Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: 9UW3gtlniFoYlw12vFK95VerwHhSfcreeQfqn1kYlbo=
Subject key identifier: DB:B9:49:39:11:CB:C3:47:82:59:E2:0E:37:44:E6:B2:05:68:5E:21
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019CD61E8570E62351F2CB2A250A6BF9F35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0D0E
Signing time: Tue 10 Mar 2026 05:00:50 +0000
Manifest this update: Tue 10 Mar 2026 05:00:50 +0000
Manifest next update: Wed 11 Mar 2026 05:00:50 +0000
Files and hashes: 1: 3OtLzFbkywxj4bXOGTjeuqnS8SE.roa (hash: 2jeNVVe54GmP1BBES9FaoxamDKF2feBho25yOVUyHaw=)
2: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: wbAqTgPb8Qa3yG0uAyapqBr3b9+7gluoF21qRlHNask=)
4: IAdQIreQOZfqIBOeyYqZeKksgTw.roa (hash: ByUXtUQSXQRMW/r1o1pQxQUmgzGx55E4OY1BEotH3x8=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa (hash: x3mP5EeqVaKIolXtodkSvvchfGdilfiKxpYM+QBGVxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:1e:85:70:e6:23:51:f2:cb:2a:25:0a:6b:f9:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Mar 10 05:00:50 2026 GMT
Not After : Mar 11 05:00:50 2026 GMT
Subject: CN=dbb9493911cbc3478259e20e3744e6b205685e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:57:52:42:4c:d7:ac:ea:91:01:dd:ea:25:
5c:4a:b8:dd:d9:4a:e0:21:5b:4f:a3:31:80:6d:31:
8b:be:07:5f:51:53:62:c8:0c:b4:20:25:32:a9:26:
69:8b:f6:45:fe:b1:a0:e6:ef:b8:e2:84:65:90:36:
61:5d:96:f7:cb:5a:86:9e:3e:f9:2e:f6:0f:47:92:
3f:8d:6e:57:8b:82:36:27:90:37:19:50:3e:a3:e3:
91:ad:e3:1c:95:60:be:c9:ae:0e:85:07:9e:5c:dc:
a4:7a:8f:a3:2a:9c:ca:3b:d6:5d:bf:98:53:c3:ad:
b1:17:cd:38:ba:32:8c:67:18:0b:30:f5:04:8f:a8:
7a:90:34:47:00:15:77:9d:f2:f7:06:7e:37:b7:4f:
d9:6d:45:2c:be:a4:7c:2d:d9:86:e6:f9:68:a0:1b:
25:a6:68:fc:0e:51:af:08:aa:cb:4e:b9:0b:79:93:
41:9c:cd:2a:52:81:f9:42:c4:81:45:32:bc:34:d5:
3c:7d:92:08:fa:4b:b3:dd:18:94:7a:18:7c:9b:ec:
61:72:61:32:4f:f0:e9:c6:d5:b0:d1:b2:a1:21:63:
ed:6c:33:04:cb:4f:1b:47:22:f3:da:dd:38:4d:12:
08:5d:da:5d:af:64:ec:a1:2c:f0:16:8d:a1:8f:da:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B9:49:39:11:CB:C3:47:82:59:E2:0E:37:44:E6:B2:05:68:5E:21
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e9:19:7d:76:94:c3:dc:5e:90:c3:3a:87:8a:0c:81:ca:cc:
c1:10:a2:5b:e6:b0:ed:99:aa:13:15:de:c9:e1:69:9c:01:5d:
94:ab:60:c8:67:e7:9e:5a:60:92:d6:76:f4:27:ec:63:a8:9f:
3f:9a:32:ba:0a:22:9d:a4:2d:9a:20:63:c0:ad:29:ea:96:57:
27:e0:96:7d:d6:55:19:e7:52:9f:8e:87:16:3d:dd:75:58:88:
73:28:29:21:89:6d:28:8c:14:82:69:9f:94:ff:e2:fb:10:67:
6a:48:81:ac:11:21:9d:d5:68:c3:49:63:9b:f3:51:ff:9c:38:
dd:6d:68:91:04:08:b7:80:12:e3:e0:00:1d:8f:fd:1c:1f:c8:
01:11:24:29:af:a1:95:37:e9:53:d8:7e:1a:a2:bb:8c:98:c1:
0d:f3:ef:00:b3:7c:0f:9d:d9:68:4c:a1:23:75:ab:72:19:0a:
f0:96:21:0f:d3:8d:89:d1:5c:8e:91:27:e5:3c:23:5b:e0:44:
0e:08:6c:51:51:d5:fc:d2:73:a1:1d:89:2e:26:98:05:9a:23:
c9:f8:f7:61:78:e9:11:ac:03:f4:c2:1b:a2:b5:73:c6:10:9c:
31:45:da:de:33:38:18:fa:60:6f:49:0d:e0:c3:e5:9b:a0:b9:
62:8c:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 06:41:03 2026 by rpki-client