Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier: FFNl/4LljJ/cKEUdwcX11y2Y6KnWRPsYje1CVXvpNA0=
Subject key identifier: 7D:1D:0A:D0:CD:C9:F1:C9:BA:C6:61:CB:0C:8C:C5:46:78:8B:50:0E
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer: /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial: 3013F25DC3F78EC00B99F24615F9E38251D0B489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number: 7E
Signing time: Thu 26 Mar 2026 09:23:23 +0000
Manifest this update: Thu 26 Mar 2026 09:18:23 +0000
Manifest next update: Fri 27 Mar 2026 10:45:23 +0000
Files and hashes: 1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: Q4+EIev1rrld4pwdOSTil6fnS6yjl4B+KEFYrF7BAtw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:13:f2:5d:c3:f7:8e:c0:0b:99:f2:46:15:f9:e3:82:51:d0:b4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Validity
Not Before: Mar 26 09:18:23 2026 GMT
Not After : Mar 27 10:45:23 2026 GMT
Subject: CN=7D1D0AD0CDC9F1C9BAC661CB0C8CC546788B500E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:89:4c:98:be:3f:28:96:59:c5:b9:f8:c3:
af:a9:f7:c8:52:e0:28:c8:c4:56:a2:9b:30:aa:2d:
73:9d:c6:dd:fb:7a:a4:47:18:d4:9e:3e:45:33:26:
1a:cb:cd:49:26:59:46:f3:ef:99:44:f0:d3:84:f5:
47:0f:65:35:d1:28:cf:9a:06:5f:96:9c:2e:d9:3d:
99:84:62:3c:2e:08:30:7c:3d:60:e6:bf:ec:80:75:
7b:b7:17:10:c9:90:82:be:80:0d:d5:af:d7:3b:e7:
20:04:03:92:41:a9:f6:b5:a8:db:af:fd:27:8e:60:
80:d9:18:eb:a6:81:21:f4:78:df:f6:af:a0:78:dc:
0e:50:17:33:07:45:82:03:61:38:94:e9:51:30:a8:
b7:dd:98:6c:29:eb:39:c9:1d:73:ac:1b:b9:12:36:
35:92:a4:9d:bb:ea:42:a7:c2:ff:e5:4e:d0:c1:76:
3d:be:e5:a7:f7:b7:c2:25:f9:c0:28:49:53:37:a1:
35:7c:f4:8c:ce:11:04:20:38:81:50:c6:3b:a7:6f:
e4:26:04:a1:2c:da:62:cd:1c:10:1b:46:f4:4f:3a:
2f:6e:cb:5d:36:b1:82:ac:60:c6:e0:3d:68:dc:48:
f7:51:e0:5a:4a:e9:07:52:70:95:d5:10:7d:26:29:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:0A:D0:CD:C9:F1:C9:BA:C6:61:CB:0C:8C:C5:46:78:8B:50:0E
X509v3 Authority Key Identifier:
keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c1:8d:92:1e:4c:ec:ac:3c:5b:d0:a7:8d:d8:c6:1d:3b:3d:
e9:8d:3c:53:12:48:fe:eb:9b:a9:33:77:1b:0b:96:a0:80:02:
0d:1a:54:0d:24:87:48:eb:30:7c:76:e0:e4:31:06:a4:14:04:
e3:fe:b8:af:65:dd:2d:fc:94:21:78:ad:9d:ef:ab:3d:80:12:
78:cd:41:62:92:0b:83:61:96:df:5c:19:63:67:0f:74:4e:a1:
b0:ee:f5:db:96:ae:81:04:5e:da:f0:50:68:c8:80:ac:47:fc:
c4:13:fb:d4:97:24:90:74:7c:d5:01:7a:df:bb:6f:4f:d3:5a:
99:be:15:43:c6:e0:b9:bd:75:8d:63:c4:a9:91:ed:84:85:97:
47:b9:3a:3e:6f:62:a4:94:31:e3:84:37:03:fb:c4:16:de:a0:
ac:47:91:08:04:3d:4e:45:d3:7a:eb:43:0e:41:56:40:6f:7f:
e4:51:e9:c2:53:a4:12:e7:53:73:ad:1c:8f:b5:15:23:ce:ba:
0f:57:ac:ec:de:ae:85:64:59:2e:52:15:bb:7e:ee:e4:41:e9:
c6:8a:32:c8:fa:ec:26:e9:e2:e6:3b:d0:99:78:77:8b:3d:2e:
d3:75:76:79:fd:d2:e5:c2:93:08:37:06:96:27:fd:2f:91:2f:
d6:44:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:40 2026 by rpki-client