Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: WgsdmIuQvkoFi/GWD5mkMdnmoBgSPilK1ELtj3sv4vQ=
Subject key identifier: 16:51:19:1C:AF:19:63:D7:54:8F:E1:93:69:C2:E0:B5:CA:ED:49:00
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019F9F5F8C7E94FE687B8F36F33273EAC054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0E82
Signing time: Sun 26 Jul 2026 17:01:06 +0000
Manifest this update: Sun 26 Jul 2026 17:01:06 +0000
Manifest next update: Mon 27 Jul 2026 17:01:06 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: C7upr3OThd3tXxD0Jp3efP87jfI.roa (hash: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=)
3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: ygPK0JeN5n5flkQieYWRV3dGYd6ep8R0vw/gkO2v1JY=)
4: DRiTAPDF2xW4Cnr5WD7jOyCgpVU.roa (hash: 85mXUp42nU1HdKjC1kde1s7WFJRgutSos2YP8UM06Vw=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: WueW6I82GEBJmTpOwdN6my0iBVY.roa (hash: MkREwPkdmJOow1TbkT+eAldjPSpx7GvsHIK7qit+dc8=)
7: j5b05RZ-Pc84VbhjXWfOQdXvstg.roa (hash: fBPy1BOnpgVVJsYa962/feL6Jx4Rr6v5dNxNajdLYgw=)
8: wdvXFPkvt-d9b0S5-H5QvNZuELY.roa (hash: pOQkB8CIcydxsKoAZ+FXu6v1HpR5Zz+Qp6TW+J9alA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:8c:7e:94:fe:68:7b:8f:36:f3:32:73:ea:c0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jul 26 17:01:06 2026 GMT
Not After : Jul 27 17:01:06 2026 GMT
Subject: CN=1651191caf1963d7548fe19369c2e0b5caed4900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:15:33:2c:f6:c5:4e:1b:5c:09:2b:08:a3:
72:5c:60:aa:09:7f:48:c2:60:63:c4:79:a4:52:61:
ca:7b:ab:1e:a1:2b:08:9c:c4:da:7c:8a:77:10:f6:
3b:b4:e2:12:0f:8d:63:fa:4b:4c:4a:57:61:c8:fb:
32:24:c4:70:e9:33:c6:32:a1:08:87:9e:67:18:22:
14:92:3e:67:c5:7a:a5:6a:24:55:08:b7:11:6f:93:
e4:b5:d6:1f:83:5a:1f:b4:04:b8:df:32:aa:c9:75:
41:10:bf:c6:d1:49:f1:85:3c:74:e0:19:e9:5a:59:
59:1d:f3:d4:94:15:6c:43:b4:a1:1b:d3:d5:31:03:
f9:65:95:4e:94:22:3c:55:df:51:c0:4b:32:97:96:
05:3e:c6:2f:a0:89:29:67:6e:6e:3c:2d:78:49:9f:
c7:a5:f1:4a:9d:12:a1:5c:6d:53:e0:73:01:e7:63:
8d:88:d0:77:6d:09:3d:29:0c:49:79:9e:cd:e1:49:
18:69:c5:49:fa:16:7f:3a:b7:e8:8f:d5:64:1f:de:
e3:34:54:cd:ab:aa:5a:6c:19:ad:b5:f8:06:37:0f:
29:d8:17:ed:4d:45:45:a7:ab:e4:fb:2a:61:5c:3d:
85:63:b6:1b:fe:7c:88:4f:1d:6b:3d:d3:6c:55:e1:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:51:19:1C:AF:19:63:D7:54:8F:E1:93:69:C2:E0:B5:CA:ED:49:00
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:45:62:11:da:4a:a6:de:1f:27:b0:d0:87:88:e4:26:83:
fb:93:4d:75:d2:ef:93:e3:31:bd:bd:92:53:6b:9a:87:7b:fe:
64:a2:80:d6:b3:f9:47:e6:23:91:aa:17:32:18:c2:f9:61:d6:
ea:bf:a0:a3:04:7e:b1:9e:ec:79:04:f8:14:28:e6:51:a2:53:
5e:7e:71:41:16:e1:ed:2e:d8:99:38:38:e2:9c:73:57:00:6f:
8a:03:38:a5:7a:23:4d:57:98:60:e6:59:6c:4d:a3:0f:64:e5:
46:6f:da:54:32:c5:4b:2d:3c:57:83:28:2b:a7:dd:54:32:02:
32:20:cd:39:bc:2d:a0:d6:d9:c1:15:50:85:be:60:a7:c2:c2:
de:bf:dd:31:43:53:cb:f5:5d:c5:77:d6:4b:00:fd:72:5d:89:
9f:9f:99:74:79:90:93:1e:6e:73:22:f8:6b:22:15:24:66:be:
8f:c9:5f:dc:4d:d8:bb:4a:a5:55:a4:0f:41:67:60:71:5d:da:
d9:33:e0:13:fa:d5:f7:05:0d:27:af:e8:be:ce:28:5f:2e:2d:
d1:34:59:1c:36:8d:c6:b2:53:0a:d2:95:54:8d:b3:6c:4c:d2:
e9:3d:bd:8d:90:fe:d6:5a:73:fe:82:d6:23:6e:28:f2:2e:c7:
0a:99:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:08:15 2026 by rpki-client