Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier: +vglxXoP7on9SrqPwGCMgYrC4KPS7U4ApZx8sJi6c0g=
Subject key identifier: AC:35:AE:A7:BC:15:7A:37:E5:1C:11:D0:DD:B2:5A:08:FD:B0:90:D1
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer: /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial: 66D29502E00DCE73EF594814F082B48EC084DE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number: F5
Signing time: Tue 23 Jun 2026 20:32:06 +0000
Manifest this update: Tue 23 Jun 2026 20:27:06 +0000
Manifest next update: Thu 25 Jun 2026 00:07:06 +0000
Files and hashes: 1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: Dj8U5bzdfrUqQBek6Bc/axR+VxEd8WwGlDdXmFCqz4A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d2:95:02:e0:0d:ce:73:ef:59:48:14:f0:82:b4:8e:c0:84:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Validity
Not Before: Jun 23 20:27:06 2026 GMT
Not After : Jun 25 00:07:06 2026 GMT
Subject: CN=AC35AEA7BC157A37E51C11D0DDB25A08FDB090D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:a4:31:11:eb:09:15:67:3a:aa:0f:27:0e:
aa:38:42:69:aa:d0:5e:8b:04:57:ca:b8:e4:e2:fd:
e6:f3:30:85:cd:1e:bc:e8:0a:22:a7:3c:24:88:b8:
32:73:1d:11:b7:73:51:ad:a3:32:71:59:bf:17:aa:
d7:36:fe:9c:e0:74:af:3a:40:b7:d2:10:bd:2a:cc:
c8:4d:48:e3:cb:d7:a3:af:3e:2c:f6:fc:8a:a0:4d:
cc:ad:c5:f4:bc:c0:68:e5:2d:da:06:c7:8b:d4:eb:
e2:65:5f:40:63:f0:6c:9d:1e:a3:36:51:29:03:bd:
be:84:1f:5d:6a:3c:b3:96:5d:0e:dc:41:e3:88:03:
fb:53:15:27:c1:46:71:fc:c3:28:f1:d7:a4:ae:83:
1f:ed:9e:6b:f1:0a:18:c0:8e:2d:b8:da:d6:c0:15:
7e:85:a0:76:f3:c1:64:e2:eb:35:38:c6:cc:94:0d:
bd:c1:8f:2c:ae:09:bd:d3:46:83:79:3d:62:74:7b:
94:01:10:53:6c:e3:5c:81:df:65:d0:d6:a9:97:2f:
c0:fb:5b:7c:da:6a:82:22:a4:9d:57:8f:13:b8:05:
55:df:51:34:59:28:62:9e:14:b5:27:af:59:97:f5:
0e:2a:84:40:1d:82:d1:80:21:0e:e9:c7:ef:80:3e:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:AE:A7:BC:15:7A:37:E5:1C:11:D0:DD:B2:5A:08:FD:B0:90:D1
X509v3 Authority Key Identifier:
keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:70:d4:3b:a9:1d:19:74:4f:da:7f:34:42:77:8d:88:1c:
71:56:11:54:6f:ed:7a:d9:2e:0d:9a:d2:31:f5:e7:9b:76:a5:
4f:c2:f9:87:43:99:87:9f:de:00:46:80:6b:dd:a5:6d:93:c7:
2f:95:3c:3a:c2:88:ea:fc:37:a7:61:0e:df:92:ac:5f:3f:97:
52:7a:3b:6a:6a:2d:f3:11:88:45:3b:74:4c:0b:3b:05:4e:f7:
36:2f:b2:81:16:73:8d:d5:64:db:2c:02:29:08:4e:9f:ef:68:
92:0f:83:51:a1:ca:66:af:80:82:b8:fb:f1:8f:c4:9e:47:e7:
45:89:6c:b1:07:eb:61:36:f1:0e:21:75:23:22:fd:2f:1e:27:
83:b8:d1:73:13:81:44:4a:88:d1:f4:71:ee:bd:db:fc:e7:95:
45:cf:0e:d8:e5:f5:8a:84:8b:35:4c:d4:b8:34:c9:38:4a:dc:
eb:7d:f8:c5:cf:53:71:72:03:e5:d7:53:1b:98:2d:c8:63:77:
0e:73:dc:6c:97:7b:46:40:27:5a:74:a9:48:e6:57:c2:03:5c:
dd:33:94:e6:5a:4a:27:88:9b:8a:e2:77:0b:34:14:3f:eb:25:
e2:af:0d:96:44:bc:f0:4d:63:ca:da:64:cf:94:ff:56:0d:dd:
6b:3a:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:02:56 2026 by rpki-client