Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: BKW2KplAaZ+brsGG8OtF2EUk/iCGFcUexfyI0PvuY4g=
Subject key identifier: F9:D4:DC:27:19:EB:49:59:0E:C2:BA:A7:02:08:38:9D:F5:4E:1E:99
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 019D265F61B6D67F18A5A9C2160DFB75F890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 1651
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: zTqmPP/8VP8bQhysguDUN+W9RbjPFmJgLZRJ1dpQ3BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:61:b6:d6:7f:18:a5:a9:c2:16:0d:fb:75:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=f9d4dc2719eb49590ec2baa70208389df54e1e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:b0:a9:4d:67:7b:10:86:4b:e3:6a:12:0a:
1f:33:d5:ef:68:79:6f:d2:d5:42:a9:f9:13:95:64:
60:3a:52:b4:aa:2a:b0:d2:9d:23:fd:55:6a:bb:4e:
6e:40:fa:8a:2d:9d:63:92:d5:b4:fd:ae:36:fb:37:
3c:2d:30:14:e9:bd:51:c7:64:c3:82:9c:d6:58:c8:
09:e7:f1:79:f9:4f:dc:85:88:72:8e:93:9e:24:fb:
e6:b5:9b:0d:fe:c9:3d:f9:d1:ef:c7:26:3b:6f:46:
96:19:10:9d:19:f5:a1:22:41:a8:f9:f9:4f:92:4c:
73:d5:fd:d1:b8:00:f2:00:c4:56:d4:43:2b:ae:de:
18:fa:4c:89:77:ff:90:75:00:78:81:ff:4f:5b:33:
c0:a7:c7:50:1e:92:8a:bb:65:46:1e:44:e1:a6:2f:
8c:71:9c:e3:cd:7c:47:58:bf:bd:48:07:2d:26:59:
1c:bb:7e:f4:ec:d7:a1:95:76:eb:1f:eb:de:b0:75:
f3:64:75:b9:54:23:e7:18:fb:dc:b7:05:03:74:75:
62:5a:6b:03:c6:94:65:eb:a6:bb:dd:34:d4:57:0a:
9c:46:63:ad:8b:94:1b:53:a9:58:af:5b:3f:7c:37:
aa:a4:04:71:25:c7:28:6f:e8:59:6d:2d:b4:d9:52:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:DC:27:19:EB:49:59:0E:C2:BA:A7:02:08:38:9D:F5:4E:1E:99
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:b3:3f:71:f9:36:0f:05:05:3a:b0:9e:a8:f8:12:60:1d:
d4:01:c0:32:5c:eb:e9:ba:14:5c:10:00:83:59:6e:61:fc:bc:
c8:0d:a6:1d:b9:a1:de:13:1b:45:1f:6f:f4:b3:5a:1a:a6:69:
c6:78:e6:60:b1:da:98:74:83:ff:51:84:0b:2d:86:48:8c:a8:
47:7e:7a:80:c4:d6:49:45:fa:d1:f6:e5:b7:fd:5e:0b:ae:05:
e6:59:99:9d:4b:0e:39:6a:e6:e5:46:90:41:90:20:8b:c9:9e:
99:04:e8:b0:83:48:3a:21:1a:2a:4c:93:c7:22:b0:45:a1:80:
00:a0:91:97:6a:d9:f6:9b:d5:c5:e5:9a:6e:c2:75:56:1e:87:
04:d8:90:88:12:86:fd:02:02:7a:01:f1:65:a0:7b:7e:70:04:
3e:ad:a1:56:e3:f6:22:31:b6:8a:2c:e0:df:9f:79:d6:2b:12:
23:58:07:a7:fd:35:df:cf:81:b2:f8:b2:c4:96:4a:50:bb:a6:
e8:6c:ba:3f:2a:37:94:d0:f9:6a:54:fc:a0:9d:ca:c2:72:98:
db:16:ff:58:59:43:f0:fa:4e:04:30:70:d6:ea:86:ad:c8:a6:
d3:86:35:79:e3:87:f2:a5:ef:e1:4d:72:8c:cf:6d:43:60:dc:
68:a1:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:29 2026 by rpki-client