Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier: A30GGv1A5CL1vpkbL1zfpxzlmpJKfV+FvXPwRfjhQpg=
Subject key identifier: 2B:78:64:C8:F4:71:14:D6:F1:79:67:3B:D7:18:3E:4F:B6:89:19:57
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer: /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial: 15A3944F735AC4EB06DDFEEDB97FB3BFC7174C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number: 015E
Signing time: Thu 10 Sep 2026 09:47:25 +0000
Manifest this update: Thu 10 Sep 2026 09:42:25 +0000
Manifest next update: Fri 11 Sep 2026 13:09:25 +0000
Files and hashes: 1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: nfHybC4p0Ojp09g2OWBmAthH3rKOCs1REb4nBG7BByM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a3:94:4f:73:5a:c4:eb:06:dd:fe:ed:b9:7f:b3:bf:c7:17:4c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Validity
Not Before: Sep 10 09:42:25 2026 GMT
Not After : Sep 11 13:09:25 2026 GMT
Subject: CN=2B7864C8F47114D6F179673BD7183E4FB6891957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:2b:08:4b:50:44:c8:b1:6d:f9:d2:00:d8:
69:7f:75:27:2d:d6:5b:de:18:b5:e8:aa:52:2a:49:
62:2d:36:f2:85:27:82:75:2c:0d:f2:a2:40:9e:6e:
11:28:2b:6d:04:51:8c:7c:7c:00:28:ec:7c:17:f8:
73:65:23:d2:0f:0d:bf:ca:6c:57:9b:4f:32:7a:ec:
ee:6d:27:05:96:a3:f0:cf:19:0a:45:43:e5:dc:53:
9c:0e:14:8f:de:54:cd:94:26:9f:eb:8e:64:1e:c6:
61:98:f3:f3:88:5a:51:ae:32:c1:99:9a:20:e4:64:
54:97:53:de:23:86:28:0a:0c:c5:24:b0:27:5e:11:
e8:e1:12:35:8b:45:13:d2:6d:52:b4:f9:67:83:d9:
cc:b4:4d:4f:1b:60:53:a2:73:e9:6c:77:99:07:45:
9f:fc:6e:81:ed:2f:70:98:97:6b:17:73:e4:81:cb:
fd:e3:e0:51:f1:02:bf:ff:d2:80:b9:3a:9d:bc:a8:
22:a2:bb:25:e2:91:20:85:14:2d:2d:19:2c:b6:d0:
d1:1b:95:c9:e8:d5:64:f9:e7:81:76:c3:5a:b0:88:
94:f7:da:33:4f:eb:7f:5f:01:18:ea:f3:25:c9:e7:
78:b6:d7:7f:b5:ea:5e:43:a5:f0:6a:dc:73:48:ff:
ac:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:64:C8:F4:71:14:D6:F1:79:67:3B:D7:18:3E:4F:B6:89:19:57
X509v3 Authority Key Identifier:
keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:01:97:03:15:4d:7e:0f:ee:21:77:08:8c:05:64:e1:7b:29:
9d:d4:16:00:f8:6e:08:63:22:fa:06:54:51:f4:40:3a:d6:89:
6b:43:c6:f5:b9:c5:b4:c7:de:a1:88:93:94:14:57:42:1d:f0:
af:c9:98:f4:e0:ee:d2:17:a4:a7:94:cf:fb:0b:5f:c3:8f:9b:
00:62:fd:7e:57:c7:68:cf:9e:07:c6:b2:ec:7f:06:e3:4f:0b:
1d:d0:dd:05:9d:e4:42:74:1f:d4:df:1b:f5:17:e7:7b:97:0e:
10:04:a7:f4:24:f5:93:2f:ec:e6:9e:41:b4:e6:9f:81:74:c4:
dc:80:50:32:97:19:dd:c7:de:2c:4c:71:3f:d3:d9:1e:31:74:
d7:9b:be:71:39:af:c8:5e:19:a9:49:44:55:99:64:39:ce:1f:
3f:01:01:eb:54:a6:d2:3b:80:9e:6e:98:79:67:39:4c:4e:be:
3c:f2:48:20:5c:ca:b0:2b:c3:8e:d5:e0:f9:51:9d:cc:58:51:
99:8c:e8:30:e8:4e:ce:6d:dc:7a:f4:21:f8:c8:94:21:13:d1:
fb:9f:64:03:63:58:56:2f:3d:cc:d6:9e:d7:6d:7d:69:5e:c5:
60:cf:ee:5c:8f:1e:df:fa:2a:e6:37:f3:28:e4:40:ee:ce:a3:
ad:1e:5c:db
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFaOUT3NaxOsG3f7tuX+zv8cXTAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzNmNGUxNjdhNmIxNjMzMzc5Yjk5ODFkOGE1NjViN2Fm
YjgxZGM5MDAeFw0yNjA5MTAwOTQyMjVaFw0yNjA5MTExMzA5MjVaMDMxMTAvBgNV
BAMTKDJCNzg2NEM4RjQ3MTE0RDZGMTc5NjczQkQ3MTgzRTRGQjY4OTE5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfSsIS1BEyLFt+dIA2Gl/dSct
1lveGLXoqlIqSWItNvKFJ4J1LA3yokCebhEoK20EUYx8fAAo7HwX+HNlI9IPDb/K
bFebTzJ67O5tJwWWo/DPGQpFQ+XcU5wOFI/eVM2UJp/rjmQexmGY8/OIWlGuMsGZ
miDkZFSXU94jhigKDMUksCdeEejhEjWLRRPSbVK0+WeD2cy0TU8bYFOic+lsd5kH
RZ/8boHtL3CYl2sXc+SBy/3j4FHxAr//0oC5Op28qCKiuyXikSCFFC0tGSy20NEb
lcno1WT554F2w1qwiJT32jNP639fARjq8yXJ53i213+16l5DpfBq3HNI/6xdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUK3hkyPRxFNbxeWc71xg+T7aJGVcwHwYDVR0j
BBgwFoAUw/ThZ6axYzN5uZgdilZbevuB3JAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh
ZWFlLzAvQzNGNEUxNjdBNkIxNjMzMzc5Qjk5ODFEOEE1NjVCN0FGQjgxREM5MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dfVGhaNmF4WXpONXVaZ2RpbFpiZXZ1
QjNKQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80YmZhN2E5Zi0y
OGQzLTQ1YjAtYTgzOS1hNTc1MTllY2FlYWUvMC9DM0Y0RTE2N0E2QjE2MzMzNzlC
OTk4MUQ4QTU2NUI3QUZCODFEQzkwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegGXAxVNfg/uIXcIjAVk
4XspndQWAPhuCGMi+gZUUfRAOtaJa0PG9bnFtMfeoYiTlBRXQh3wr8mY9ODu0hek
p5TP+wtfw4+bAGL9flfHaM+eB8ay7H8G408LHdDdBZ3kQnQf1N8b9Rfne5cOEASn
9CT1ky/s5p5BtOafgXTE3IBQMpcZ3cfeLExxP9PZHjF015u+cTmvyF4ZqUlEVZlk
Oc4fPwEB61Sm0juAnm6YeWc5TE6+PPJIIFzKsCvDjtXg+VGdzFhRmYzoMOhOzm3c
evQh+MiUIRPR+59kA2NYVi89zNae1219aV7FYM/uXI8e3/oq5jfzKORA7s6jrR5c
2w==
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:11:58 2026 by rpki-client