:c0:c1:bf:ff:4c:94:b2:d2:1c:5e:ce:f6:ee:a5:9f:07:
a4:4d:e2:1e:75:ce:44:d9:a6:04:6a:e0:21:8d:60:64:53:85:
01:ad:1e:ae:7c:c6:b9:9a:4a:6b:07:67:86:67:36:66:9f:03:
d2:6a:ab:0b:19:15:aa:32:0c:9d:e0:cb:45:57:d0:67:8e:9f:
4a:94:ab:99:bf:ef:27:4f:59:ac:24:40:5b:2e:bd:99:5e:d7:
1d:99:25:54:15:4a:81:e9:aa:f1:81:c5:c1:11:97:1a:04:d9:
46:c9:60:7e:60:7c:45:25:16:1b:49:6d:82:88:c5:8b:c9:60:
a4:f8:66:3a:0b:e2:c1:47:09:c9:a4:93:f4:83:5e:1c:ee:af:
24:6d:06:91:c3:08:e8:28:c7:af:c8:75:5a:ea:9b:fa:2c:40:
b8:f2:c2:29:f6:94:78:0e:da:7a:a0:d3:ab:8e:ad:37:45:27:
25:84:1f:74:47:66:ed:68:89:3f:27:47:61:54:57:ad:fb:bc:
3b:0a:95:ba:da:e3:89:7a:10:54:32:63:68:7f:7f:25:f4:b9:
24:a1:0a:c5:8d:14:8f:fa:a3:cd:9b:e9:35:76:6c:41:7c:61:
85:09:f4:27:8e:4e:29:f4:c1:22:53:e1:15:36:2f:79:5b:34:
d5:af:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:30:22 2026 by rpki-client