Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier: HuaiofIM/T5bNCxzW90XSC4cy0VbxMpgf4SuTDS2QrU=
Subject key identifier: A6:05:02:24:0D:A8:C5:B5:AE:AC:9A:1B:BA:BD:87:40:9A:D0:CE:0F
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer: /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial: 738C6AE9B9F6C453314D616A51D15A8581BDC0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number: E2
Signing time: Tue 09 Jun 2026 09:56:26 +0000
Manifest this update: Tue 09 Jun 2026 09:51:26 +0000
Manifest next update: Wed 10 Jun 2026 13:33:26 +0000
Files and hashes: 1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: AlddZuk7/279RmS3KWXMWuoNLLzBSsSzq6IX3dKrJkM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 13:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8c:6a:e9:b9:f6:c4:53:31:4d:61:6a:51:d1:5a:85:81:bd:c0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Validity
Not Before: Jun 9 09:51:26 2026 GMT
Not After : Jun 10 13:33:26 2026 GMT
Subject: CN=A60502240DA8C5B5AEAC9A1BBABD87409AD0CE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7e:4a:c6:fb:b8:a8:92:40:97:6d:13:38:b7:
d5:75:fb:ee:8c:91:d9:56:dc:21:c4:a8:d6:76:cc:
56:76:40:b3:37:f8:63:90:39:ab:bb:ff:e2:39:cd:
cd:3c:b2:98:88:21:33:f4:6c:4f:f4:24:f2:6f:51:
f6:da:2a:12:27:e7:3a:96:ac:f2:d6:10:0e:b4:66:
45:6b:ca:0c:6b:2b:b3:a5:93:3d:e0:36:d4:93:ef:
7e:26:b9:0d:05:b4:32:f2:07:69:5b:d2:a1:7c:65:
1f:79:05:ba:46:eb:46:db:8b:13:b8:15:5f:be:03:
9a:42:92:51:ef:81:e5:f5:09:e0:01:6c:b5:1a:32:
01:df:9f:10:88:c6:37:5f:18:41:3f:a2:59:d3:9b:
b1:86:09:54:c6:3e:2e:b3:b5:3f:e6:16:0c:32:94:
f3:e3:12:ce:8b:1e:16:84:59:32:f7:82:45:88:7e:
37:b8:76:c1:2c:b3:c8:fc:bf:c8:c0:b2:22:6b:81:
e9:23:36:a8:1b:cf:0a:02:11:50:7a:e9:bc:2d:02:
bb:5b:fc:64:52:47:a7:b7:a8:92:9f:dc:25:d3:9f:
07:b0:55:5e:ca:0a:e9:37:a6:36:c0:ea:b9:b7:fb:
7c:9a:b0:e4:14:29:67:5b:93:8f:ae:8a:a7:9a:7c:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:02:24:0D:A8:C5:B5:AE:AC:9A:1B:BA:BD:87:40:9A:D0:CE:0F
X509v3 Authority Key Identifier:
keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2d:52:bc:8f:59:ca:59:11:b4:48:30:b7:54:50:05:c4:19:
35:67:43:e7:af:34:ca:b4:4b:f3:8e:17:aa:09:49:73:f3:e7:
4d:e9:0e:a6:1c:35:9a:4e:9e:ab:3c:72:a7:db:12:01:c3:a1:
28:0e:4d:32:9b:8b:84:17:90:a3:6a:ac:75:4a:eb:e9:69:48:
0c:f2:68:7a:57:4a:ba:7a:6f:9c:c5:18:06:28:cf:5e:99:5c:
ee:2d:3b:aa:69:0b:01:ca:52:bb:ab:e0:2f:7d:3b:a4:33:60:
93:2c:bd:15:74:7d:90:5d:ae:9d:ce:c8:10:a3:e9:a3:94:81:
43:29:82:d9:64:3d:e2:3c:5a:7f:76:37:e2:20:c8:45:2c:25:
af:27:f1:d2:5a:ae:f4:45:96:1f:dc:4c:fd:c1:7b:89:22:5a:
4f:71:8a:5d:35:7a:a6:2a:6f:98:f8:2f:a9:cf:dd:cc:c1:9b:
bc:f1:9a:0d:65:9c:1c:7f:da:15:43:d9:e8:bb:c5:14:7e:4f:
70:55:c4:53:5a:73:ab:6e:0e:b0:c2:86:72:88:99:65:f5:70:
9f:0c:16:33:5d:b3:f9:fa:e3:65:12:e5:cd:7a:14:9b:1f:14:
5e:e0:a4:71:0d:e8:3c:a1:49:a7:c0:10:d8:85:bc:5d:39:f4:
4f:7f:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:48:34 2026 by rpki-client