Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
File: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft (raw, json)
Hash identifier: YBYmp+5O/EcFWQxIAsTVrxjz47JYWq9KbrioyA8VSkk=
Subject key identifier: 34:A7:31:2C:D8:6F:3E:4A:63:D9:69:0B:AA:1A:9E:3E:EA:C9:0B:0C
Authority key identifier: C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
Certificate issuer: /CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Certificate serial: 33289F0731D6DCF51940C790AFC3DAA4BD358595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
Manifest number: 9B
Signing time: Thu 16 Apr 2026 19:04:21 +0000
Manifest this update: Thu 16 Apr 2026 18:59:21 +0000
Manifest next update: Fri 17 Apr 2026 22:53:21 +0000
Files and hashes: 1: C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl (hash: JBF/YyFcYWKcl1EuJ+8mQ21j3oW6z6wweZl5Xitu2vE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:28:9f:07:31:d6:dc:f5:19:40:c7:90:af:c3:da:a4:bd:35:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f4e167a6b1633379b9981d8a565b7afb81dc90
Validity
Not Before: Apr 16 18:59:21 2026 GMT
Not After : Apr 17 22:53:21 2026 GMT
Subject: CN=34A7312CD86F3E4A63D9690BAA1A9E3EEAC90B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:77:58:65:7e:9f:8b:2e:a6:39:57:22:ec:
7d:6e:96:e2:ed:cf:52:87:83:89:5d:5a:35:24:43:
7c:a6:50:11:a3:e4:86:c1:9e:e9:b1:cd:a1:1a:ba:
b6:75:36:98:3b:e6:ef:c8:ee:0c:27:b0:0b:1f:23:
69:74:2e:c1:f4:0b:3f:f6:46:ed:47:a9:31:c6:95:
4f:d5:d1:64:43:21:3c:0b:5a:6d:62:a8:8e:14:03:
b4:5d:9f:aa:e4:f0:3e:8c:8d:8f:23:90:5b:c5:82:
cf:cc:4a:d6:8b:80:f4:b6:88:6b:9a:bd:69:44:bc:
a9:c3:b9:4c:7c:b5:83:ea:16:bd:65:e5:1e:cc:ba:
2d:ec:01:11:a5:2b:cb:9e:63:70:4d:32:20:10:ce:
93:5a:67:8c:fa:c2:cb:7a:87:84:25:2e:99:b4:37:
99:00:6a:65:a6:04:c6:45:26:95:f9:ab:1e:45:7c:
d6:4c:80:51:8e:98:49:22:5f:c7:54:28:ae:76:62:
c4:2c:c9:18:f7:94:0d:05:f4:ce:33:1e:0a:47:d1:
f1:f6:8f:5a:21:f4:8e:2e:f2:b1:25:4a:cf:1d:f4:
92:27:83:68:b1:5e:dd:ad:67:dd:ae:0e:d7:b9:3c:
af:91:9b:c1:f6:ee:34:fb:30:e1:0b:68:13:d1:60:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A7:31:2C:D8:6F:3E:4A:63:D9:69:0B:AA:1A:9E:3E:EA:C9:0B:0C
X509v3 Authority Key Identifier:
keyid:C3:F4:E1:67:A6:B1:63:33:79:B9:98:1D:8A:56:5B:7A:FB:81:DC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_ThZ6axYzN5uZgdilZbevuB3JA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/0/C3F4E167A6B1633379B9981D8A565B7AFB81DC90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:9c:5b:7c:ce:ea:fa:ed:7b:09:11:7c:ce:71:df:eb:7f:
cf:40:2f:08:89:c0:1d:8a:0c:79:05:a6:e8:6f:bc:b5:f6:94:
d6:ce:d9:dc:9c:a9:fe:c6:a4:0b:51:c2:91:d7:f5:3a:c0:67:
71:08:81:eb:72:f3:73:3c:45:48:4b:c0:2e:9a:59:8d:16:16:
13:ab:f6:a9:65:65:41:f2:95:64:49:ef:5a:c4:5f:c9:9b:f2:
75:19:45:75:04:e3:75:bd:9c:6e:02:ad:0d:ed:5c:b8:e1:17:
03:6c:bd:41:79:fd:cc:e6:e2:0a:2b:d3:6b:7d:c9:cd:18:1d:
b1:9c:a0:08:c3:ce:be:8d:3a:fa:4c:e6:30:27:b9:51:ce:5f:
c3:f5:0e:af:70:39:83:10:10:b2:15:2c:43:3b:21:c8:2b:fe:
60:8d:7d:88:a1:35:e1:55:43:56:b1:e1:8a:c4:3e:91:e5:1b:
aa:ac:27:79:a6:9f:fe:77:6f:de:58:dc:cf:f6:1d:c2:9a:09:
d4:55:cb:71:53:9e:a1:a5:3a:54:d1:d9:8d:b4:cc:7d:1f:2d:
2b:62:fb:4f:db:43:5c:9a:08:07:27:91:7d:0c:0b:90:12:a4:
c9:e8:11:42:18:66:10:b4:d1:fe:5a:dc:ce:00:38:ff:a3:17:
cd:27:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:52 2026 by rpki-client