Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: oJWlnY5VvZa9p6HUSvxdrE1Bsoz2JEME+ernXFKNE90=
Subject key identifier: 34:3E:FE:CA:36:18:56:F9:FC:14:69:A4:1F:21:02:1E:47:58:54:67
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 019D37C0080C6DC658112040677FA7550BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 165A
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: td1RPlvIUXbNncsMTYc/6LYCUaerBD46K+Bx8YBlaro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:08:0c:6d:c6:58:11:20:40:67:7f:a7:55:0b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=343efeca361856f9fc1469a41f21021e47585467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:41:c0:df:cd:fb:06:02:6d:88:f0:29:6c:
9d:dd:9b:14:ce:fd:7e:37:16:ef:c4:e9:14:c7:45:
f6:8e:29:54:18:58:22:41:de:76:0d:b1:5e:aa:af:
f4:cd:f0:29:ab:be:db:73:e9:0b:85:c6:69:77:69:
84:7c:1b:25:e1:ad:e0:6a:61:00:78:e9:16:ae:18:
d6:d2:41:1e:04:32:8a:04:9f:6b:61:0a:db:56:0a:
da:cf:99:a0:88:43:e7:be:3a:bb:78:af:79:03:a2:
11:fd:d5:45:6f:a1:50:0d:0d:0d:c0:1e:8c:e1:0b:
16:cb:df:48:d5:14:69:84:b2:83:e9:b1:d2:44:a0:
53:e1:ef:13:fe:35:d3:5f:65:28:ef:97:a5:76:2d:
31:26:2f:f1:f4:01:09:33:b0:f3:84:87:b2:25:81:
cc:ad:0f:ee:62:31:95:9d:4e:b8:bb:6d:e8:9f:a7:
44:ad:a7:4f:fb:20:02:72:17:19:78:52:26:e8:fa:
05:4e:f0:59:22:f8:cf:8b:fa:14:83:1d:dc:03:94:
d5:d2:af:14:73:91:47:39:e9:61:fb:6f:4e:e8:ab:
56:6c:fd:bd:73:ec:c5:f8:b8:56:ae:67:95:79:2d:
4f:94:38:df:4d:a5:8d:fc:17:6d:92:3d:2b:88:30:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:FE:CA:36:18:56:F9:FC:14:69:A4:1F:21:02:1E:47:58:54:67
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:47:11:1b:dd:a1:4f:02:f3:d2:54:7a:a3:86:d2:26:c8:65:
a0:a6:b6:c9:f0:e8:0f:f6:19:15:e2:d8:d0:3d:a9:7f:b0:cf:
29:c1:3a:af:30:8b:3e:3d:7c:a5:5d:6d:75:8c:54:e1:60:28:
a7:c7:56:d0:72:41:11:e9:0e:6b:5c:68:ef:fd:22:75:df:40:
56:22:d9:d1:8c:77:c4:06:1f:b1:f5:7e:33:8d:13:c1:57:37:
98:84:93:0d:88:a0:55:f3:66:6f:9f:96:c2:ca:f7:6c:65:98:
7c:b9:ff:5f:c9:1e:d2:32:f4:75:e8:7f:c3:81:86:b9:d8:65:
a5:b4:60:be:b5:1c:49:a5:c9:f7:d4:f3:8e:5c:40:9c:e1:0f:
56:92:8e:a4:e0:09:f4:2f:98:8a:4a:7e:cd:f5:8b:fb:fa:85:
7c:fc:13:d6:9c:00:39:19:16:08:c3:af:2d:c2:74:ed:94:a0:
b4:a4:93:8d:d5:0c:2b:cc:02:05:85:20:cd:d7:18:19:d9:a4:
40:69:e2:d6:1a:a2:31:55:e2:99:7b:87:46:54:71:b2:ce:59:
90:18:e8:7f:8b:de:d1:54:9b:69:0e:a8:57:05:ae:da:5b:8e:
79:46:5b:ef:a5:66:b9:72:cd:9c:7d:3a:31:78:69:b1:64:7a:
3c:c6:0f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wAgMbcZYESBAZ3+nVQvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjYwMzI5MDQwMDI1WhcNMjYwMzMwMDQwMDI1WjAzMTEwLwYDVQQD
EygzNDNlZmVjYTM2MTg1NmY5ZmMxNDY5YTQxZjIxMDIxZTQ3NTg1NDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg9BwN/N+wYCbYjwKWyd3ZsUzv1+
NxbvxOkUx0X2jilUGFgiQd52DbFeqq/0zfApq77bc+kLhcZpd2mEfBsl4a3gamEA
eOkWrhjW0kEeBDKKBJ9rYQrbVgraz5mgiEPnvjq7eK95A6IR/dVFb6FQDQ0NwB6M
4QsWy99I1RRphLKD6bHSRKBT4e8T/jXTX2Uo75eldi0xJi/x9AEJM7DzhIeyJYHM
rQ/uYjGVnU64u23on6dEradP+yACchcZeFIm6PoFTvBZIvjPi/oUgx3cA5TV0q8U
c5FHOelh+29O6KtWbP29c+zF+LhWrmeVeS1PlDjfTaWN/Bdtkj0riDCKvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ+/so2GFb5/BRppB8hAh5HWFRnMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEcRG92h
TwLz0lR6o4bSJshloKa2yfDoD/YZFeLY0D2pf7DPKcE6rzCLPj18pV1tdYxU4WAo
p8dW0HJBEekOa1xo7/0idd9AViLZ0Yx3xAYfsfV+M40TwVc3mISTDYigVfNmb5+W
wsr3bGWYfLn/X8ke0jL0deh/w4GGudhlpbRgvrUcSaXJ99TzjlxAnOEPVpKOpOAJ
9C+Yikp+zfWL+/qFfPwT1pwAORkWCMOvLcJ07ZSgtKSTjdUMK8wCBYUgzdcYGdmk
QGni1hqiMVXimXuHRlRxss5ZkBjof4ve0VSbaQ6oVwWu2luOeUZb76VmuXLNnH06
MXhpsWR6PMYPAQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:09 2026 by rpki-client