Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: LG2rgxuKvuoFQPYqeKZyVmtDNPeoQUk73GH9ckilyOg=
Subject key identifier: 8A:61:A3:8B:1B:96:5A:78:06:D8:D6:0C:F6:B1:72:81:6E:2A:00:0D
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 019D9A3E7D7BF2D53F4BC61D49C61A936D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 168D
Signing time: Fri 17 Apr 2026 07:01:19 +0000
Manifest this update: Fri 17 Apr 2026 07:01:19 +0000
Manifest next update: Sat 18 Apr 2026 07:01:19 +0000
Files and hashes: 1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: 6ajPZN3DQCw/DVLHsnn4JaWrLLBJc4Lc6p/cdjsCcsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:7d:7b:f2:d5:3f:4b:c6:1d:49:c6:1a:93:6d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Apr 17 07:01:19 2026 GMT
Not After : Apr 18 07:01:19 2026 GMT
Subject: CN=8a61a38b1b965a7806d8d60cf6b172816e2a000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:0d:a8:20:83:cd:75:8e:3e:e2:d1:ef:38:
19:1b:68:1a:d6:3c:2b:db:3a:d0:fb:d4:99:93:ef:
23:fc:3c:c4:6e:8a:d5:7b:56:de:af:4d:b3:d9:ce:
ad:12:6e:70:e8:88:be:a8:e9:1c:d0:c1:94:15:89:
71:06:91:f6:55:d0:13:08:1c:7f:de:81:06:1d:4f:
b6:91:69:c0:cd:c7:41:e7:bb:34:76:1d:a9:12:85:
b3:94:c6:e3:0f:91:e9:4a:d8:a6:57:63:6e:cf:ca:
06:aa:23:4a:4f:81:dc:b4:f1:ba:39:58:76:11:3b:
a1:82:be:86:f2:f4:4e:cc:56:2a:dd:b9:cb:0b:a8:
66:47:22:32:8f:45:3e:60:7b:b2:56:e0:fe:5d:c4:
54:90:e8:e0:a7:ef:ba:96:7d:55:90:83:b4:70:3d:
e2:8f:26:22:89:55:36:28:36:86:7b:66:e3:76:c7:
b9:2e:1a:02:82:5c:77:20:78:dc:e4:a4:cf:1b:fe:
5e:86:f1:c0:10:08:a8:f9:6c:ae:46:52:c2:d3:75:
55:b1:6c:7d:4c:a3:e7:b5:d1:36:11:97:9b:8e:03:
bf:25:dc:be:8c:4b:b3:3d:31:4b:f7:9e:94:1f:b0:
55:1b:66:28:7c:ad:df:03:82:50:99:f8:d7:6d:23:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:61:A3:8B:1B:96:5A:78:06:D8:D6:0C:F6:B1:72:81:6E:2A:00:0D
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7c:3a:fa:b8:1b:00:64:42:9b:96:1b:47:c1:5e:27:4d:95:
d6:6b:33:b5:62:01:66:55:8f:2c:0a:35:ad:20:5a:79:c6:c1:
5b:0b:96:65:b3:78:c8:b0:1a:43:17:4b:92:a4:65:59:8e:95:
64:21:44:22:73:81:1a:10:de:34:4d:b9:15:f9:c8:a8:81:63:
ba:50:00:13:a3:34:12:99:26:6a:91:0d:0c:18:6a:ab:c6:69:
a1:7e:e8:da:72:f1:b0:e5:98:9d:c0:4e:b0:76:2b:ed:73:4e:
08:d9:ea:85:6f:45:22:46:d0:6d:01:f4:01:bb:d9:0e:60:f0:
a5:e9:eb:b4:94:28:08:66:bd:20:28:4a:21:58:f9:26:34:48:
99:aa:9f:94:18:d5:2a:a4:76:1f:c6:a7:15:71:b6:01:f2:79:
a5:57:0a:92:f8:1f:b1:d7:f3:ac:e2:28:54:37:72:b4:ce:90:
bb:43:0c:b9:82:91:37:c9:3c:26:cf:b3:ed:73:cf:d7:41:3a:
bf:5b:bc:02:cb:5f:b2:2b:6f:48:15:ff:da:5c:8c:c0:4e:db:
d1:c2:07:25:89:85:3c:19:5c:19:95:a5:9f:5c:0a:d5:63:da:
11:46:95:5d:cd:8a:b2:6f:4d:fe:f6:70:f2:8f:e8:1c:1c:39:
7b:f1:81:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPn178tU/S8YdScYak21zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjYwNDE3MDcwMTE5WhcNMjYwNDE4MDcwMTE5WjAzMTEwLwYDVQQD
Eyg4YTYxYTM4YjFiOTY1YTc4MDZkOGQ2MGNmNmIxNzI4MTZlMmEwMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQwNqCCDzXWOPuLR7zgZG2ga1jwr
2zrQ+9SZk+8j/DzEborVe1ber02z2c6tEm5w6Ii+qOkc0MGUFYlxBpH2VdATCBx/
3oEGHU+2kWnAzcdB57s0dh2pEoWzlMbjD5HpStimV2Nuz8oGqiNKT4HctPG6OVh2
ETuhgr6G8vROzFYq3bnLC6hmRyIyj0U+YHuyVuD+XcRUkOjgp++6ln1VkIO0cD3i
jyYiiVU2KDaGe2bjdse5LhoCglx3IHjc5KTPG/5ehvHAEAio+WyuRlLC03VVsWx9
TKPntdE2EZebjgO/Jdy+jEuzPTFL956UH7BVG2YofK3fA4JQmfjXbSMWiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpho4sbllp4BtjWDPaxcoFuKgANMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnw6+rgb
AGRCm5YbR8FeJ02V1msztWIBZlWPLAo1rSBaecbBWwuWZbN4yLAaQxdLkqRlWY6V
ZCFEInOBGhDeNE25FfnIqIFjulAAE6M0EpkmapENDBhqq8ZpoX7o2nLxsOWYncBO
sHYr7XNOCNnqhW9FIkbQbQH0AbvZDmDwpenrtJQoCGa9IChKIVj5JjRImaqflBjV
KqR2H8anFXG2AfJ5pVcKkvgfsdfzrOIoVDdytM6Qu0MMuYKRN8k8Js+z7XPP10E6
v1u8AstfsitvSBX/2lyMwE7b0cIHJYmFPBlcGZWln1wK1WPaEUaVXc2Ksm9N/vZw
8o/oHBw5e/GByA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:22 2026 by rpki-client