Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: 0P7yTv7m/OO0JLkIJ/T8Hq9in7Jq9IyEKkRSrOfk6MA=
Subject key identifier: FF:F3:EF:60:57:6F:3E:36:66:87:37:69:1C:B6:7D:CA:F9:9B:D4:FC
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019DCC06C8949CF28C10D7BD8A9723E2B1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0D8F
Signing time: Sun 26 Apr 2026 23:01:29 +0000
Manifest this update: Sun 26 Apr 2026 23:01:29 +0000
Manifest next update: Mon 27 Apr 2026 23:01:29 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: 228yLtZH+0ZXQ6rewsxPcIr4P4Gk67WZLz5hMqsnyq8=)
3: DRiTAPDF2xW4Cnr5WD7jOyCgpVU.roa (hash: 85mXUp42nU1HdKjC1kde1s7WFJRgutSos2YP8UM06Vw=)
4: IAdQIreQOZfqIBOeyYqZeKksgTw.roa (hash: ByUXtUQSXQRMW/r1o1pQxQUmgzGx55E4OY1BEotH3x8=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: qZ0t1bgk7-380JsudTgHSvu4iww.roa (hash: MxDfQAiBavHYi6Eibl28ia8jGS20tn2PTs2vvgSc/RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:c8:94:9c:f2:8c:10:d7:bd:8a:97:23:e2:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Apr 26 23:01:29 2026 GMT
Not After : Apr 27 23:01:29 2026 GMT
Subject: CN=fff3ef60576f3e36668737691cb67dcaf99bd4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:c5:11:33:67:f0:5f:47:cf:86:21:97:09:
f4:6b:e2:4e:da:67:8a:59:9c:18:e6:bc:1d:db:8e:
9a:a1:61:5c:c1:e6:31:63:94:c8:e4:22:1e:82:f4:
41:d9:45:06:9c:e4:31:1e:11:fc:7b:8c:c3:98:af:
32:78:06:e2:f6:d2:ca:4a:5b:d7:68:dc:9a:8d:5c:
ca:c5:66:b6:7f:b1:3b:60:1b:b5:de:65:59:f4:18:
2d:43:00:62:00:da:7a:b8:63:ae:da:2c:90:99:b2:
c7:8d:66:43:0b:3c:d8:a2:a3:10:c0:3d:cb:f1:5d:
02:5e:91:34:62:46:37:a1:41:73:11:a8:a3:54:b9:
22:ec:7f:30:1a:99:f7:6e:d4:2b:1f:7e:63:16:71:
46:51:b1:50:46:23:9e:2b:40:13:c5:1e:07:8f:8d:
23:4a:58:15:04:e6:f3:ed:0d:b8:11:34:03:7e:7a:
11:ce:bd:ed:be:1f:0a:13:11:63:e4:35:a7:5e:62:
aa:c2:81:7a:a1:d8:90:51:a2:b3:e7:4a:13:df:c3:
a6:7f:25:81:e9:74:22:a1:f8:53:3e:a8:a0:d6:ac:
82:f3:e4:13:08:61:62:91:02:f2:6b:36:f1:bc:bc:
3c:79:cb:15:84:3d:4b:86:c0:ca:76:fd:b6:0b:56:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:EF:60:57:6F:3E:36:66:87:37:69:1C:B6:7D:CA:F9:9B:D4:FC
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:70:0c:b4:fa:08:c6:61:b5:43:7a:a8:28:14:aa:f6:c8:85:
bd:73:89:cb:18:56:ae:7c:9f:eb:91:33:7e:44:6e:0f:61:73:
46:78:57:ff:ba:d0:6e:95:21:f2:c0:6e:e9:9f:75:d3:74:64:
bf:11:09:56:6e:ec:44:a2:17:0c:32:2e:83:c9:c4:85:1f:d0:
68:0c:96:47:6f:f7:71:b7:9c:b5:8a:d6:99:eb:a4:ce:b9:fc:
a4:16:9a:1d:9c:4a:cd:55:ed:71:03:2b:15:0d:fe:ab:a3:67:
1d:62:2e:53:9e:8c:59:8a:c2:a8:e3:ea:67:ad:51:cb:18:de:
c4:98:27:c1:ce:a6:77:e3:af:ee:31:57:93:70:d2:af:30:a0:
5f:64:d3:e7:fc:1d:d7:c7:80:93:ec:59:ef:47:24:78:e3:a2:
e2:93:e2:50:87:17:7d:db:77:4d:76:70:15:81:f4:15:e3:b9:
cd:0e:bb:ce:a4:4a:8a:af:4d:3d:b4:30:e8:eb:ee:5c:6c:8e:
f7:f5:0f:23:ea:23:8a:a8:e0:90:ed:95:9e:7b:8a:50:ff:d2:
a3:3e:b1:7a:51:c0:e7:b7:52:4f:43:1d:45:40:56:c8:68:37:
86:d3:fe:82:c6:e3:54:22:f3:0d:23:8e:0b:9a:23:28:9e:b4:
41:f1:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:28:13 2026 by rpki-client