Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: 9FdsYOxiD2X2Dxyr8sfR3iOWW1b7Hlj1tPljNpU/udU=
Subject key identifier: 82:57:FA:3E:40:DF:4D:0A:AD:A2:E0:63:32:DA:59:9D:D6:B4:29:A3
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01A0890BD92BC703A9C2E2933E0DD45B8C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0EFB
Signing time: Thu 10 Sep 2026 02:00:49 +0000
Manifest this update: Thu 10 Sep 2026 02:00:49 +0000
Manifest next update: Fri 11 Sep 2026 02:00:49 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: C7upr3OThd3tXxD0Jp3efP87jfI.roa (hash: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=)
3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: eC3Y7xqFLx1wXcVrEVTl79qfSZMSSdx4cU7kg0ff0/Y=)
4: DRiTAPDF2xW4Cnr5WD7jOyCgpVU.roa (hash: 85mXUp42nU1HdKjC1kde1s7WFJRgutSos2YP8UM06Vw=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: WueW6I82GEBJmTpOwdN6my0iBVY.roa (hash: MkREwPkdmJOow1TbkT+eAldjPSpx7GvsHIK7qit+dc8=)
7: j5b05RZ-Pc84VbhjXWfOQdXvstg.roa (hash: fBPy1BOnpgVVJsYa962/feL6Jx4Rr6v5dNxNajdLYgw=)
8: wdvXFPkvt-d9b0S5-H5QvNZuELY.roa (hash: pOQkB8CIcydxsKoAZ+FXu6v1HpR5Zz+Qp6TW+J9alA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:d9:2b:c7:03:a9:c2:e2:93:3e:0d:d4:5b:8c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Sep 10 02:00:49 2026 GMT
Not After : Sep 11 02:00:49 2026 GMT
Subject: CN=8257fa3e40df4d0aada2e06332da599dd6b429a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:a3:c4:70:f5:1d:5e:36:bc:6e:69:1a:46:
d7:09:9a:0a:94:75:75:e4:2f:ba:26:33:50:f2:f8:
19:09:26:58:0a:fb:fd:9f:2c:09:eb:da:4b:9a:a8:
41:0c:e9:db:86:74:3c:4a:90:9b:95:b2:f3:b7:08:
fc:84:0b:09:53:6e:13:59:90:c9:1b:9b:5e:13:a1:
32:8c:a2:aa:76:61:e7:f9:05:00:03:c3:88:40:df:
71:b3:65:03:40:c9:64:d1:40:25:28:3d:c6:6c:a0:
75:d6:85:08:9a:65:1d:1f:d1:4c:fb:d3:8c:56:36:
d0:79:09:4b:71:b7:f0:c5:b4:44:65:4f:fc:13:b5:
8e:61:e3:70:da:bb:0f:10:7e:d8:f8:8f:3d:f5:f1:
ad:3d:fd:20:33:50:a5:e1:a1:66:7b:0e:fa:02:cd:
5b:38:16:98:89:fd:3f:6e:da:c6:a1:c1:68:fa:3b:
f7:14:0c:b4:38:f5:95:4a:06:38:f7:bb:c2:0f:ad:
cd:57:94:03:b4:35:1b:5a:5a:37:3f:7b:f4:a7:f0:
dd:c7:93:65:4a:48:0c:de:bd:a8:b0:5f:a8:0d:e5:
e4:f4:9c:1f:33:f2:d8:8e:52:ed:1f:cd:6a:c1:8d:
c3:f2:23:4f:77:bf:29:65:ac:64:42:3a:15:1f:de:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:FA:3E:40:DF:4D:0A:AD:A2:E0:63:32:DA:59:9D:D6:B4:29:A3
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f6:41:f2:bd:05:e8:2e:53:58:9b:19:a5:c6:48:45:b6:1c:
61:4b:e4:69:a3:e6:48:15:74:4b:80:23:90:4d:3d:b0:86:d4:
06:5b:3f:f0:8c:21:2a:df:1b:d1:49:62:f7:a3:27:56:b0:7a:
05:19:a2:75:e2:53:63:bf:f5:d0:e3:c9:6f:e7:71:9b:1c:b0:
1e:31:79:f0:36:f0:09:52:01:8b:92:2c:e5:8c:4a:56:18:47:
6c:ce:d7:85:03:a7:02:b3:88:30:b3:63:37:fb:f5:58:2a:f8:
bf:ac:cb:df:c0:fa:95:3f:b4:04:f3:7d:a9:79:d3:ae:4b:97:
33:46:8b:a4:cd:bb:a0:92:03:41:a6:22:97:65:08:44:f8:0f:
46:44:29:80:ba:99:f0:b4:88:2e:e4:f5:74:3b:ea:c4:bb:57:
85:6f:ca:64:22:f0:f7:de:fa:e9:21:44:ca:75:31:22:54:9f:
f5:f4:3d:9c:9d:32:aa:c5:be:5d:54:08:55:44:5f:56:48:5c:
36:61:04:c3:70:f5:e2:c2:0c:19:77:ab:5b:7c:e5:f3:2c:48:
50:8b:fd:6f:ad:68:3b:d4:83:a9:67:a5:eb:66:3b:aa:33:18:
36:c9:cd:93:ea:93:e3:b1:bd:9f:c2:bd:31:68:e2:f5:6e:17:
f1:c8:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:11:22 2026 by rpki-client