Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier: Kv8mSUDuNSR/64omLfvUvfdUJ7NMXPWetX8BJSPzNJs=
Subject key identifier: C0:9D:48:54:98:1B:0E:D1:D8:53:3C:5E:EB:7F:4E:2F:17:C9:B9:D1
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer: /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial: 3B682970B64D22C48794C2B1143DC2A0A8E51427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number: B1
Signing time: Sun 03 May 2026 19:04:50 +0000
Manifest this update: Sun 03 May 2026 18:59:50 +0000
Manifest next update: Mon 04 May 2026 22:56:50 +0000
Files and hashes: 1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: sPPVCXNty/J5rrbbJte5M4uiOxyNPoRjzqOz5Ssag9M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 22:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:68:29:70:b6:4d:22:c4:87:94:c2:b1:14:3d:c2:a0:a8:e5:14:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Validity
Not Before: May 3 18:59:50 2026 GMT
Not After : May 4 22:56:50 2026 GMT
Subject: CN=C09D4854981B0ED1D8533C5EEB7F4E2F17C9B9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:e5:a7:56:0c:2b:9d:b2:e0:48:31:5e:97:
74:a7:8b:31:48:55:c1:f4:1f:72:3f:36:8b:64:de:
3e:67:ac:ce:17:61:5f:49:13:e8:e6:90:96:9a:67:
c6:58:a0:0a:d0:92:c6:e0:d4:e9:97:c2:eb:6b:dc:
16:51:42:3e:3c:1c:4e:05:56:12:ab:b6:7a:fa:18:
9d:38:ec:89:e3:14:f0:ce:e2:c4:78:45:93:8a:e2:
77:36:e8:e6:7e:38:c3:f0:25:5f:ac:e2:8e:4e:86:
ab:f7:b6:3c:56:a3:3a:e3:d5:b7:41:cb:70:96:46:
18:07:80:f1:cb:b9:2c:21:49:af:89:9d:54:75:82:
80:01:2c:c8:5a:4f:f9:ea:dc:14:c7:44:8e:fb:eb:
16:ba:61:85:3d:52:6a:95:54:1f:44:d7:5f:c0:80:
5d:94:6d:09:ed:8a:6c:fb:f3:ea:78:58:90:6e:1c:
14:fd:45:1c:bf:94:db:36:92:40:7d:4c:ea:78:b7:
14:4d:48:f5:55:28:44:32:93:14:1e:91:3b:77:8d:
ae:87:be:7b:eb:21:64:fe:91:77:9d:f4:8e:69:87:
c7:ee:93:cc:b6:cb:00:bb:ad:a3:bd:19:3d:24:af:
ea:b6:e5:ec:00:48:cb:8f:ce:d6:ab:1e:2c:29:84:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9D:48:54:98:1B:0E:D1:D8:53:3C:5E:EB:7F:4E:2F:17:C9:B9:D1
X509v3 Authority Key Identifier:
keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:45:ed:e8:d0:31:47:fd:eb:ab:e6:c6:cc:9b:4b:d2:42:19:
50:1d:28:a3:59:fd:84:81:ae:0c:ff:74:8a:d0:63:42:c3:01:
d5:8e:94:63:57:96:6e:66:f2:50:fc:d1:84:31:7c:e5:df:29:
22:e8:c3:49:12:61:39:69:b2:65:7c:5a:c9:db:b3:bf:58:c6:
68:9f:28:2c:dd:03:dd:82:a9:f2:f6:5b:ac:3a:04:2d:b2:62:
2d:9d:79:d9:aa:1c:c4:54:c3:b3:11:17:31:ef:0c:fe:85:ed:
ab:82:74:9e:3a:3b:59:5a:7c:73:48:d0:af:c8:8a:65:3a:7d:
dc:6a:f7:1f:ff:d5:2d:5e:b0:48:32:d5:0a:74:8f:a6:62:c4:
a6:90:6a:01:7e:a9:f0:83:ed:3e:1c:81:32:4c:a6:2b:04:74:
f5:19:f4:07:c6:8e:be:15:fa:9b:07:c6:66:f6:e7:f6:7c:57:
18:66:be:69:ee:c5:5d:3c:37:41:29:ef:c2:b6:88:c0:bf:3d:
4a:15:e5:7f:c9:28:19:54:a4:69:b8:01:1e:12:4d:2c:4b:83:
46:fb:51:d0:33:f4:b9:5e:2d:7b:f5:b6:3e:00:8d:8e:99:13:
f6:8d:39:6b:57:01:24:27:3b:8f:3d:9e:ac:c3:1e:d9:2a:74:
ce:b4:69:23
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUO2gpcLZNIsSHlMKxFD3CoKjlFCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzNmNGUxNjdhNmIxNjMzMzc5Yjk5ODFkOGE1NjViN2Fm
YjgxZGM5MDAeFw0yNjA1MDMxODU5NTBaFw0yNjA1MDQyMjU2NTBaMDMxMTAvBgNV
BAMTKEMwOUQ0ODU0OTgxQjBFRDFEODUzM0M1RUVCN0Y0RTJGMTdDOUI5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiJuWnVgwrnbLgSDFel3SnizFI
VcH0H3I/Notk3j5nrM4XYV9JE+jmkJaaZ8ZYoArQksbg1OmXwutr3BZRQj48HE4F
VhKrtnr6GJ047InjFPDO4sR4RZOK4nc26OZ+OMPwJV+s4o5Ohqv3tjxWozrj1bdB
y3CWRhgHgPHLuSwhSa+JnVR1goABLMhaT/nq3BTHRI776xa6YYU9UmqVVB9E11/A
gF2UbQntimz78+p4WJBuHBT9RRy/lNs2kkB9TOp4txRNSPVVKEQykxQekTt3ja6H
vnvrIWT+kXed9I5ph8fuk8y2ywC7raO9GT0kr+q25ewASMuPztarHiwphBaXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUwJ1IVJgbDtHYUzxe639OLxfJudEwHwYDVR0j
BBgwFoAUw/ThZ6axYzN5uZgdilZbevuB3JAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh
ZWFlLzAvQzNGNEUxNjdBNkIxNjMzMzc5Qjk5ODFEOEE1NjVCN0FGQjgxREM5MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dfVGhaNmF4WXpONXVaZ2RpbFpiZXZ1
QjNKQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80YmZhN2E5Zi0y
OGQzLTQ1YjAtYTgzOS1hNTc1MTllY2FlYWUvMC9DM0Y0RTE2N0E2QjE2MzMzNzlC
OTk4MUQ4QTU2NUI3QUZCODFEQzkwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0Xt6NAxR/3rq+bGzJtL
0kIZUB0oo1n9hIGuDP90itBjQsMB1Y6UY1eWbmbyUPzRhDF85d8pIujDSRJhOWmy
ZXxayduzv1jGaJ8oLN0D3YKp8vZbrDoELbJiLZ152aocxFTDsxEXMe8M/oXtq4J0
njo7WVp8c0jQr8iKZTp93Gr3H//VLV6wSDLVCnSPpmLEppBqAX6p8IPtPhyBMkym
KwR09Rn0B8aOvhX6mwfGZvbn9nxXGGa+ae7FXTw3QSnvwraIwL89ShXlf8koGVSk
abgBHhJNLEuDRvtR0DP0uV4te/W2PgCNjpkT9o05a1cBJCc7jz2erMMe2Sp0zrRp
Iw==
-----END CERTIFICATE-----
Generated at Mon May 4 15:22:01 2026 by rpki-client