Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: iPv2ZyJ+K8r2jAs7uwxuJI3F4jtvRksAnl7KdethDkI=
Subject key identifier: C1:FE:26:64:C3:D1:D7:6A:68:AD:C9:A6:E7:E3:CC:60:2A:29:3F:26
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 7347B00350997C1D2F686DCD1D93A79A5E7D360D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 04CD
Signing time: Thu 26 Mar 2026 08:33:09 +0000
Manifest this update: Thu 26 Mar 2026 08:28:09 +0000
Manifest next update: Fri 27 Mar 2026 11:47:09 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: NbBNCZsN+2MiaDIyGEPZN7Merpdz/NhSsuvoQeRl2Wo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:47:b0:03:50:99:7c:1d:2f:68:6d:cd:1d:93:a7:9a:5e:7d:36:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Mar 26 08:28:09 2026 GMT
Not After : Mar 27 11:47:09 2026 GMT
Subject: CN=C1FE2664C3D1D76A68ADC9A6E7E3CC602A293F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:d7:6e:2a:a7:70:67:a9:61:14:1e:15:83:
65:08:00:7f:36:fd:f9:cd:04:6d:d8:15:59:d1:05:
b6:a6:a4:65:d9:e1:87:6d:b0:c7:5e:3a:6a:5f:33:
fc:62:63:df:6b:36:41:ab:bd:1a:94:92:fd:3b:19:
a7:d2:20:45:0d:47:37:db:2d:7e:ee:aa:af:72:90:
24:89:0d:2f:8f:fb:43:87:d3:e3:5e:f2:f5:d5:bc:
45:c1:62:2c:bb:b8:5c:40:98:9c:0e:34:d8:8d:f4:
19:26:9d:01:3c:d7:e2:3b:32:30:37:fe:0d:96:a5:
21:09:51:53:8c:62:4a:72:ac:2b:11:eb:6f:04:ba:
ec:76:9d:12:5c:12:fe:b0:9a:5e:9d:b3:19:31:6a:
36:91:a6:79:f6:61:77:6f:c9:fb:61:ba:3e:1c:c4:
63:d6:52:57:2b:13:1c:0a:73:45:31:41:e9:9d:e1:
e0:6d:48:36:99:7b:36:f9:2a:3f:6a:9b:9f:c7:cf:
5b:00:14:6a:fb:c0:30:9b:82:fc:72:28:4e:1f:28:
86:e7:e5:51:07:e3:b9:5e:58:f4:49:d3:ea:17:35:
af:77:ff:ab:37:b9:a4:18:76:10:b1:a1:ad:ba:1f:
a8:82:7f:ac:e2:27:66:1b:39:e0:60:4b:b9:8a:43:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:26:64:C3:D1:D7:6A:68:AD:C9:A6:E7:E3:CC:60:2A:29:3F:26
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a3:b7:38:f1:ab:0f:4a:4a:55:11:c7:e7:88:f8:f1:fa:d0:
3d:fc:f1:f2:6d:45:cb:75:24:91:83:27:b3:91:24:d9:0e:27:
6d:df:ec:d7:1c:8e:ad:ed:1e:51:25:16:fa:0d:6e:c7:24:e4:
a5:90:b1:00:07:79:7b:9e:84:10:34:28:64:17:c9:a8:bf:31:
83:60:ac:3a:e1:2d:b9:bc:e5:f8:76:a3:17:23:61:ff:b5:ec:
0c:4d:9e:53:e1:31:05:47:2f:c2:5c:b1:0f:88:29:ea:ca:28:
b8:5a:00:6a:40:b7:92:39:e0:f6:c9:1d:90:5b:da:54:b9:75:
e3:8a:3b:3e:42:d8:67:92:fe:fb:19:d5:bf:af:60:44:a7:12:
09:f7:74:dd:ec:55:e9:ff:93:37:6c:44:46:de:c5:9d:e9:f6:
96:24:94:e2:83:55:a1:f0:5a:bb:e2:10:68:dd:d7:51:02:72:
e6:14:0f:10:19:9a:4b:d7:df:26:df:df:8e:e5:c0:0b:da:45:
68:9e:ac:7e:90:1a:39:2e:4c:77:68:a1:c1:ce:66:b0:d6:80:
a5:05:2e:02:f0:d4:7f:ef:dc:70:5d:71:3d:75:16:e9:87:1f:
1b:67:7d:3a:7d:37:57:57:68:12:50:f1:c0:30:d4:84:75:ef:
be:fb:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:28 2026 by rpki-client